Senior Cyber Security Engineer - Identity and Device Management, & Networking Security
Senior
Cyber Security Engineer
Cybersecurity Tools
Data Security
Dmz Security
Endpoint Security
Identity and Access Management
Identity And Device Management
Information Security
InfoSec
Network Access Control
Network Security
Security Architecture
Security Automation
Security Engineering
Solution Architecture
Job Description
Latitude AI is hiring a Senior Cyber Security Engineer to lead hands-on security engineering for identity, device management, and networking security across HPC and virtualization environments.
Responsibilities
- Design, implement, and deploy Identity and Device Management using Entra/Okta and MDM platforms such as Intune
- Engineer Network Security with best practices across software, network, and infrastructure engineering
- Advocate security controls for DMZ architectures, NAC/NAP, lateral isolation, and multi-site data movement in network management tooling (Palo Alto, Fortinet, F5)
- Deliver security projects on schedule and with strong quality, including secure configuration standards
- Review existing and new deployments and architecture designs to identify design flaws and recommend stronger security controls aligned to functional and operational needs
- Collaborate with Cloud Platform, IT, and Product teams to research, design, and build security solutions and deployment strategies for business requirements
- Participate in Data Center and Network Security initiatives, assessing security access controls and implementing supplemental technical solutions
- Document findings, run comparisons, perform threat and risk assessments, and execute Proof of Concepts to support design decisions
- Develop, review, and design automation and orchestration for security aspects including device controls and access to services
- Provide security posture inputs via dashboards and reporting metrics
- Plan, execute, and follow through on projects and engagements independently
- Perform hands-on solution deployment, working independently and with the team
- Mentor team members and support engineering staff with knowledge transfer
- Proactively monitor, analyze, and remediate system security issues
- Write scripts to automate security checks and create tools that improve support for cloud, virtualized systems, and development environments
- Develop security playbooks/runbooks for operations and troubleshooting documentation
- Evaluate and contribute to network and infrastructure solution designs with security and functionality as implementation pillars
- Moderate and contribute to Supercomputing System Administration initiatives supporting the team
Requirements
- Bachelor’s degree in Computer Engineering, Computer Science, Cyber Security, or related field and 4+ years relevant experience (or Master’s with 2+ years relevant experience)
- Strong preference for 8+ years related experience, or 6 years with a Master’s degree, including experience as an Identity and Device Management Engineer and/or Network Security Architect/Engineer deploying to production from scratch
- 2+ years of vulnerability management experience including risk rating/severity adjustment for cloud and other infrastructure
- Experience with Lustre, Kerberos, and Linux Administration
- Proficiency in Bash, Python, Go, or Java to build production-grade automation and services integrated into CI/CD
- Hands-on experience with Infrastructure as Code (IaC) to automate cloud resources and virtualized systems, with familiarity including Terraform, Cloud Formation, Ansible, or others
- Ability to learn new technologies quickly and prioritize multiple responsibilities
- Hands-on experience patching and hardening Linux, MacOS, and Windows systems (clients and servers), including images and containers
- Proficiency with network protocols and firewall management, including configuration and optimization for internal and perimeter security
- Critical thinking and holistic security perspective balancing security needs with mission requirements and cross-team collaboration
- Exceptional organizational and time management skills with proven autonomy and professional collaboration
- Strong experience architecting and deploying scalable security services and workloads in cloud-native and virtualized environments
- Ability to deploy device management solutions to control access to company solutions
- Understanding of engineering design constraints to guide teams in securing deployments for performance, budget, and timing
- Independent, take-charge approach with calculated risk taking and informed decision making
- Strong understanding of ISO27001 and NIST 800-53
- Experience with Jenkins is a plus
- Experience with Zero Trust Architecture (ZTA) principles and implementations
- Exposure to data governance, secure data movement, and storage lifecycle management
- Demonstrated strength in verbal, written, and presentation communication, including technical diagramming
- Sense of comradery, compassion, and strong passion/energy
Technologies
- Entra, Okta, Intune
- Palo Alto, Fortinet, F5
- DMZ architectures, NAC/NAP, lateral isolation
- Lustre, Kerberos, Linux
- Bash, Python, Go, Java
- CI/CD
- Infrastructure as Code (IaC): Terraform, Cloud Formation, Ansible
- MacOS, Windows
- NIST 800-53, ISO27001
- Zero Trust Architecture (ZTA)
- Jenkins
Benefits
- Competitive compensation packages
- High-quality medical, dental, and vision insurance for individuals and families
- Health savings account with employer match
- Employer-matched 401(k) retirement plan with immediate vesting
- Employer-paid group term life insurance and optional voluntary life insurance
- Paid parental leave and Adoption/Surrogacy support program
- Paid medical leave
- Unlimited vacation and 15 paid holidays
- Daily lunches, snacks, and beverages at office locations
- Pre-tax spending accounts for healthcare and dependent care
- Pre-tax commuter benefits
- Monthly wellness stipend
- Backup child and elder care program
- Professional development reimbursement
- Employee assistance program
- Discounted programs including legal services, identity theft protection, and pet insurance
- Employee resource groups, quarterly team activity stipend, and wellness initiatives
Team
- The Enterprise Cyber Security team focuses on resilience of the corporate environment, protecting corporate systems, IP, and employee data
Location: Palo Alto, CA (onsite)
Compensation: USD 160,000 - 240,000 per year