66 jobs found

Job Description Job Description Company Description Renesas is a global semiconductor company delivering innovative embedded processing, analog, power, and connectivity solutions. This role supports advanced power management products for demanding compute, AI, datacenter, and infrastructure applications. Job Description Renesas is seeking an experienced Principal Digital Engineer to define scalable verification and validation methodologies for advanced digital power management products used in AI, datacenter, and high-performance computing applications. This role focuses on the system-level verification layer that connects analog behavior, digital implementation, firmware interaction, software tooling, validation data, and customer-facing performance. The successful candidate will help define what must be proven, how it should be measured, and how results should be correlated across models, simulation, emulation, bench validation, and silicon. The ideal candidate combines mixed-signal engineering depth with verification strategy, automation mindset, and the ability to align cross-functional teams around clear, repeatable evidence. WHY THIS ROLE MATTERS Define verification strategy for complex mixed-signal power management systems. Improve confidence in architecture decisions by connecting requirements, models, tests, and measured data. Help execution teams converge faster by turning expert validation knowledge into reusable verification patterns. KEY RESPONSIBILITIES Define mixed-signal verification strategy for digital power controllers and related power management products. Develop system-level verification plans covering sensing paths, ADC/DAC behavior, PWM paths, telemetry, compensation, control-loop behavior, latency, quantization, noise, limits, sequencing, and corner behavior. Establish correlation methodologies across behavioral models, RTL, analog/mixed-signal simulations, emulation, bench validation, and silicon measurements where applicable. Define measurable pass/fail criteria, coverage expectations, reference scenarios, and evidence requirements for architecture and product decisions. Collaborate with systems, analog design, digital design, firmware, design verification, validation, applications, and software/tool teams. Support automation of verification results, including consistent metrics, plots, waveforms, summaries, and structured outputs for engineering review. Identify verification gaps early and help teams close ambiguity between system intent, implementation behavior, and validation evidence. Document verification methodology, interface assumptions, test intent, correlation expectations, and residual risks clearly for technical and leadership audiences. Qualifications Bachelor's degree in Electrical Engineering, Computer Engineering, or a related technical discipline. 8+ years of experience in mixed-signal verification, semiconductor validation, systems engineering, analog/mixed-signal design, design verification, or related product development. Strong understanding of analog and mixed-signal building blocks such as ADCs, DACs, amplifiers, references, sensing paths, timing circuits, PWM paths, or power stages. Experience defining verification plans, validation methodologies, measurable results, and technical evidence for complex electronic systems. Ability to work across analog, digital, firmware, validation, applications, and software/tool teams. Strong communication skills and ability to explain complex cross-domain verification issues clearly. PREFERRED QUALIFICATIONS Experience with digital multiphase controllers, DC/DC converters, voltage regulators, power management ICs, or high-current datacenter power applications. Experience with model-to-silicon correlation, behavioral modeling, real-number modeling, Verilog-AMS, SystemVerilog RNM, MATLAB, Python, SIMPLIS, or equivalent environments. Experience with verification automation, data analysis, test infrastructure, dashboards, databases, or API-driven workflows. Familiarity with control loops, stability, latency, quantization, noise, telemetry, and power-system measurement techniques. Experience creating reusable verification frameworks that improve quality and reduce repeated manual test setup. Additional Information Renesas is an embedded semiconductor solution provider driven by its Purpose, To Make Our Lives Easier . With a global team of over 21,000 engineers and problem solvers in more than 30 countries, we offer the opportunity to work on world leading technology for Automotive, Industrial, Infrastructure, and IoT, shaping a safer, healthier, greener, and smarter future. At Renesas, TAGIE is our culture, grounded in being Transparent, Agile, Global, Innovative, and Entrepreneurial. It shapes how we work, grow and deliver on our purpose together. This collaborative spirit and mindset drive our semiconductor technology to transform industries and impact millions of lives. We believe in rewarding our employees with a competitive benefits package alongside their salary. More information will be provided during the hiring process. Are you ready to join our team and shape the future with us? Renesas Electronics is an equal opportunity and affirmative action employer, committed to supporting diversity and fostering a work environment free of discrimination on the basis of sex, race, religion, national origin, gender, gender identity, gender expression, age, sexual orientation, military status, veteran status, or any other basis protected by law. For more information, please read our Diversity & Inclusion Statement. Renesas Electronics deals with dual-use technology that is subject to U.S. export controls regulations. Under these regulations it may be necessary for Renesas to obtain U.S. government export license prior to release of technology to certain persons. The decision whether or not to file or pursue an export license application is at the sole discretion of Renesas.

Job Description Job Description Antora Energy delivers affordable, reliable energy to industry, data centers, and the grid. Our thermal batteries turn low-cost electricity into always-on heat and power, without supply-constrained critical minerals or multi-year construction timelines. We are growing our company with people who put team and mission first, value connection through laughter and joy, and work with humility and openness. We are committed to building a diverse, passionate, and creative team dedicated to a future powered by abundant, clean, low-cost energy. Position Summary We are seeking a Staff or Principal Applications Engineer to establish Antora's applications engineering function - the senior technical authority for the customer opportunities that don't fit a standard template. Antora's standard configurations run through repeatable tools and playbooks operated by our business development team; you will own everything that doesn't: the first-of-a-kind applications, constrained sites, and novel configurations of Antora's thermal batteries across industrial process heat and utility-scale power for data centers and the grid, in the U.S. and internationally. When we dive into a new customer application, you are the engineer who joins the first call, earns the trust of senior customer technical leadership, and creatively develops the solution around Antora's product: running technical discovery, sizing and configuring the system, producing conceptual site layouts and heat and power integration designs, setting the technical basis for performance guarantees, and building the cost estimates behind commercial contracts and investment decisions, then handing a clean basis of design to our project engineering team for detailed design and execution. You are also the technical conscience on what Antora commits to, with the standing and judgment to hold the line on feasibility, schedule, and performance so we win deals we can actually deliver. This role will report to the VP of Product Management within Antora's Commercial team. Roles & Responsibilities Serve as the technical lead for Antora's most complex and novel customer opportunities across industrial heat, combined heat & power, and power applications - joining business development on sales calls and owning the technical conversation with customer engineering/operations teams and executives Run technical discovery on novel applications: own customer data requests (load profiles, steam conditions, utility data, plot plans, one-lines) and site walkdowns, and lead first-pass technical screening where no playbook exists Size and configure Antora's product at the edges of its configurable envelope (and beyond), creatively optimizing trade-offs across performance, cost, schedule, and site constraints Produce conceptual site layouts, heat and power integration designs, and site boundary-condition definitions Own configuration of complex customer, grid, and project interfaces for novel applications - including, but not limited to, controls integration, product-side electrical configuration, product-to-interconnection handoff, cybersecurity requirements, and energy market operations coordination Own performance-guarantee assumptions and proposal-stage analysis/cost estimates for commercial contracts and internal approvals with clear judgment on execution and economic impact Prepare basis-of-design handoff packages (configuration specs, layouts, integration concepts, assumptions, and risks) that enable project engineering to pick up projects cleanly for detailed design (FEED and beyond) Partner closely with product management to co-define where the standard product envelope ends and bespoke applications work begins, and keeping executive stakeholders aligned on what we're committing to Act as the technical escalation point and reviewer for the sales engineers who run standard opportunities - mentoring them and together with product management, setting the technical standards they work to Channel voice-of-customer and market intelligence back to product management to drive product changes that improve performance, customer satisfaction, and addressable market Codify design judgment into playbooks, reference designs, and design rules, partnering with software, analytics, and product management to turn them into tools and standard product requirements where applicable Typical travel of 25%, potentially including some international travel Key Qualifications Bachelor's or equivalent in mechanical, chemical, or electrical engineering (or related field) and 12+ years of experience (or 8+ with a relevant advanced degree) across utility-scale energy projects, large industrial facilities, and/or energy equipment applications Experience leading first-of-a-kind industrial and power projects, including managing executive stakeholders in external organizations Deep expertise in power systems (MV/HV electrical, synchronous and inverter-based resources, grid interconnection) with working fluency in industrial process/thermal systems (steam and utility systems, heat integration) - or the reverse - with genuine depth on at least one side and the range to engage customer engineers credibly in both Experience with energy storage and/or utility-scale energy projects, including site layout and equipment configuration Familiarity with the codes and standards governing industrial energy facilities - NFPA, NEC, ASME, API, UL, etc. Comfortable producing and reviewing PFDs, one-line diagrams, and site layout drawings Strong techno-economic intuition and commercial judgment - instinctively connects configuration trade-offs and performance guarantees to project economics Exceptional customer-facing communication and presentation skills AI-fluent: high level of comfort with leading AI tools (Claude, ChatGPT, Gemini, etc.) and strong instincts for which workflows to automate Self-directed operator who thrives owning a small number of deep, high-stakes projects in a fast-paced startup environment Additional Qualifications Desired Experience spanning both thermal/process and power/grid project environments Direct experience with data-center power, microgrids, or hybrid solar-plus-storage systems Prior applications, sales, or solutions engineering role at an energy technology OEM Solid understanding of energy market fundamentals and battery dispatch or techno-economic modeling Python proficiency Experience working with or for EPC firms Familiarity with industrial controls/SCADA integration and operational-technology (OT) cybersecurity Experience working on projects in international markets (particular preference for EU and Australia) Familiarity with European and/or Australian codes and standards Experience building commercial tools and automations PE license in a related discipline Work Location: Remote, US Salary Range: $175,000 USD - $240,000 USD Salary Basis: Annual Please note that the salary range listed above reflects Antora Energy's estimated pay for this position. The actual salary offered will be within the posted range and determined based on several factors including but not limited to a candidate's experiences, credentials and expertise, as they pertain to the position's requirements. In addition to a competitive base salary, Antora Energy's Total Rewards program includes equity compensation in the form of stock options, a premium health benefits package with life and disability insurance, a 401K plan with employer contributions, flexible spending accounts, and an industry leading paid-time-off policy that features flexible and inclusive holiday observance, as well as paid volunteer time off. When it comes to stopping climate change, we need everyone. We believe that having a diversity of backgrounds and experiences strengthens all of us, and we strive to create an environment where every one of us is empowered to create meaningful change.

Job Description Job Description Zoox's Network Security team architects and defends the digital borders of the company - from corporate offices to engineering labs and product/mission environments. As a Network Security Engineer, you will design, implement, and operate security controls across Zoox's enterprise, OT networks, and cloud infrastructure spanning on-premises data centers and public cloud environments (AWS, GCP), partnering closely with Network Engineering, IT, Product Security, and Software Engineering teams. In This Role, You Will Design, implement, and maintain secure hybrid/multi-cloud network architectures (AWS/GCP, CloudWAN); enforce zero-trust access controls and network segmentation across corporate, data center, lab, and edge environments; develop and maintain related policies, standards, and architecture diagrams Own and operate next-generation firewall platforms (Palo Alto Networks, Fortinet), managing policy architecture, segmentation, NAT, URL filtering, SSL/TLS decryption, and threat prevention tuning Architect, operate, and own the lifecycle of secure remote access solutions (VPN, ZTNA, site-to-site tunnels), ensuring high availability, certificate-based authentication, and integration with identity providers (SAML, Entra ID) Drive automation and Infrastructure-as-Code (IaC) using Terraform, Python, CI/CD, and REST APIs for configuration management, firewall policies, and security baselines; integrate LLM-based tools to streamline operational tasks and reduce manual toil Oversee security operations including 24/7 network security monitoring, traffic analysis, threat detection, vulnerability assessments, and remediation; support compliance requirements by conducting security reviews for new projects and infrastructure changes Drive 802.1X/certificate-based Network Access Control (NAC) initiatives across wired and wireless environments Collaborate with team members and contribute to cross-functional security initiatives with Product Security, SRE, IT, and Software Engineering teams Qualifications 6+ years of network security engineering experience securing enterprise, cloud, and OT/lab environments Platform Expertise: Deep, hands-on expertise in next-gen firewalls (Palo Alto, Fortinet), AWS NFW, WAFs, IDS/IPS, NAC/802.1X, PKI, VPN, and ZTNA solutions (Zscaler, Netskope, Prisma Access, or equivalent) Technical Knowledge: Strong understanding of core network protocols (TCP/IP, BGP, OSPF, VLAN, 802.1X, TLS/PKI) and cloud networking security principles (AWS, GCP, or Azure) Automation: Hands-on experience with IaC and automation tooling including Terraform, Python, CI/CD pipelines, and REST APIs Security Operations: Experience with network security monitoring, threat detection, and security operations tooling (SIEM, IDS/IPS, vulnerability management platforms), including integration with network controls Compliance: Proven experience supporting major compliance initiatives (NIST 800-53, CSF 2.0, ISO 27001), including control implementation and evidence collection Bonus Qualifications Experience in autonomous vehicle, robotics, IT/OT or automotive environments Certifications: PCNSE, AWS Security Specialty, CCNA Experience experimenting with or deploying AI/ML-based security capabilities (e.g., anomaly detection, behavioral analytics, LLM-driven copilots) in network or cloud security workflows There are three major components to compensation for this position: salary, Amazon Restricted Stock Units (RSUs), and Zoox Stock Appreciation Rights. A sign-on bonus may be offered as part of the compensation package. The listed range applies only to the base salary. Compensation will vary based on geographic location and level. Leveling, as well as positioning within a level, is determined by a range of factors, including, but not limited to, a candidate's relevant years of experience, domain knowledge, and interview performance. The salary range listed in this posting is representative of the range of levels Zoox is considering for this position. Zoox also offers a comprehensive package of benefits, including paid time off (e.g. sick leave, vacation, bereavement), unpaid time off, Zoox Stock Appreciation Rights, Amazon RSUs, health insurance, long-term care insurance, long-term and short-term disability insurance, and life insurance. About Zoox Zoox is developing the first ground-up, fully autonomous vehicle fleet and the supporting ecosystem required to bring this technology to market. Sitting at the intersection of robotics, machine learning, and design, Zoox aims to provide the next generation of mobility-as-a-service in urban environments. We're looking for top talent that shares our passion and wants to be part of a fast-moving and highly execution-oriented team. Follow us on LinkedIn Accommodations If you need an accommodation to participate in the application or interview process please reach out to or your assigned recruiter. A Final Note: You do not need to match every listed expectation to apply for this position. Here at Zoox, we know that diverse perspectives foster the innovation we need to be successful, and we are committed to building a team that encompasses a variety of backgrounds, experiences, and skills. We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Job Description Job Description Network Security EngineerEngineer Secure, Resilient Network Services That Support Mission-Critical OperationsGeorgia System Operations Corporation (GSOC) is seeking a Network Security Engineer to design, implement, secure, and operate corporate network services and cybersecurity tools that enable reliable, protected business operations.This hands-on role combines enterprise network engineering and cybersecurity expertise across datacenter, campus, remote-site, internet-edge, and approved cloud environments. The Network Security Engineer helps safeguard availability, performance, secure access, and security visibility while advancing resilient, supportable, and automated network and security services.This opportunity is ideal for an experienced network and security professional who enjoys solving complex technical problems, strengthening controls, supporting incident response, mentoring peers, and collaborating across infrastructure, cybersecurity, application, service desk, and vendor teams. This is an onsite position and it is not eligible for visa sponsorshipWhat You'll DoAs a Network Security Engineer, you will engineer and support the network and network-focused security services that connect and protect enterprise users, systems, and sites.You will:Design, deploy, and support datacenter and campus switching, routing, VLANs, VRFs, high availability, capacity planning, and network segmentation.Administer next-generation firewalls, security zones, NAT, threat-prevention services, firewall policy lifecycle, and least-privilege access controls.Engineer WAN, internet-edge, remote-site, remote-access VPN, and site-to-site VPN connectivity, including integrations with identity, MFA, and device-trust services.Design and support corporate and guest wireless, controllers, access points, RF performance, 802.1X, network access control, device profiling, and secure authentication.Configure load balancers, virtual servers, pools, health monitors, persistence, TLS termination, and high-availability services.Manage the network-facing certificate lifecycle and PKI integrations.Engineer and operate secure web and DNS controls, network detection and response, security logging, SIEM integrations, and security-control health monitoring.Partner with the Security Operations Center on alert tuning, investigations, evidence gathering, and operational security use cases.Support secure DNS, DHCP, and IP address management and maintain telemetry, flow data, logging, alerting, packet analysis, and service dashboards.Maintain secure configuration baselines, backups, firmware and software lifecycle, and remediation of network-device and security-tool vulnerabilities.Automate repeatable work using APIs, scripting, and infrastructure-as-code practices.Develop and test network and security-platform recovery and failover capabilities.Prepare change and rollback plans and provide incident escalation, containment support, root-cause analysis, and vendor coordination. This role also:Works independently within established standards and change processes.Provides technical leadership for projects and mentors peers.Participates in technology evaluations, proof-of-concepts, cross-functional initiatives, backup support, and knowledge transfer. What You BringBachelor's degree in Information Technology, Computer Science, Engineering, Cybersecurity, or a related field. Equivalent combination of education, training, and directly related work experience may be considered.Ideally 5+ years of progressive experience supporting enterprise network and network-security infrastructure, including switching, routing, firewall administration, VPN, wireless, and troubleshooting.Strong knowledge of enterprise LAN/WAN, datacenter switching, routing, firewalls, VPN, wireless, NAC, load balancing, PKI and certificates, DNS, DHCP, IPAM, and secure configuration management.Hands-on experience operating cybersecurity tooling such as secure web and DNS services, network detection and response, vulnerability management, SIEM and logging integrations, and security monitoring.Experience with network and security automation using Python, PowerShell, Ansible, Terraform, APIs, or comparable tools.Working knowledge of NIST CSF, CIS Controls, incident-response practices, and applicable regulatory or industry requirements, including NERC CIP where relevant to the IT environment.Strong analytical, troubleshooting, documentation, communication, collaboration, and customer-service skills. Preferred QualificationsEnterprise Network EngineeringExperience engineering highly available datacenter, campus, WAN, internet-edge, remote-site, wireless, and VPN services.Experience with segmentation, least-privilege access, identity and MFA integrations, device trust, and network access control.Experience with load balancing, TLS termination, application delivery, certificate lifecycle management, and PKI integrations.Network Security & DetectionExperience operating next-generation firewalls, threat-prevention services, secure web or DNS controls, network detection and response, and vulnerability-management processes.Experience integrating network-security telemetry with SIEM, logging, alerting, dashboards, and incident-response workflows.Experience partnering with a SOC on investigation, tuning, containment, evidence, or root-cause activities.Automation, Resilience & OperationsExperience automating network or security operations through scripting, APIs, Ansible, Terraform, or infrastructure as code.Experience developing recovery, failover, configuration-backup, firmware-lifecycle, and vulnerability-remediation practices.Experience preparing changes, rollback plans, technical documentation, performance measures, and vendor-supported resolutions.CertificationsRelevant credentials such as CCNA, CCNP, ACP, PCNSE or equivalent firewall-vendor certification, CWNA, Security+, CISSP, AZ-700, or similar certifications are preferred. Advantages of Working at GSOCWorking at GSOC means more than just a job it's an opportunity to contribute to work that truly matters. Mission-Driven ImpactYour work supports secure, reliable corporate network services and cybersecurity capabilities used across GSOC's enterprise environment. Network Engineering & Cybersecurity DepthApply both network engineering and hands-on security expertise across switching, routing, wireless, firewalls, VPN, application delivery, monitoring, automation, and incident support. Technical Leadership & Continuous ImprovementLead technical projects, mentor peers, evaluate new technologies, automate repeatable work, and strengthen resilience, visibility, and operational supportability. Strong Values and Professional StandardsWork in an environment grounded in accountability, collaboration, integrity, security, compliance, and continuous improvement. Work Environment & BenefitsGSOC offers a professional, collaborative work environment with competitive compensation, comprehensive benefits, and a commitment to creating a respectful and inclusive workplace.Participation in an on-call rotation, emergency support, and scheduled maintenance outside normal business hours is required. Why Join GSOCAt GSOC, you will help engineer the network and security services that enable dependable business operations, secure access, security visibility, and resilient enterprise technology.You'll collaborate across infrastructure, cybersecurity, applications, service desk, and vendor teams while expanding your technical leadership and automation capabilities. Apply TodayIf you're ready to combine enterprise network engineering and cybersecurity expertise in a hands-on role supporting reliable, protected operations, we encourage you to apply. GSOC does not accept unsolicited resumes or candidate submissions from staffing agencies, search firms, or third-party recruiters. Any unsolicited resumes submitted without a valid, executed agreement will become the property of GSOC, and no placement fee will be paid. Job Posted by ApplicantPro

Job Description Job Description Network Security Engineer About Us EFJohnson Technologies is a subsidiary of JVCKENWOOD Corporation, a leading provider of P25 communications solutions for first responders in public safety and public service, the federal government, and industrial organizations. Our products are marketed under the EFJohnson and KENWOOD brands. EFJohnson provides wireless communications products and systems for public safety, commercial, and government customers. We design, manufacture, and market conventional and trunked radio systems, land mobile radio repeaters, and mobile and portable radios, including Project 25 digital radio products. As a Network Security Engineer you'll design, implement, and enforce comprehensive network and security architectures for mission-critical radio, data, and monitoring systems. This position will develop and maintain security standards and technical controls directly aligned with NIST SP 800-171 and CMMC Level 2 requirements to ensure protection of Controlled Unclassified Information (CUI). As a Network Security Engineer, you'll collaborate with network and system architects to embed security throughout the full system lifecycle, from design and segmentation to identity management, remote access, and incident response. This role is hybrid, based out of Irving, TX. Key Responsibilities Security Architecture & Compliance Define, document, and maintain comprehensive network security standards mapped to NIST SP 800-171 and CMMC Level 2 controls. Collaborate with architects to incorporate security in every design, emphasizing segmentation and isolation of CUI assets. Design, test, and maintain network-level controls supporting Identification & Authentication (IA) and System & Communications Protection (SC) families. Contribute technical content to the System Security Plan (SSP), Plan of Action and Milestones (POA&M), and compliance evidence packages. Enforce configuration management and formal change-control processes to maintain baseline compliance. Perform security impact assessments on proposed design changes, ensuring traceability to CMMC requirements. Identity & Access Management (IAM) Design and deploy centralized LDAP for directory services and user authentication. Design, implement, and administer TACACS+ for AAA control across routers, switches, and radio controllers. Configure and manage Multi-Factor Authentication (MFA) for privileged and remote accounts (CMMC IA.L2-3.5.3). Ensure unique identification and authentication of all users and devices (CMMC IA.L2-3.5.1). Integrate IAM systems with centralized logging and SIEM tools to support audit and traceability requirements. Network Security Services Implementation Design, configure, and deploy Remote Access VPNs and IPSec site-to-site tunnels for secure connectivity, ensuring encryption of CUI in transit. Configure, deploy, and manage Next-Generation Firewalls (NGFWs) to enforce zone-based policies and control traffic between segmented network zones. Implement and tune Intrusion Prevention Systems (IPS) to detect and block malicious traffic in real time. Run regular vulnerability assessments and penetration tests; prioritize remediation actions that impact CMMC compliance. Integrate firewall, VPN, and IPS logs with centralized SIEM systems; conduct Root Cause Analysis (RCA) for network or IAM-related security incidents. Act as Tier 2/Tier 3 escalation for the Security Operations Center (SOC). CUI Data Handling & Protection Ensure CUI is encrypted in transit and at rest using approved algorithms and key management standards. Implement network segmentation, VLAN isolation, and access-controlled zones to separate CUI from non-CUI traffic. Configure syslog, NTP, SNMPv3, and TLS securely for audit traceability and time-correlated event tracking. Enforce least-privilege access for CUI repositories and verify logging for all privileged actions. Conduct quarterly configuration audits and evidence collection in support of the corporate CMMC compliance program. Operational Security & Monitoring Maintain configuration baselines and perform periodic compliance checks on all network-security devices. Automate log collection and configuration integrity validation using secure scripting methods. Maintain network documentation, change-management records, and segmentation diagrams. Provide support for field deployments, system upgrades, and on-site network hardening activities. Assist with tabletop exercises, incident response drills, and after-action reviews. Collaboration & Continuous Improvement Partner with network and system engineering teams to embed secure-by-design principles into radio network infrastructure and analyzer platforms. Mentor junior engineers through scheduled security and compliance training sessions. Coordinate with software and system teams to ensure servers, databases, and applications meet hardened configuration baselines. Contribute to EF Johnson's internal Security Program Initiative, ensuring continuous improvement and measurable compliance progress. Recommend new tools, automation frameworks, and monitoring solutions to improve efficiency and visibility. Complete additional duties as required. Agree to abide by the established Approval Matrix. Qualifications Bachelor's Degree in Cybersecurity, Computer Science, Engineering Technology, or a related discipline; Master's preferred. Cisco CCNP Security or equivalent required. CISSP, CompTIA CySA+, or CISM preferred. Experience implementing security controls aligned to NIST SP 800-171 and CMMC Level 2. Hands-on experience with firewalls, VPNs, IPS, AAA, and logging systems. Familiarity with Linux security hardening, log analysis, and automation scripting (Python, Bash, Ansible). Experience conducting packet analysis and forensics (Wireshark, Zeek, Suricata). Knowledge of public-safety radio networks, LMR systems, and secure field deployments preferred. What We're Looking For Advanced technical capacity in network and security engineering. Strong written and verbal communication skills. Demonstrated analytical, diagnostic, and problem-solving ability. Experience with Windows and Linux administration. Rapid learning aptitude for new tools and methods. Proficiency with scripting, configuration management, and SIEM integration. In-depth understanding of TCP/IP, UDP, SNMPv3, SSL/TLS, IPSec, and 802.1X. P25, DFSI+, and SIP preferred. Travel Requirements Up to 30% What We Offer Competitive salary Health, dental, and vision benefits Additional supplemental benefits 401K + employer match Tuition reimbursement 12 paid holidays + additional PTO Supportive- team-driven environment Opportunities to work on mission-critical projects that make a real impact Equal Opportunity Statement EF Johnson Technologies is an Equal Opportunity/AFFIRMATIVE ACTION Employer who values diversity and inclusion in the workplace. It is the policy of this company to provide equal opportunity with regard to all terms and conditions of employment. The company complies with federal and state laws prohibiting discrimination on the basis of sex, race, color, religion, creed, national origin, disability, veteran status, age, sexual orientation, gender identity, genetic information, pregnancy, or any other protected characteristic.

Job Description Job Description Description: MDVIP: Transforming Primary Care, One Patient at a Time MDVIP is a national leader in personalized healthcare, empowering over 425,000 members to achieve their health and wellness goals through a network of more than 1,400 concierge primary care physicians. Our program emphasizes preventive medicine, offering comprehensive screenings, advanced diagnostics, and individualized wellness plans. Recognized as a Great Place to Work since 2018, MDVIP is committed to excellence in patient care and employee satisfaction. Position Summary The Network Security Engineer is an individual contributor role reporting to the Sr. Network Operations Manager. This is a contract-to-perm position (6-month contract), based in Boca Raton, FL (Hybrid), supporting the Boca Raton and Atlanta (ATL) data centers. This role provides dedicated engineering capacity for the ownership, hardening, and reliability of the organization's on-premises and hybrid infrastructure. The Network Security Engineer sustains a predictable remediation cadence across recurring security obligations - including monthly patching, zero-day response, vulnerability remediation, OS hardening, and cloud security score - while maintaining core platform services that underpin 24/7 operational reliability. This role is critical to reducing key-person risk, closing the capacity gap between rising compliance/audit workloads and existing staffing, and ensuring remediation tied to penetration tests, annual Security Risk Assessments (SRAs), and HIPAA assessments is completed on schedule. Key Responsibilities Security Remediation & Compliance Execute remediation for findings from penetration tests, annual Security Risk Assessments (SRAs), and HIPAA assessments, ensuring items are tracked to closure within defined SLAs; work with Project Managers, technology stack owners, and third-party resources to ensure timely delivery. Lead monthly patching cycles and rapid zero-day response across on-prem and hybrid server environments. Apply security remediations on infrastructure appliances including Cisco switches, firewalls (Palo Alto, Fortinet, Cisco Meraki), Linux appliances, and the virtual server environment and SANs (VMware, vSphere). Perform vulnerability remediation and OS/system hardening in line with established security baselines and audit requirements. Maintain a remediation burndown and support reporting on patch/vulnerability KPIs, including critical remediation timelines and cloud security score. Core Platform & Infrastructure Ownership Track Azure Security Score trends and drive remediation of flagged recommendations, providing regular posture reporting to leadership and audit stakeholders. Manage the full PKI infrastructure/SSL certificate lifecycle, including issuance, renewal, tracking, and remediation of expiring or non-compliant certificates, and manage key vault rotations for critical cloud-hosted applications. Utilize automation tools to deploy required machine certificates across the organization. Manage syslog retention and forwarding across on-premises and cloud infrastructure, supporting the Security team's SIEM ingestion, correlation, and compliance reporting needs. Administer network micro-segmentation using Illumio, including policy design, enforcement, and ongoing tuning. Review and administer security tools to harden network edge security, including next generation firewalls, SD-WAN, and switching, striving for zero trust networks. Manage wireless security, including network access control (NAC), utilizing Cisco wireless and HPE Aruba ClearPass. Administer Identity and Access Management/Privileged Access Management (IAM/PAM) using BeyondTrust for remote server access, including access reviews and privileged session controls. Manage and review Azure RBAC roles and access privileges, and perform Active Directory hardening in compliance with discovered vulnerabilities and best practices. Review and secure SDLC servers and hosted applications, both on-premises and in Azure, applying measures to keep all public endpoints secure. Operational Reliability & Risk Reduction Balance day-to-day operational demands (SSL renewals/rotations, security remediation, configuration hardening, troubleshooting) with planned, time-bound deliverables. Identify and reduce single-point-of-failure risk by documenting procedures and cross-training across PKI, AD, cloud access, segmentation, and patching functions. Partner with the Azure DevOps and Security teams to align on-prem/hybrid remediation with broader cloud governance and security initiatives. Escalate emerging risks, audit exceptions, and outage-driving conflicts between operational and remediation priorities to leadership. Key Competencies Analytical: synthesizes complex or diverse technical information, using intuition and experience to complement data. Collaboration: openly partners with security operations, DevOps, and business stakeholders, valuing diverse perspectives and building productive relationships. Communication: listens and responds effectively to stakeholder needs; writes and speaks clearly and persuasively. Initiative and personal accountability: identifies and creates solutions independently, sets and meets deadlines, and reports timely and prepared. Problem solving/decision making: thinks strategically, drawing on diverse sources to identify issues, risks, and trends and determine optimal, timely solutions. Strong troubleshooting skills and the ability to manage competing priorities between reactive operational work and scheduled remediation projects. Ability to support 24/7 platform reliability, including scheduled evening and weekend work for monthly patching cycles, zero-day response, and maintenance outside normal business hours. Ability to travel periodically between the Boca Raton, FL and Atlanta (ATL) data centers as needed. Requirements: Qualifications Required Qualifications Bachelor's degree in Computer Science, Information Security, or a related field; at least five (5) years of related business experience in network security, systems engineering, or infrastructure operations in an enterprise environment, or an equivalent combination of education and professional experience. Hands-on experience with both on-premises and cloud infrastructure platforms, including vulnerability management, patch management, and OS hardening across Windows and/or Linux server environments. Experience with PKI/SSL certificate lifecycle management and IAM/PAM tools (e.g., BeyondTrust or equivalent). Experience partnering with security operations/SIEM teams to onboard new log sources and ensure reliable syslog delivery from network infrastructure. Working knowledge of hybrid Active Directory/Microsoft Entra ID environments and familiarity with network segmentation concepts and tools (e.g., Illumio or comparable micro-segmentation platforms). Experience supporting audit and compliance remediation cycles, such as HIPAA assessments, SRAs, or penetration test findings. Proficiency with firewalls and network security appliances (Palo Alto, Fortinet, Cisco Meraki, Cisco switches), SD-WAN/next-generation firewall administration, and wireless security/NAC (Cisco wireless, HPE Aruba ClearPass). This is a hybrid role based in Boca Raton, FL, with periodic on-site support required at the Boca Raton and Atlanta (ATL) data centers. At no time may work be performed, or computer systems accessed, from outside of the U.S. Preferred Qualifications Vendor-specific certifications, Microsoft Azure, Security+, CISSP, GIAC, or an equivalent security certification. Scripting/automation experience (e.g., PowerShell) for remediation and hardening tasks. Why Join MDVIP? Be part of a mission-driven organization leading innovation in personalized healthcare. Drive transformation and growth in a dynamic, fast-paced environment. Competitive Compensation: Attractive base salary complemented by performance-based incentives. Comprehensive Benefits: Health, dental, vision insurance, and retirement plans. Professional Development: Access to ongoing training and leadership development programs. Positive Work Environment: Consistently recognized as a Great Place to Work , fostering a culture of collaboration and excellence. MDVIP is an Equal Opportunity Employer and is committed to fostering an inclusive and diverse workplace. We welcome applicants of all backgrounds and do not discriminate based on race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, veteran status, or any other protected status. We believe that diversity and inclusion drive innovation and strengthen our company culture. If you require accommodations during the application or interview process, please let us know, and we will be happy to assist. Pay Transparency: Our compensation reflects the cost of labor across appropriate US geographic markets. Pay is based on several factors including but not limited to market location and may vary depending on job-related knowledge, skills, and education/training and a candidate's work experience. Hired applicants are offered annual incentive compensation programs, subject to applicable eligibility requirements . click apply for full job details

Job Description Job Description About the Company : Sungrow North America is a leading provider of renewable energy solutions, specializing in the development and manufacturing of photovoltaic inverters and energy storage systems. The company offers a comprehensive range of products and services designed to optimize the performance and efficiency of solar power installations. Sungrow North America aims to provide sustainable and reliable energy solutions to meet the growing demand for clean power and is known for its commitment to innovation, high-quality standards, and exceptional customer service. Security Engineer - Network & Identity: The Security Engineer (Network & Identity) is a hands-on engineering role within the IT team responsible for designing, implementing, securing, and automating Sungrow USA's network security, PKI and certificate management, and identity & access infrastructure across on-premises, cloud, and SaaS environments. This role serves as the technical owner for network security architecture, cryptographic services, certificate lifecycle management, authentication, and access controls. The position focuses on Zero Trust security, network segmentation, certificate-based authentication, and identity protection to reduce organizational risk and enable secure business operations and platform ownership rather than SOC operations, threat monitoring, or incident response. Essential Duties and Responsibilities: Network Security Design, implement, and maintain secure enterprise network architectures across corporate offices, data centers, cloud platforms, and remote workforce environments. Architect network segmentation, Zero Trust access controls, and secure connectivity standards using Fortinet and Zscaler security solutions. Develop and maintain Zero Trust architectures across network, identity, endpoint, application, and cloud environments. Design and administer secure remote access using Zscaler Private Access, VPN technologies, and identity-aware access controls. Manage firewall policies, network security controls, routing security, DNS security, and hybrid-cloud connectivity. Design and support Network Access Control architectures using IEEE 802.1X, RADIUS, and certificate-based authentication. Assess network security posture, develop remediation plans, and drive continuous security improvements. Cryptography, PKI & Certificate Management Own the enterprise PKI, cryptography, and certificate lifecycle management architecture, standards, and governance program. Design and manage certificate-based authentication and machine identity solutions for users, devices, servers, applications, cloud workloads, and network infrastructure across Azure, AWS, and hybrid environments. Implement and maintain certificate lifecycle automation using Microsoft Cloud PKI, Keyfactor, CyberArk Certificate Manager, EJBCA, DigiCert, AppViewX, or comparable platforms. Manage certificate issuance, enrollment, discovery, deployment, monitoring, renewal, revocation, auditing, and compliance across the enterprise. Design and support cryptographic services and certificate-based security controls, including TLS/mTLS, code signing, PKI trust hierarchies, certificate-based authentication, SCEP, PKCS, and machine identities. Establish PKI and cryptographic standards, key management practices, and security controls to support Zero Trust, regulatory compliance, and enterprise security requirements. Troubleshoot and resolve complex certificate, cryptographic, trust chain, authentication, and secure communications issues across enterprise systems and applications. Identity & Access Define authentication and authorization standards for workforce, partner, application, service, and machine identities. Design, implement, and maintain Microsoft Entra ID architecture, tenant governance, and identity security controls. Develop, test, and enforce Conditional Access policies and Zero Trust access controls. Implement and maintain MFA, passwordless authentication, phishing-resistant authentication, and Microsoft Entra ID Protection capabilities. Design and support enterprise SSO and federation integrations using SAML, OAuth 2.0, OpenID Connect, and SCIM. Implement least-privilege and risk-based access models across enterprise platforms. Administer RBAC, administrative separation, Microsoft Entra Privileged Identity Management, and least-privilege access controls. Govern application registrations, service principals, enterprise applications, API permissions, and managed identities. Support B2B collaboration, guest-user governance, external workforce access, and third-party identity integrations. Design and implement security controls across Microsoft Azure and AWS environments. Apply least privilege, RBAC, encryption, secrets management, and secure configuration standards to on-prem and cloud resources. Automate identity provisioning and deprovisioning, access governance, certificate management, configuration validation, and security operations. Create reusable secure-by-default templates and reduce manual administration through automation and orchestration Conduct access reviews, entitlement certifications, and identity governance activities. Education or Desired License and Certificates: Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field, or equivalent professional experience. Microsoft Certified: Identity and Access Administrator Associate (SC-300) preferred. Microsoft Certified: Azure Security Engineer Associate (AZ-500) preferred. CCNA, Fortinet, Zscaler, AWS Security, CISSP, CISM, Terraform, or relevant PKI certification preferred Preferred Experience & Qualifications: 5+ years of experience in security engineering, identity & access management (IAM), network security, cloud security, or a related enterprise IT discipline. Hands-on experience with Microsoft Entra ID, including Conditional Access, MFA, SSO, Identity Protection, PIM, RBAC, identity governance, and modern authentication protocols (SAML, OAuth, OpenID Connect, SCIM). Experience designing, implementing, and securing enterprise identity, privileged access, and machine identity solutions across hybrid and multi-cloud environments. Hands-on experience with Fortinet, Zscaler (ZIA/ZPA), Zero Trust architectures, least-privilege access models, and network security controls. Experience designing and operating enterprise PKI, certificate lifecycle management, certificate-based authentication, and machine identity platforms such as Keyfactor, DigiCert, EJBCA, AppViewX, CyberArk Certificate Manager, or similar solutions. Experience securing Azure and AWS environments, including identity, networking, encryption, secrets management, logging, and security monitoring. Experience with PAM and IGA platforms such as CyberArk, Delinea, BeyondTrust, SailPoint, Saviynt, or similar technologies. Experience integrating identity, network, cloud, and security telemetry with SIEM and security operations platforms. Strong automation and Infrastructure as Code skills using PowerShell, Python, Microsoft Graph API, REST APIs, Terraform, or similar technologies. Strong troubleshooting skills across authentication, federation, certificates, PKI, network security, cloud access, application integrations, and enterprise identity services. Knowledge of cybersecurity and compliance frameworks including SOC 2, ISO/IEC 27001, NIST CSF, NIST 800-63, CIS Controls, Zero Trust, and NERC CIP. Competencies: Mandarin fluency preferred but not required. Strong analytical, troubleshooting, and problem-solving skills. Ability to work independently and collaboratively in a fast-paced environment. Excellent communication, stakeholder management, and technical documentation skills. Strong organization, attention to detail, initiative, and ownership. Ability to balance security, reliability, usability, scalability, and business requirements. Proactive approach to automation, standardization, and continuous improvement. Travel 5%-20% Work Location and Status: Full time, Hybrid at any Sungrow USA office in Phoenix, Costa Mesa, or Houston No visa sponsorship Compensation: Compensation commensurate with experience Competitive salary and annual bonus eligibility Comprehensive benefits package including health, dental, vision, and retirement plans Strong personal and company growth opportunities Sungrow is an equal opportunity employer. Due to strong interest in this position, Sungrow will only reach out to those candidates who best meet the requirements. Thank you for your interest in Sungrow.

AWS Infrastructure Services owns the design, planning, delivery, and operation of all AWS global infrastructure. In other words, we're the people who keep the cloud running. We support all AWS data centers and all of the servers, storage, networking, power, and cooling equipment that ensure our customers have continual access to the innovation they rely on. We work on the most challenging problems, with thousands of variables impacting the supply chain - and we're looking for talented people who want to help. You'll join a diverse team of software, hardware, and network engineers, supply chain specialists, security experts, operations managers, and other vital roles. You'll collaborate with people across AWS to help us deliver the highest standards for safety and security while providing seemingly infinite capacity at the lowest possible cost for our customers. And you'll experience an inclusive culture that welcomes bold ideas and empowers you to own them to completion. Are you experienced in building and managing Windows systems, with a passion for maintaining highly-available IT infrastructure and services at a massive scale? The Controls Fleet team is responsible for supporting some of Amazon's most critical infrastructure services. As part of Amazon Web Services, we power the infrastructure behind the world's premier e-commerce and cloud computing environments. To meet the growing demand for AWS services worldwide, we seek exceptionally motivated individuals driven by learning and innovation. We are looking for a passionate and motivated Windows Engineer to join our team of Systems Engineers. By joining us, you'll become part of a world-class team in a dynamic environment with the entrepreneurial spirit of a start-up. This is an opportunity to operate and engineer systems on a massive scale, gaining world-class experience in managing and supporting critical infrastructure. You'll work alongside passionate individuals dedicated to deploying and supporting essential IT infrastructure that powers AWS. The ideal candidate will be innovative, possess excellent problem-solving and analytical skills, and thrive in a fast-paced environment. They should have a keen attention to detail and the ability to solve problems at their root. The Controls Fleet Operations team services customers globally, requiring the ability to manage multiple tasks and adapt to different challenges. In addition, the ideal candidate should have an expert understanding of Windows tools such as Active Directory, Group Policy, DNS, Hyper-V, Windows Failover Clustering, and Microsoft Endpoint Configuration Manager (ECM) or AWS Systems Manager. Proficiency in PowerShell, or a similar scripting language, and windows automation are essential. This role demands a solid foundation in networking principles and hands-on experience with hardware troubleshooting and system building. If you are passionate about technology, excited by the prospect of working in a dynamic, fast-paced environment, and driven to solve complex problems, we would love to hear from you. Key job responsibilities • Large-Scale Windows Server Environments: Design, build, and support extensive Windows server environments. • Enterprise Tooling: Implement and manage enterprise-scale tooling, such as Microsoft Endpoint Configuration Manager (ECM) or AWS Systems Manager, for a large Windows fleet. • Automation and Scripting: Develop and implement best practices for automating tasks and scripting in large server environments. Proficiency in PowerShell is essential. • Innovation and Problem Solving: Utilize creativity and analytical skills to solve complex problems and implement innovative solutions. • Adaptability: Quickly adjust to changing priorities and manage multiple tasks efficiently. • Hardware Troubleshooting: Diagnose and resolve hardware issues, with hands-on experience in system building. • Networking and Windows Administration: Strong understanding of networking principles and expert-level Windows administration. • Global Deployment: Create scripts and automation tasks applicable to a global server fleet. • On call: Participate in a 24x7 on call rotation that supports global customers • Ability to travel domestically and internationally up to 10% of the time About the team AWS Infrastructure Services owns the design, planning, delivery, and operation of all AWS global infrastructure. In other words, we're the people who keep the cloud running. We support all AWS data centers and all of the servers, storage, networking, power, and cooling equipment that ensure our customers have continual access to the innovation they rely on. We work on the most challenging problems, with thousands of variables impacting the supply chain - and we're looking for talented people who want to help. You'll join a diverse team of software, hardware, and network engineers, supply chain specialists, security experts, operations managers, and other vital roles. You'll collaborate with people across AWS to help us deliver the highest standards for safety and security while providing seemingly infinite capacity at the lowest possible cost for our customers. And you'll experience an inclusive culture that welcomes bold ideas and empowers you to own them to completion. Diverse Experiences AWS values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn't followed a traditional path, or includes alternative experiences, don't let it stop you from applying. Why AWS? Amazon Web Services (AWS) is the world's most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating - that's why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses. Inclusive Team Culture AWS values curiosity and connection. Our employee-led and company-sponsored affinity groups promote inclusion and empower our people to take pride in what makes us unique. Our inclusion events foster stronger, more collaborative teams. Our continual innovation is fueled by the bold ideas, fresh perspectives, and passionate voices our teams bring to everything we do. Mentorship & Career Growth We're continuously raising our performance bar as we strive to become Earth's Best Employer. That's why you'll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there's nothing we can't achieve. BASIC QUALIFICATIONS - Bachelor's degree in Systems Engineering, Computer Science, or related field or relevant work experience - Experience working with Linux - Knowledge of TCP/IP and networking protocols such as HTTP and DNS - 5+ years of building scripts, tooling, and automation for large-scale computing environments experience - Experience troubleshooting and debugging technical systems, or experience in technical support and experience with virtualization (Hypervisors, VMware, Xen) - 5+ years of experience deploying, managing, and supporting large-scale Windows Server environments (500+ servers), including OS lifecycle management, patch compliance, and fleet-wide standardization across geographically distributed data center infrastructure. PREFERRED QUALIFICATIONS - Experience designing and developing scripts to automate operational burdens and reviewing scripting changes to ensure they meet the standards for maintainability, scalability and security - Experience working in 24/7 production environment - Experience using AWS services - 5+ years experience with virtualization (Hypervisors, VMware, or Xen) and supporting the underlying hardware components - Demonstrated experience managing and maintaining a large-scale Windows Server fleet across geographically distributed environments, leveraging enterprise-level configuration management and automation tooling such as Enterprise Configuration Management (ECM), AWS Systems Manager, or equivalent platforms to drive patching compliance, system standardization, and operational efficiency at scale. Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit for more information. If the country/region you're applying in isn't listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave . click apply for full job details

Req ID: 383115 NTT DATA strives to hire exceptional, innovative and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization, apply now. We are currently seeking a Senior Principal Cloud Architect - AWS & Service Activation Hybrid Irving, TX or Charlotte, NC to join our team in Irving, Texas (US-TX), United States (US). Please Note: This hybrid role requires onsite client support 2-3 days weekly in either Irving, TX or Charlotte, NC. Candidates must be located within commuting distance of one of these offices. Applications from candidates outside these areas may not be considered. Position Summary We are seeking a Principal Cloud Engineer to architect design, build, and operate a secure, scalable, and highly automated multi-cloud platform leveraging Google Cloud Platform (GCP), Amazon Web Services (AWS), and Microsoft Azure. As a key technical leader, you will drive the evolution of our multi-cloud engineering, enabling resilient, cloud-native services that support mission-critical enterprise workloads. This role requires deep expertise in cloud architecture, infrastructure as code (IaC), and distributed systems engineering, with a strong focus on Terraform-driven automation and principal engineering standardization. The ideal candidate brings strong Kubernetes, IAM, networking, and policy management experience, along with a disciplined approach to security, reliability, and cost optimization. Key Responsibilities: Principal Engineering, Design & Architecture Architect, engineer, and implement scalable, secure, and resilient cloud solutions across GCP and AWS, with Azure as a plus. Engineer multi-region, highly available architectures aligned with enterprise standards and best practices. Infrastructure Automation & IaC Lead engineering, adoption, and development of Terraform-based infrastructure as code, ensuring consistency, compliance, and reusability. Build and maintain modular Terraform frameworks for provisioning cloud infrastructure. Integrate IaC into CI/CD pipelines to enable fully automated provisioning and deployment workflows. Containerization & Kubernetes Platforms Direct knowledge and engineering leveraging Kubernetes platforms (EKS, GKE) and associated ecosystems. Implementation of container orchestration best practices including scaling, observability, and security. Identity, Access & Security Governance Experienced working knowledge architecting and designing robust IAM strategies across GCP and AWS including least-privilege access models. Implement policy frameworks for access control, resource governance, and regulatory compliance. Networking & Connectivity Direct knowledge and experience architecting, designing, and engineering cloud networking solutions including VPC/VNet design, routing, peering, VPNs, and private connectivity. Ensure secure, high-performance connectivity between cloud environments and on-premises systems. Policy Management & Governance Deep understanding of policy management, policy-as-code frameworks to ensure consistent governance of resources, tagging strategies, and compliance controls. Collaboration with governance, policy, and security teams to ensure cloud environments meet enterprise and regulatory standards. Modernization & Mentorship Champion cloud-native and principal engineering engineering best practices across the organization. Drive the evolution of principal engineering practice by incorporating infrastructure-as-code (IaC) principles. Mentor junior engineers and provide technical leadership for complex cloud initiatives. Serve as an escalation point for critical cloud infrastructure and principal engineering issues. Ideal experience to have for this role: Cloud Platforms & Architecture Extensive firsthand experience with AWS and GCP in large-scale enterprise environments. Strong expertise in cloud architecture, including high availability, disaster recovery, and multi-region design. Deep understanding of cloud-native services and distributed systems principles. AWSControl tower and landing Zones. Infrastructure as Code & Automation Advanced proficiency in Terraform for infrastructure provisioning and lifecycle management. Experience designing reusable modules and managing Terraform state at scale. Familiarity with CI/CD tooling and Git-based workflows. Kubernetes & Container Platforms Strong experience with Kubernetes (EKS, GKE) and container ecosystems. Knowledge of Helm, service meshes, and container security best practices. Identity & Access Management (IAM) Deep understanding of IAM concepts in AWS and GCP, including roles, policies, and federation. Experience implementing RBAC and least-privilege access models at scale. Networking & Core Infrastructure Strong knowledge of cloud networking concepts: VPCs, subnets, routing, load balancing, DNS, and hybrid connectivity. Experience designing secure network architectures across multi-cloud and hybrid environments. Policy Management & Governance Direct experience with policy enforcement frameworks and governance models in AWS and GCP. Familiarity with policy-as-code tools and compliance automation practices. Required Qualifications: 8+ years of experience in cloud infrastructure, principal engineering, and/or cloud architecture roles. Hands-on expertise with AWS and GCP in enterprise environments, including high availability, disaster recovery, and multi-region architectures. Strong experience with Terraform, Infrastructure as Code (IaC), reusable modules, and automated CI/CD deployments. Proven experience designing and supporting Kubernetes platforms (EKS, GKE) and containerized environments. Deep knowledge of IAM, RBAC, least-privilege access models, and cloud security best practices. Strong understanding of cloud networking, including VPCs, routing, load balancing, DNS, VPNs, and hybrid connectivity. Experience implementing cloud governance, policy enforcement, compliance controls, and policy-as-code frameworks. Experience with AWS Control Tower and Landing Zone architectures. Highly Preferred Qualifications: 8-10+ years of experience engineering infrastructure in multi-cloud environments. Experience with cloud-native technologies and container platforms such as Kubernetes, Red Hat OpenShift, EKS, and GKE. Experience operating in highly regulated environments with knowledge of data privacy, compliance frameworks, and disaster recovery. Experience with principal engineering engineering, Internal Developer Platforms (IDPs), and self-service cloud models. Knowledge of FinOps practices and cloud cost optimization strategies. Experience with Azure and enterprise multi-cloud architectures. Familiarity with Helm, service meshes, and container security best practices. Relevant certifications such as AWS Certified Solutions Architect, Google Professional Cloud Architect, CKA, or CKAD. NTT DATA provides a reasonable range of compensation for U.S.-based positions. The starting pay range for this role will depend on the location of the successful candidate. For candidates in either of these locations, the starting pay range is $150,450k - $200k. Actual compensation will depend on a number of factors, including the candidate's actual work location, relevant experience, technical skills, and other qualifications. This position may also be eligible for incentive compensation based on individual and/or company performance. If the position offered in temporary, the position will not be eligible for incentive compensation. This position is eligible for company benefits including medical, dental, and vision insurance with an employer contribution, flexible spending or health savings account, life and AD&D insurance, short and long term disability coverage, paid time off, employee assistance, participation in a 401k program with company match, and additional voluntary or legally-required benefits. About NTT DATA NTT DATA is a $30 billion business and technology services leader, serving 75% of the Fortune Global 100. We are committed to accelerating client success and positively impacting society through responsible innovation. We are one of the world's leading AI and digital infrastructure providers, with unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and application services. our consulting and Industry solutions help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more than 50 countries . click apply for full job details

Req ID: 372365 NTT DATA strives to hire exceptional, innovative and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization, apply now. We are currently seeking a IT Program Manager to join our team in Arlington, Virginia (US-VA), United States (US). Job Summary: The Technical Director directs and manages technical activities related to implementation, transition, upgrades, testing, break fix, operations and maintenance. The Technical Director serves as an operational agency Point of Contact and contact for government-owned, external vendor solution elements for interoperability activities, communications, and escalations. The Technical Director performs technical engineering requirements associated with procurement, sustainment, modification, and performance of specific systems or sub-systems; provides technical guidance, data analysis, reports, assist in the coordination of all technical activities to include system analysis and facilities with Government oversight for inherently Government activities that require a decision or that might obligate the Government. The Technical Director ensures any performance degradations not specifically and directly delivered services under this call order can be supported in the operational model with the greatest efficiency and least government staff activity. The Technical Director ensures technology alignment to the strategy, roadmap, and technical architecture decisions of the government. The Technical Director has strong leadership, communication and project management skills, in-depth technical knowledge and the ability to adapt to evolving technologies. Job Duties: Supports development of long-term IT strategies, technical roadmaps, and policies aligned with agency missions. Oversees network services, server administration, cybersecurity, and cloud platforms. Ensures compliance with federal or local regulations (e.g., FISMA, FERPA, HIPAA) and implements robust security controls. Directs the modernization of legacy applications and manages the development of new, complex software solutions. Acts as a primary liaison between the IT department and other agency departments and stakeholders. Basic Qualifications: Master's degree in IT, Computer Science, Information Systems, Management, or a related field. One-and-one- half (1.5) years of additional experience can substitute for one (1) year of a typical degree program. Minimum 10 years of experience in IT management to include systems development, network administration, or technical operations. Project Management Certification (example: PMI PMP Certification). Ability to obtain/maintain a Public Trust clearance Work onsite Monday thru Thursday and Telework on Fridays Preferred Qualifications: Strong communication skills (verbal and written) with demonstrated and proven ability to manage staff, communicate with non-technical staff and officials, and drive organizational change. Familiarity with modern cloud infrastructure, particularly AWS Understanding of government IT standards, requirements, best practices, etc. Ability to manage multiple requests and deadlines concurrently in a fast paced environment. NTT DATA provides a reasonable range of compensation for specific roles. The starting pay range for this role is $127,792 - $212,988. Actual compensation will depend on a number of factors, including the candidate's relevant experience, technical skills, and other qualifications. This position may also be eligible for incentive compensation based on individual and/or company performance. If the position offered in temporary, the position will not be eligible for incentive compensation. This position is eligible for company benefits including medical, dental, and vision insurance with an employer contribution, flexible spending or health savings account, life and AD&D insurance, short and long term disability coverage, paid time off, employee assistance, participation in a 401k program with company match, and additional voluntary or legally-required benefits. About NTT DATA NTT DATA is a $30 billion business and technology services leader, serving 75% of the Fortune Global 100. We are committed to accelerating client success and positively impacting society through responsible innovation. We are one of the world's leading AI and digital infrastructure providers, with unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and application services. our consulting and Industry solutions help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more than 50 countries. We also offer clients access to a robust ecosystem of innovation centers as well as established and start-up partners. NTT DATA is a part of NTT Group, which invests over $3 billion each year in R&D. Whenever possible, we hire locally to NTT DATA offices or client sites. This ensures we can provide timely and effective support tailored to each client's needs. While many positions offer remote or hybrid work options, these arrangements are subject to change based on client requirements. For employees near an NTT DATA office or client site, in-office attendance may be required for meetings or events, depending on business needs. At NTT DATA, we are committed to staying flexible and meeting the evolving needs of both our clients and employees. NTT DATA recruiters will never ask for payment or banking information and will only email addresses. If you are requested to provide payment or disclose banking information, please submit a contact us form, NTT DATA endeavors to make accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact us at This contact information is for accommodation requests only and cannot be used to inquire about the status of applications. NTT DATA is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. For our EEO Policy Statement, please click here. If you'd like more information on your EEO rights under the law, please click here. For Pay Transparency information, please click here.

NTT DATA strives to hire exceptional, innovative and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization, apply now. We are currently seeking a Senior Oracle EPM Financial Consolidation and Close (FCCS) Production Support Specialist (REMOTE) to join our team! This is a fully remote role and can be based anywhere in the US. We are seeking an experienced Oracle EDMCS professional to lead the implementation, maintenance, and governance of enterprise metadata and master data management solutions. You will ensure that hierarchies, dimensions, and reference data remain accurate, synchronized, and well-controlled across Oracle EPM, ERP, and downstream third-party applications. This role partners with Finance, Accounting, and IT stakeholders to support, enhance, and optimize existing financial systems and integrations. Job Responsibilities Include: Provide day-to-day functional and technical support for Oracle Financial Consolidation and Close (FCCS), including metadata management, consolidation rules, workflows, and process monitoring. Configure core EDMCS components including Node Types, Node Sets, Viewpoints, Hierarchies, and Property Definitions Design scalable organizational data structures for the Chart of Accounts (COA), Cost Centers, Departments, Legal Entities, and Product Hierarchies Set up integrations and data synchronization between EDMCS and Oracle Cloud applications (such as FCCS, Planning/Freeform, and ERP Cloud) Maintain and enhance ERP, EPM , Custom applications scenarios, entities, accounts, and intercompany structures. Define and manage metadata approval workflows, request interfaces, and change control mechanisms. Establish business validation rules, derivations, and subscriptions to automate and control data changes. Maintain system security, access controls, and granular role assignments Troubleshoot consolidation issues, data discrepancies, and financial reporting variances across source systems. Manage system operations related to the close process, including running consolidations, translations, calculations, and validations. Collaborate with IT, data engineering, and application owners during integration projects, upgrades, and system migrations. Serve as a subject matter expert (SME) on EDMCS functionality and work with stakeholder for any BAU changes Ensure reporting aligns with corporate accounting policies, financial structures, and audit requirements. Provide user training, guidance, and support for change request submission and hierarchy management. Document issues, enhancements, and process changes following ITIL standards (ServiceNow or similar). Support internal and external audit activities through documentation, controls, and system evidence. Recommend technology and process improvements that enhance financial operations efficiency. Work with cross functional teams to automate manual financial workflows using the appropriate tools. Identify opportunities to optimize metadata structures, automation, and data governance workflows. Basic Qualifications: 5-8+ years of experience in Oracle EPM/ERP, with hands-on expertise specifically in Oracle EDMCS. 5+ years of experience supporting Oracle FCCS and/or Hyperion Financial Management. 3-5 years of experience with data exchange/FDMEE/FDM data integrations. 3-5 years of strong understanding of financial accounting, consolidations, intercompany eliminations, FX translation, and period-close processes. + 5 years of experience with Oracle Cloud Narrative Reporting/Reports and/or Financial Reporting Studio Web +5 years of experience with Oracle Smart View (creating new reports, supporting ad hoc, break fix, etc.) 5+ years of Experience managing hierarchies, dimensions, and metadata governance processes. 5+ years of Hands-on experience configuring integrations, exports/imports, and connections to source/target systems. Preferred Skills: Strong knowledge of automation using Oracle EPMAutomate. Strong analytical, documentation, and problem solving skills. Highly organized and detail oriented. Strong communicator able to partner effectively with Finance, IT, and business stakeholders. Adaptable and proactive, with a continuous improvement mindset. Comfortable managing multiple priorities in a dynamic environment. Experience with Oracle ERP Cloud, data warehouses, OCI, Oracle API Gateway. Basic understanding on Oracle ARCS, ,FreeForm, TRCS products knowledge. Experience in the Banking sector is preferred. Ability to write Groovy rules, REST API calls, or SQL is preferred. Oracle EPM Cloud EDMCS certification is preferred. NTT DATA provides a reasonable range of compensation for U.S.-based positions. The starting pay range for this remote role is $92,408.00 - $213,906.00 annual salary. This range reflects the minimum and maximum target compensation for the position across all US locations. Actual compensation will depend on a number of factors, including the candidate's actual work location, relevant experience, technical skills, and other qualifications. This position is eligible for company benefits including medical, dental, and vision insurance with an employer contribution, flexible spending or health savings account, life and AD&D insurance, short and long term disability coverage, paid time off, employee assistance, participation in a 401k program with company match, and additional voluntary or legally-required benefits. About NTT DATA NTT DATA is a $30 billion business and technology services leader, serving 75% of the Fortune Global 100. We are committed to accelerating client success and positively impacting society through responsible innovation. We are one of the world's leading AI and digital infrastructure providers, with unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and application services. our consulting and Industry solutions help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more than 50 countries. We also offer clients access to a robust ecosystem of innovation centers as well as established and start-up partners. NTT DATA is a part of NTT Group, which invests over $3 billion each year in R&D. Whenever possible, we hire locally to NTT DATA offices or client sites. This ensures we can provide timely and effective support tailored to each client's needs. While many positions offer remote or hybrid work options, these arrangements are subject to change based on client requirements. For employees near an NTT DATA office or client site, in-office attendance may be required for meetings or events, depending on business needs. At NTT DATA, we are committed to staying flexible and meeting the evolving needs of both our clients and employees. NTT DATA recruiters will never ask for payment or banking information and will only email addresses. If you are requested to provide payment or disclose banking information, please submit a contact us form, NTT DATA endeavors to make accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact us at This contact information is for accommodation requests only and cannot be used to inquire about the status of applications. NTT DATA is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. For our EEO Policy Statement, please click here. If you'd like more information on your EEO rights under the law, please click here. For Pay Transparency information, please click here.

About Crunchyroll Founded by fans, Crunchyroll delivers the art and culture of anime to a passionate community. We super-serve over 100 million anime and manga fans across 200+ countries and territories, and help them connect with the stories and characters they crave. Whether that experience is online or in-person, streaming video, theatrical, games, merchandise, events and more, it's powered by the anime content we all love. Join our team, and help us shape the future of anime! About the role Crunchyroll is growing and evolving, creating both new opportunities and new challenges as it protects millions of anime fans worldwide while still shipping quickly and with high quality. We are looking for a security leader who wants to shape how engineering builds and operates securely at scale. In this Principal-level, hands-on Director role reporting to the VP of Information Security, you will connect strategy to execution by turning security goals into secure-by-default, compliant systems and practices that teams actually use. You will partner closely with engineering leaders and senior ICs to reduce friction, align on priorities, and drive consistent follow-through, protecting our fans and our platform without sacrificing delivery velocity. Success will be through influence and enablement, and you will also periodically build practical solutions, such as reference implementations and tooling integrations, that make it easier for teams to adopt the right security patterns. Core Areas of Responsibility In this role, you will be a force multiplier for engineering, setting the direction, building key parts, and ensuring follow-through so security becomes a durable part of how Crunchyroll ships. You will own the engineering-facing mechanisms that make security real in day-to-day delivery: Security execution at scale: Drive adoption of security controls across engineering by driving adoption of clear engineering playbooks, paved paths, and secure-by-default platform capabilities that can be consistently adopted across services, regardless of engineering domain. Engineering teams remain accountable for design, implementation, operation, and remediation of their services. This role provides security strategy, guidance, tooling, visibility, coordination, and escalation mechanisms that enable teams to meet those obligations consistently at scale Vulnerability closure and systemic risk reduction: Facilitate the operating rhythm across engineering for vulnerability intake, triage, tracking of vulnerability ownership, SLAs, remediation planning, verification, and escalation. Establish systems and processes that ensure timely fixes and eliminate repeat issues through improvements. Tooling integration and evidence readiness: Coordinate with engineering teams to integrate enterprise security tooling into CI/CD and production environments, and ensure engineering can reliably produce evidence of compliance in a low-friction, automated way. Design-time security embedded in engineering workflows: Ensure threat modeling and security architecture considerations are built into how engineering designs and ships using approved patterns and reference architectures as the default starting point. Pragmatic requirements shaping: When requirements are infeasible or disproportionately costly, you'll drive early escalation and propose alternatives (sequencing, compensating controls, platform changes) so we maintain momentum without accepting unmanaged risk. Cross-team alignment and escalation: Identify cross-domain architectural risks and drive alignment / decision-making through established engineering leadership and architecture governance processes, bringing the right stakeholders together and escalating when tradeoffs require executive judgment. Incident readiness and closure: Improve security incident preparedness in engineering (runbooks, exercises, detection hooks) and ensure post-incident actions translate into durable engineering improvements. Partner with Global Security for execution: Serve as the primary engineering counterpart to Global Security, translating enterprise policies, controls, tooling, and compliance requirements into recommendations or actionable insights that are adoptable engineering practices, and feeding back where standards need better patterns, automation, or sequencing to scale. What success looks like Success in this role is not about managing security reviews, success is measurable engineering outcomes: Drive enterprise-wide adoption of Security and Privacy by Design, ensuring security, privacy, and compliance requirements are proactively integrated into products, services, and technology platforms Security controls are implemented broadly with minimal friction because the secure path is well defined Vulnerabilities have clear owners, predictable remediation, and decreased recurring issues Success in this role is about partnering with Engineering teams on security initiatives and enabling them to be effective with an understanding that Engineering teams have clear ownership of platforms and will be accountable for them About You We get excited about candidates like you, because You have 12+ years of progressive experience in information security, application security, cloud security, or software engineering, including significant experience leading enterprise-scale security initiatives through technical influence rather than direct authority. You exhibit Principal-level technical leadership with a proven track record of leading cross-team security initiatives through influence, clarity, and shipping real systems-not just policies. You possess strong application security fundamentals such as: authn/authz, session security, secure API design, data protection, threat modeling, and secure SDLC practices. You have pragmatic risk management, with the ability to prioritize, quantify tradeoffs, and create guardrails that teams actually adopt. You have cloud & platform security experience such as: IAM concepts, secrets management, key management, service-to-service auth patterns, and logging/detection fundamentals. You possess a DevSecOps and automation mindset and have experience integrating security checks into CI/CD with minimal developer friction. You exhibit depth in vulnerability management, knowing how to triage, develop remediation strategies, verify fixes, all while partnering with teams to close the loop quickly. You possess excellent communication skills that include concise, executive-ready writing and strong technical coaching abilities for engineers. You meet people where they are and endeavor to build intrinsic motivation to develop solutions to problems through shared understanding. Preferred, but not required: Experience with streaming/media security and DRM ecosystems and output protection concepts. Experience with mobile and device ecosystems (iOS/Android/TV devices), including secure storage patterns and platform attestation. Familiarity with reverse engineering tools and client hardening/anti-tamper approaches. Exposure to privacy/security compliance partnerships (GRC) and working with legal/product on policy requirements. About the Team Crunchyroll's Security team is focused on partnering with teams across the organization to provide secure solutions and protect company assets as we serve the Anime community. We provide Security, GRC (Governance, Risk, and Compliance), Data Privacy, and Network Infrastructure services to the enterprise. Everyday we have an opportunity to make a positive impact while being at the center of innovative initiatives. If you are looking to join a team where you will make a difference, we would love to hear from you. Why you will love working at Crunchyroll In addition to getting to work with fun, passionate and inspired colleagues, you will also enjoy the following benefits and perks: Receive a great compensation package including salary plus performance bonus earning potential, paid annually. Flexible time off policies allowing you to take the time you need to be your whole self. Generous medical, dental, vision, STD, LTD, and life insurance Health Saving Account HSA program Health care and dependent care FSA 401(k) plan, with employer match Employer paid commuter benefit Support program for new parents Pet insurance and some of our offices are pet friendly! The Pay Range for this position is listed. Actual pay will vary based on factors including, but not limited to location, experience, and performance. The range listed is just one component of Crunchyroll's Total Rewards offerings for employees. Other rewards may include performance bonuses, employer matched retirement savings, time-off programs, and progressive health benefits and perks. Pay Transparency - Los Angeles, CA $249,000-$305,000 USD About our Values We want to be everything for someone rather than something for everyone and we do this by living and modeling our values in all that we do. We value Courage. We believe that when we overcome fear, we enable our best selves. Curiosity. We are curious, which is the gateway to empathy, inclusion, and understanding. Kaizen. We have a growth mindset committed to constant forward progress. Service . click apply for full job details

COMPANY OVERVIEW Hanwha Energy USA , headquartered in Houston, Texas, is part of the Hanwha Group-a FORTUNE Global 300 company and one of South Korea's most respected business enterprises. With over a decade of experience delivering high-quality, utility-scale energy projects across North America, Hanwha Energy USA has evolved into a comprehensive energy solutions provider. Our portfolio now spans utility-scale renewables, natural gas generation, retail electricity, and strategic partnerships that power America's growing data center industry. Our expertise covers the entire energy value chain-from project development and engineering to construction, operations, and maintenance. By integrating advanced technologies, proven processes, and strong partnerships, we deliver reliable, customized solutions that meet the dynamic needs of local energy markets. Hanwha Energy USA is actively advancing strategic initiatives in natural gas generation and data center development, including hyperscaler solutions on both sides of the meter. We are proud to serve as the parent company of: Hanwha Renewables - specializing in utility-scale solar and battery energy storage systems (BESS) Chariot Energy - providing retail electricity services for residential, commercial, and industrial customers in deregulated markets POSITION OVERVIEW We are seeking a Cloud & AI Infrastructure Engineer to design, build, operate, and optimize the Azure and AI platform that supports our internal applications, AI agents, copilots, automations, and enterprise data workloads. This role is responsible for providing a secure, reliable, and cost-effective cloud foundation as our AI and application landscape scales. The ideal candidate will bring strong hands-on experience with Azure infrastructure, infrastructure-as-code, CI/CD, monitoring, observability, and cloud cost optimization. This person will work closely with Application Development and Data Management to ensure AI-enabled solutions are production-ready, well-governed, and operationally supportable. This is not a general infrastructure support role. We are looking for an engineer who can help establish modern cloud engineering discipline around provisioning, deployment, logging, monitoring, security, and cost control for AI-enabled systems. The employee may be required to perform other job-related duties as requested by management. All duties will be assigned in accordance with applicable laws and company policies. RESPONSIBILITIES Design and provision Azure and AI resources using infrastructure-as-code, ensuring consistency, scalability, and maintainability. Establish and enforce standards for networking, identity, monitoring, security, tagging, and cloud resource governance. Build and maintain CI/CD pipelines for AI-enabled applications, internal platforms, agents, and automations. Implement and support logging, telemetry, monitoring, and observability practices for AI and cloud-based workloads. Partner with Application Development and Data Management to ensure solutions are deployed and operated in a secure, reliable, and supportable manner. Manage Azure and AI platform environments across development, testing, and production. Monitor and optimize Azure and Azure OpenAI usage and spend, right-size resources, and help improve cloud cost visibility and efficiency. Partner with Finance and IT leadership on cloud cost reporting, chargeback visibility, and optimization opportunities. Support identity, access, secrets, and security practices required for enterprise cloud and AI workloads. Help define and maintain operational standards for backup, resiliency, recovery, alerting, and support readiness. Troubleshoot deployment, performance, connectivity, and infrastructure issues affecting applications, agents, and cloud services. Contribute to architecture discussions related to hosting, integration, scaling, environment design, and operational controls. Document cloud patterns, standards, deployment approaches, and support procedures in a clear and practical way. Evaluate and introduce appropriate tools and patterns that improve reliability, delivery speed, visibility, and cost management. REQUIRED QUALIFICATIONS Bachelor's degree in Information Systems, Computer Science, Engineering, or a related field. Equivalent experience may be considered. 4+ years of experience in cloud engineering, platform engineering, DevOps, or infrastructure engineering. Strong hands-on experience with Microsoft Azure services and cloud architecture. Experience with infrastructure-as-code such as Terraform, Bicep, ARM templates, or similar tools. Experience building and maintaining CI/CD pipelines for application and platform deployment. Experience implementing monitoring, logging, alerting, and observability for production systems. Understanding of identity, access control, security, and networking concepts in cloud environments. Experience supporting production applications and cloud platforms with a focus on reliability and operational excellence. Strong troubleshooting and problem-solving skills. Ability to work effectively with software developers, data engineers, and technical leadership. Preferred Qualifications Experience supporting AI or machine learning workloads in Azure. Familiarity with Azure OpenAI and the infrastructure patterns needed to support AI-enabled applications. Experience with containerization, orchestration, or modern hosting models. Experience with FinOps, cloud cost optimization, tagging governance, or cost reporting. Experience with secrets management, policy enforcement, and secure deployment patterns. Experience in environments with custom internal applications, integrations, and growing cloud platforms. Familiarity with observability and telemetry practices for distributed systems and AI applications. Key Skills Azure architecture and provisioning Infrastructure-as-code CI/CD pipeline engineering Logging and observability Monitoring and alerting Identity and access controls Cloud networking and security Azure OpenAI platform support Cloud cost optimization Production support and reliability engineering Cross-functional technical collaboration What Success Looks Like In this role, success means: Azure environments are provisioned consistently and governed effectively AI-enabled applications and agents are deployed through repeatable and reliable pipelines Logging, observability, and alerting are strong enough to support production operations Azure and Azure OpenAI usage is monitored and optimized for both performance and cost Cloud standards for identity, networking, security, and tagging are followed consistently Application Development and Data Management teams can move faster because the platform foundation is stable and well run IT leadership and Finance have clearer visibility into cloud consumption and optimization opportunities COMPENSATION: $160,000 - $190,000 salary Attention external recruitment firms, we will not accept any unsolicited resumes at this time. Please do not contact any internal member of our company to discuss the position or to solicit candidates. Hanwha Energy USA provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics.

Join Durham County Government Durham County Government is home to over 2,000 dedicated professionals working together to deliver essential services that strengthen and support our vibrant, diverse community. As the heart of a fast-growing region, we offer meaningful careers across a wide range of fields-giving you the opportunity to make a real impact where you live, work, grow, and play. Learn more at . DEPARTMENT: Information Services & Technology DATE POSTED : April 29, 2026 CLOSING DATE : Until Filled HIRING RANGE: $92,892 - $153,208 POSITION NUMBER: JOB TYPE: Full-Time, 37.5 hrs/week, Exempt SUMMARY OBJECTIVE: The purpose of this position is to provide strategic leadership in designing, integrating, and governing the County's enterprise IT infrastructure landscape. This role ensures secure, scalable, resilient, and high-performance infrastructure by defining architecture standards, aligning technology initiatives with County business goals, and overseeing the design and implementation of networks, servers, storage, data centers, and cloud platforms. The IT Infrastructure Architect collaborates closely with business and IT stakeholders to deliver innovative, sustainable technology solutions that support County-wide operations and long-term strategic objectives, with a strong emphasis on infrastructure reliability, network performance, and security. ESSENTIAL FUNCTIONS: The essential functions listed below represent the majority of the responsibilities of this position. Management may assign additional functions as needed. • Lead the design and governance of enterprise application architecture across County systems, ensuring interoperability and strategic alignment. • Lead the design and governance of enterprise IT infrastructure architecture across County systems, ensuring resiliency, performance, and strategic alignment. • Develop, document, and maintain architecture standards, infrastructure guidelines, network designs, and technical roadmaps. • Design secure, scalable, and resilient infrastructure solutions, including servers, storage, networking (LAN/WAN), firewalls, data centers, and hybrid/cloud environments. • Collaborate with business stakeholders and IT leadership to translate strategic goals into actionable infrastructure and security solutions. • Conduct technology assessments and propose modernization strategies (e.g., cloud migration, network optimization) to improve system performance, reliability, and security. • Oversee and review network architecture, security controls, virtualization, and infrastructure provisioning to support County-wide operations. • Provide technical leadership, mentorship, and guidance to infrastructure engineers, network administrators, security specialists, and project teams. • Ensure compliance with County IT security policies, data governance requirements, cybersecurity frameworks, and industry best practices. • Support vendor evaluations and participate in solution selection for infrastructure, network, and security technologies. • Maintain architecture documentation and deliver clear communication to stakeholders about infrastructure designs, network topologies, and security plans. • Performs related work as assigned. KNOWLEDGE, SKILLS, AND ABILITIES: • Knowledge in Enterprise systems architecture principles and frameworks • Knowledge in Enterprise IT infrastructure architecture principles and frameworks (e.g., TOGAF, ITIL) • Knowledge in Network architecture, routing, switching, SDN, and security protocols (e.g., firewalls, VPN, zero trust) • Knowledge in Cloud infrastructure (IaaS, PaaS on Azure, AWS), hybrid cloud designs, virtualization (VMware, Hyper-V), and containerization • Knowledge of Security, compliance (e.g., NIST, CIS), cybersecurity best practices, and data governance requirements • Knowledge of Infrastructure management methodologies and tools (e.g., monitoring, automation) • Skilled in designing secure, scalable, and resilient infrastructure solutions including networks and advanced security measures • Skilled in developing and maintaining technical architecture documentation and standards • Skilled in conducting technological assessments and recommending modernization strategies • Skilled in leading technical design sessions and infrastructure reviews • Ability to balance strategic planning with hands-on technical design work • Ability to ensure alignment with security, compliance, and County strategic objectives • Proven ability to develop architecture standards and lead complex, cross-domain infrastructure projects involving on-premises, cloud, and hybrid environments. MINIMUM EDUCATION AND EXPERIENCE REQUIREMENTS: Bachelor's degree in information technology, Computer Science, Information Systems or a related field. At least 7 years of progressively responsible experience in IT infrastructure architecture, network design, and security implementation. Demonstrated experience with enterprise infrastructure technologies such as servers, storage, networking equipment, firewalls, load balancers, virtualization (VMware, Hyper-V), and cloud services (Azure, AWS). Proven ability to develop architecture standards and lead complex infrastructure projects involving networks, security, and hybrid environments. SPECIAL CERTIFICATIONS AND LICENSES REQUIREMENTS: • Must possess and maintain a valid state driver's license with an acceptable driving history PREFERRED QUALIFICATIONS: • TOGAF (The Open Group Architecture Framework) Certification • Certified Information Systems Security Professional (CISSP) or comparable security certification • Network-related certifications (e.g., CCIE, CCNP) or cloud certifications (e.g., AWS Certified Solutions Architect, Azure Solutions Architect) PHYSICAL DEMANDS: Physical demands refer to the requirements for physical exertion and coordination of limb and body movement. • Performs sedentary work that involves walking or standing some of the time and involves exerting up to 10 UNAVOIDABLE HAZARDS (WORK ENVIRONMENT): Unavoidable hazards refer to the job conditions that may lead to injury or health hazards even though precautions have been taken. •None. STANDARD CLAUSES May be required to work nights, weekends, holidays and emergencies (man-made or natural) to meet the business needs of Durham County. This job description is not designed to cover or contain a comprehensive listing of essential functions and responsibilities that are required of an employee for this job. Other duties, responsibilities, and activities may change or be assigned at any time with or without notice. ESSENTIAL SAFETY FUNCTIONS It is the responsibility of each employee to comply with established policies, procedures and safe work practices. Each employee must follow safety training and instructions provided by their supervisor. Each employee must also properly wear and maintain all personal protective equipment required for their job. Finally, each employee must immediately report any unsafe work practices or unsafe conditions as well as any on-the-job injury or illnesses. Every manager/supervisor is responsible for enforcing all safety rules and regulations. In addition, they are responsible for ensuring that a safe work environment is maintained, safe work practices are followed and employees are properly trained. AMERICANS WITH DISABILITIES ACT COMPLIANCE: Durham County is an Equal Opportunity Employer. ADA requires Durham County to provide reasonable accommodations to qualified persons with disabilities. Prospective and current employees are encouraged to discuss ADA accommodations with management. BACKGROUND CHECK STATEMENT: This position may be subject to a background check, which could include, but is not limited to, criminal history (employment-related and/or SBI fingerprint-based), credit history, motor vehicle records, educational verification, and checks of the sexual offender registry, depending on the specific requirements of the role. A conviction record does not automatically disqualify an applicant from employment consideration, unless otherwise required by applicable state law.

Are you looking to Optimize your life? Start your exciting path to a rewarding career today! We are Optimum, a leader in the fast-paced world of connectivity, and we're seeking driven and enthusiastic professionals to join our team, empower lives, fuel businesses, and drive innovation. Connectivity is now longer a luxury, but a necessity. A career at Optimum means you'll be enabling progress and enhancing lives by providing reliable, high-speed connectivity solutions that keep the world connected. Our successes, now and in the future, are powered by our amazing product, a commitment to our people and culture, and the connections we make in our communities. If you are resourceful, collaborative, and passionate about delivering consistent excellence, Optimum is for you! Job Summary Optimum is a leading provider of Mobile, Broadband (DOCSIS, Fiber) and Video services in the United States for Business and Residential Customers. We are looking for a passionate and engaged individual who is willing to take on the challenge of scaling product security at a Fortune 500 company and building the cyber security foundation that will allow our development teams to Go Fast! The Product Security organization helps Optimum move faster, securely. We're a team of engineers who work to enable other teams to build products as quickly as possible while continuing to protect our customers. We support developers in shipping secure code by building security tools and services, providing security training and expertise, and advocating for best practices in authentication, authorization, and safe data handling across the company. As a Product Security Engineer focusing on embedded systems security for video, broadband, and Wi-Fi products, you'll be a trusted partner, collaborating closely with engineering and product teams to ensure security is a cornerstone of every product. You will partner with leadership to shape product strategy, advocate for strong security controls, and influence future product iterations, and serve as an industry expert in device security engineering practices and standards. By leveraging your deep industry knowledge, you'll lead the charge in implementing secure architecture and design principles, ensuring early detection and prevention of vulnerabilities. Your expertise in security assessments and software engineering will help identify and mitigate potential threats, while your mentorship and training efforts will foster a security-first culture. Responsibilities Collaborate with engineering and product teams to integrate security and secure-by-default guardrails into the product lifecycle, ensuring that security is a core consideration in all design and development decisions. Conduct Threat Modeling and Risk Assessments from the early stages of the product development lifecycle to identify, assess, and prioritize security risks, enabling proactive mitigation strategies. Perform rigorous security testing and reviews to uncover and address security weaknesses. Lead initiatives automating security processes from the developer workstation to cloud, SaaS, and datacenter environments. Foster a security-first culture by educating and empowering engineering and product teams through training, awareness campaigns, and mentorship, cultivating a strong security mindset. Stay updated on the latest security threats, vulnerabilities, and technology trends, and proactively implement improvements. Contribute to incident response efforts, investigate root causes, and implement corrective actions to minimize impact and prevent future occurrences. Conduct penetration testing, reverse engineering, and vulnerability research against firmware, hardware interfaces, and device software to surface real-world attack paths before adversaries do. Establish and operate Software Bill of Materials (SBOM) management, CVE triage, and coordinated vulnerability disclosure processes for connected devices throughout their lifecycle. Define and uphold secure-by-design requirements aligned to recognized IoT and embedded security standards (e.g., NIST IR 8259, ETSI EN , OWASP IoT Top 10). Qualifications Bachelor's degree in Computer Science, Electrical Engineering, or a related field. Master's degree is a plus. 5+ years of hands-on experience in software engineering and designing and delivering security-critical systems for internet-connected embedded devices. Proven expertise in embedded systems and product security, with a strong understanding of modern software development processes and methods, security best practices, threat modeling, and risk assessment. Excellent communication skills, both written and verbal, and the ability to communicate complex security concepts to technical and non-technical audiences, including senior leadership. Proven ability to establish credibility and build trust with engineers and operational staff. Expertise in conducting comprehensive threat modeling, risk assessments, and code reviews to identify and mitigate vulnerabilities. Experience utilizing and securing AI/ML models and AI-integrated solutions, a general understanding of AI concepts, AI governance and risk management, and a willingness to learn more. Proficiency in secure SDLC practices and practical experience with CI/CD pipelines and DevOps tools. Experience overseeing vulnerability and threat management at the platform and device levels. Strong understanding of cryptography and key management use cases. In-depth knowledge of networking protocols, peripheral and firmware security, secure boot, embedded Linux security, Android or iOS security, and PKI. Experience working with special purpose security hardware such as Trusted Platform Modules (TPMs) and Hardware Security Modules (HSMs). Proficiency in C and C++ for embedded software development and one or more modern programming languages like Golang, Python, Node, and Java. Hands-on experience with hardware-level security testing techniques, including JTAG/SWD, UART, SPI/I2C debug interfaces, firmware extraction, fault injection, and side-channel analysis. Working knowledge of reverse engineering and analysis tooling such as Ghidra, IDA Pro, Binary Ninja, binwalk, QEMU, and common debuggers across ARM, MIPS, and RISC-V architectures. At Optimum, every action and interaction we take part in, is driven by our three Guiding Principles: Do What's Right, Drive One Optimum, and Make It Happen. These aren't just words, they help us build trust, create real community, and embrace new ways of thinking. Our employees are empowered to do the right thing for our customers and co-workers and to recognize and reward these behaviors when we see them. It's all part of the bigger picture of "Be The Difference" where each employee knows they have the power to enact real change, share new ideas, and understand that learning never stop. If you have the drive to succeed and are ready to embark on a thrilling career, seize this opportunity today, and join our winning team. Together, we'll shape the future of connectivity. All job descriptions and required skills, qualifications and responsibilities for a particular position are subject to modification by the Company from time to time, in the Company's discretion based on business necessity. We are an Equal Opportunity Employer committed to recruiting, hiring and promoting qualified people of all backgrounds regardless of gender, race, color, creed, national origin, religion, age, marital status, pregnancy, physical or mental disability, sexual orientation, gender identity, military or veteran status, or any other basis protected by federal, state, or local law. The Company collects personal information about its applicants for employment that may include personal identifiers, professional or employment related information, photos, education information and/or protected classifications under federal and state law. This information is collected for employment purposes, including identification, work authorization, FCRA-compliant background screening, human resource administration and compliance with federal, state and local law. Applicants for employment with The Company will never be asked to provide money (even if reimbursable) as part of the job application or hiring process. Please review our Fraud FAQ for further details. We appreciate your interest in this opportunity. Applicants must be authorized to work for ANY employer in the U.S. Please note that at this time, we do not provide visa sponsorship for employment.