Senior Cyber Security Engineer - Identity and Device Management, & Networking Security

Description

The company is building a hands-free driver assistance platform that it develops entirely in-house, and the platform will debut on a new vehicle in 2027.

The company is a subsidiary of a major automaker but runs independently and works on automated driving technology at startup speed. It is headquartered in Pittsburgh, with engineering centers in Dearborn, Mich., and Palo Alto, Calif.

You will work alongside specialists in machine learning, robotics, cloud platforms, mapping, sensors, compute systems, test operations, and systems and safety engineering.

The Enterprise Cyber Security team protects corporate systems, intellectual property, and employee data. The team is close-knit, and its members hold strong roles across the company.

As the hands-on technical lead for securing high performance computing and virtualization environments, you will need a deep grasp of the infrastructure, the network architecture, and the operations that depend on them, including software, hardware, network engineering, fleet operations, and administration. You will design, implement, automate, and keep improving the security posture.

Responsibilities

• Design, implement, and deploy identity and device management, using Entra or Okta and MDM tools such as Intune.
• Design and engineer network security using sound software, network, and infrastructure practices.
• Advise on and promote security practices for DMZ designs, NAC/NAP, lateral isolation, and multi-site data movement, within network tooling such as Palo Alto, Fortinet, and F5.
• Deliver projects on schedule, within budget, and with high quality and secure configurations.
• Review current and new deployments and architecture designs for flaws and improvements, and push for controls that meet functional and operational needs.
• Partner with the Cloud Platform, IT, and Product teams to research, design, and build security solutions and strategies suited to the company's needs.
• Take part in data center and network security initiatives: assess existing access controls and add technical measures that strengthen security.
• Document findings, compare options, run threat and risk assessments, and build proofs of concept that help the team choose between designs.
• Design and build automation and orchestration for device controls and service access.
• Supply inputs to dashboards and report metrics on the state of the security posture.
• Own projects and engagements from planning through completion.
• Deploy solutions hands-on, both independently and as part of a team.
• Mentor team members and engineering staff, and transfer skills to them.
• Help run supercomputing system administration: monitor proactively, analyze, and fix security issues; write scripts for security checks and tools that support cloud and virtualized systems and development environments; write playbooks, runbooks, and troubleshooting guides; and contribute to network and infrastructure designs where security and functionality are equal priorities.

Requirements

• A Bachelor's degree in computer engineering, computer science, cyber security, or a related field and 4+ years of relevant experience, or a Master's degree and 2+ years of relevant experience.
• Strongly prefer: 8+ years of related experience, or 6 years with a Master's degree, as an identity and device management engineer and/or network security architect or engineer, with solutions actively deployed from scratch to production.
• 2+ years of experience in vulnerability management, adjusting risk ratings and severity based on internal factors for cloud and other infrastructure.
• Experience with Lustre, Kerberos, and Linux administration.
• Proficiency in Bash, Python, Go, or Java to build production-grade services and automation tools that integrate with CI/CD.
• Hands-on experience with infrastructure as code, such as Terraform, CloudFormation, Ansible, or similar, to automate cloud resources and virtualized systems and to review infrastructure deployments.
• Ability to learn new technologies quickly and to juggle several responsibilities at once.
• Hands-on experience patching and hardening Linux, macOS, and Windows systems, including clients, servers, images, and containers.
• Solid knowledge of network protocols and firewall management, with experience configuring and tuning them to secure internal networks and perimeters.
• Critical thinking and a holistic view of cyber security, with the ability to balance security requirements against mission needs and collaborate across teams.
• Excellent organization and time management, with the autonomy to work independently, the teamwork to collaborate, and a professional approach.
• Experience architecting and deploying scalable security services and workloads in cloud-native and virtualized environments.
• Ability to deploy device management solutions that control access to company resources.
• Understanding of engineering limits, with the ability to guide teams in securing their deployments while meeting performance, budget, and schedule goals.
• An independent, take-charge attitude, along with open-mindedness, creative thinking, willingness to take calculated risks, and sound decision-making.
• Strong understanding of cyber security standards such as ISO 27001 and NIST 800-53.
• Experience with Jenkins: a plus.
• Experience with Zero Trust Architecture principles and implementations.
• Exposure to data governance, secure data movement, and storage lifecycle management.
• Proven verbal, written, presentation, and communication skills, including technical diagramming.
• A sense of camaraderie, compassion, and high energy.

Conditions

This is a full-time position.

The expected base salary range in California is $160,000 - $240,000 USD. Actual starting pay depends on job-related factors, including exact work location, experience, relevant training and education, and skill level.

Employees are eligible for annual bonus programs, equity compensation, and company benefits, subject to eligibility requirements.

You must be legally authorized to work in the United States on a permanent basis. Employment eligibility will be verified at hire.

Benefits

• Competitive compensation packages.
• High-quality individual and family medical, dental, and vision insurance.
• Health savings account with an optional employer match.
• Employer-matched 401(k) with immediate vesting.
• Employer-paid group term life insurance, with the option to buy voluntary life insurance.
• Paid parental leave and an adoption or surrogacy support program.
• Paid medical leave.
• Unlimited vacation and 15 paid holidays.
• Daily lunches, snacks, and drinks provided at all office locations.
• Pre-tax accounts for health costs and dependent care.
• Pre-tax commuter benefits.
• Monthly wellness stipend.
• Backup child and elder care program.
• Reimbursement for professional development.
• Employee assistance program.
• Discounts on legal services, identity theft protection, pet insurance, and more.
• Team and company social activities, including employee resource groups, a quarterly team activity stipend, and wellness initiatives.