Dmz Security Engineer Jobs

1 job found

Today

Senior Cyber Security Engineer - Identity and Device Management, & Networking Security

Latitude AI Palo Alto, CA

Palo Alto, CA

Today

$160k - $240k/yr Full time Senior Cyber Security Engineer Cybersecurity Tools

Apply Now

Job Description

Latitude AI is hiring a Senior Cyber Security Engineer to lead hands-on security engineering for identity, device management, and networking security across HPC and virtualization environments.

Responsibilities

Design, implement, and deploy Identity and Device Management using Entra/Okta and MDM platforms such as Intune
Engineer Network Security with best practices across software, network, and infrastructure engineering
Advocate security controls for DMZ architectures, NAC/NAP, lateral isolation, and multi-site data movement in network management tooling (Palo Alto, Fortinet, F5)
Deliver security projects on schedule and with strong quality, including secure configuration standards
Review existing and new deployments and architecture designs to identify design flaws and recommend stronger security controls aligned to functional and operational needs
Collaborate with Cloud Platform, IT, and Product teams to research, design, and build security solutions and deployment strategies for business requirements
Participate in Data Center and Network Security initiatives, assessing security access controls and implementing supplemental technical solutions
Document findings, run comparisons, perform threat and risk assessments, and execute Proof of Concepts to support design decisions
Develop, review, and design automation and orchestration for security aspects including device controls and access to services
Provide security posture inputs via dashboards and reporting metrics
Plan, execute, and follow through on projects and engagements independently
Perform hands-on solution deployment, working independently and with the team
Mentor team members and support engineering staff with knowledge transfer
Proactively monitor, analyze, and remediate system security issues
Write scripts to automate security checks and create tools that improve support for cloud, virtualized systems, and development environments
Develop security playbooks/runbooks for operations and troubleshooting documentation
Evaluate and contribute to network and infrastructure solution designs with security and functionality as implementation pillars
Moderate and contribute to Supercomputing System Administration initiatives supporting the team

Requirements

Bachelor’s degree in Computer Engineering, Computer Science, Cyber Security, or related field and 4+ years relevant experience (or Master’s with 2+ years relevant experience)
Strong preference for 8+ years related experience, or 6 years with a Master’s degree, including experience as an Identity and Device Management Engineer and/or Network Security Architect/Engineer deploying to production from scratch
2+ years of vulnerability management experience including risk rating/severity adjustment for cloud and other infrastructure
Experience with Lustre, Kerberos, and Linux Administration
Proficiency in Bash, Python, Go, or Java to build production-grade automation and services integrated into CI/CD
Hands-on experience with Infrastructure as Code (IaC) to automate cloud resources and virtualized systems, with familiarity including Terraform, Cloud Formation, Ansible, or others
Ability to learn new technologies quickly and prioritize multiple responsibilities
Hands-on experience patching and hardening Linux, MacOS, and Windows systems (clients and servers), including images and containers
Proficiency with network protocols and firewall management, including configuration and optimization for internal and perimeter security
Critical thinking and holistic security perspective balancing security needs with mission requirements and cross-team collaboration
Exceptional organizational and time management skills with proven autonomy and professional collaboration
Strong experience architecting and deploying scalable security services and workloads in cloud-native and virtualized environments
Ability to deploy device management solutions to control access to company solutions
Understanding of engineering design constraints to guide teams in securing deployments for performance, budget, and timing
Independent, take-charge approach with calculated risk taking and informed decision making
Strong understanding of ISO27001 and NIST 800-53
Experience with Jenkins is a plus
Experience with Zero Trust Architecture (ZTA) principles and implementations
Exposure to data governance, secure data movement, and storage lifecycle management
Demonstrated strength in verbal, written, and presentation communication, including technical diagramming
Sense of comradery, compassion, and strong passion/energy

Technologies

Entra, Okta, Intune
Palo Alto, Fortinet, F5
DMZ architectures, NAC/NAP, lateral isolation
Lustre, Kerberos, Linux
Bash, Python, Go, Java
CI/CD
Infrastructure as Code (IaC): Terraform, Cloud Formation, Ansible
MacOS, Windows
NIST 800-53, ISO27001
Zero Trust Architecture (ZTA)
Jenkins

Benefits

Competitive compensation packages
High-quality medical, dental, and vision insurance for individuals and families
Health savings account with employer match
Employer-matched 401(k) retirement plan with immediate vesting
Employer-paid group term life insurance and optional voluntary life insurance
Paid parental leave and Adoption/Surrogacy support program
Paid medical leave
Unlimited vacation and 15 paid holidays
Daily lunches, snacks, and beverages at office locations
Pre-tax spending accounts for healthcare and dependent care
Pre-tax commuter benefits
Monthly wellness stipend
Backup child and elder care program
Professional development reimbursement
Employee assistance program
Discounted programs including legal services, identity theft protection, and pet insurance
Employee resource groups, quarterly team activity stipend, and wellness initiatives

Team

The Enterprise Cyber Security team focuses on resilience of the corporate environment, protecting corporate systems, IP, and employee data

Location: Palo Alto, CA (onsite)

Compensation: USD 160,000 - 240,000 per year

View full job page →

Get Dmz Security Engineer Jobs alerts

New Dmz Security Engineer Jobs, daily.