Job Description Overview: We are seeking an elite, systems-thinking Technical Product Owner to orchestrate the lifecycle, scaling, and architectural evolution of our core Enterprise Platform. This is not a front-end or basic UI workflow role. You will own the core backend engine-the secure, unified, and highly optimized bedrock that enables hundreds of internal engineering, analytics, and business units to build and deploy mission-critical capabilities safely. You will sit at the intersection of enterprise cloud infrastructure, APIs, data platforms, and rigorous regulatory compliance, transforming complex technical requirements into robust, scalable platform services. Key Responsibilities Enterprise Platform & API Roadmap Own and execute the core backend platform roadmap, backlog, prioritization matrix, and enterprise release plans. Scale foundational platform services, including enterprise data pipelines, shared microservices, API gateways, and system integrations. Treat internal developers and platform consumers as your primary customers by delivering reliable internal APIs, SDKs, and clear architectural documentation. "Paved Road" Governance, Security & Compliance Partner closely with Cybersecurity, Legal, and Compliance teams to enforce strict security and data-privacy guardrails across the platform. Bake programmatic guardrails into backend services for PII/PHI data masking, role-based access control (RBAC/IAM), data lineage, and auditability. Translate complex healthcare compliance frameworks (e.g., HIPAA, HITRUST, SOC 2) directly into automated backend platform features. Platform Reliability, Performance & Unit Economics Optimize cloud infrastructure footprints, API latency, and platform operating costs without sacrificing system performance or availability. Ruthlessly balance new platform feature delivery with infrastructure scalability, technical debt reduction, and system reliability. Agile Dependency & Stakeholder Orchestration Deconstruct complex architectural initiatives into crisp technical epics, user stories, and quantitative acceptance criteria. Lead Scrum/Agile ceremonies, including sprint planning, daily stand-ups, backlog refinement, and cross-team dependency mapping across multiple engineering squads. Communicate roadmap progress, architectural risks, and delivery status clearly to both Principal Architects and executive business stakeholders. Required Qualifications Experience: 5+ years of explicit experience driving technical product ownership, technical product management, or platform management within a large-scale enterprise environment. Domain Expertise: Proven track record delivering backend infrastructure components, enterprise data platforms (e.g., Snowflake, Databricks, cloud data warehouses), or highly distributed API/microservices systems. Regulated Industry DNA: Direct experience navigating the data complexities and strict security architectures of highly regulated ecosystems (Healthcare, HealthTech, Health Insurance, or comparable regulated enterprises). Technical Literacy: Ability to challenge architectural decisions, review API contracts and data models, and speak the native language of Principal Architects and backend engineers. Compliance Awareness: Strong familiarity with data governance frameworks and security compliance standards (e.g., HIPAA, HITRUST, SOC 2, PII/PHI protection). Agile Rigor: Mastery of Scrum/SAFe frameworks at scale, with deep proficiency using Jira and Confluence to manage complex cross-team dependencies. Preferred Qualifications (Nice to Have) AI-Enabled Capabilities: Exposure to integrating or governing enterprise AI tools, intelligent automation, or AI-assisted product workflows.
11/14/2026
Full time
Job Description Overview: We are seeking an elite, systems-thinking Technical Product Owner to orchestrate the lifecycle, scaling, and architectural evolution of our core Enterprise Platform. This is not a front-end or basic UI workflow role. You will own the core backend engine-the secure, unified, and highly optimized bedrock that enables hundreds of internal engineering, analytics, and business units to build and deploy mission-critical capabilities safely. You will sit at the intersection of enterprise cloud infrastructure, APIs, data platforms, and rigorous regulatory compliance, transforming complex technical requirements into robust, scalable platform services. Key Responsibilities Enterprise Platform & API Roadmap Own and execute the core backend platform roadmap, backlog, prioritization matrix, and enterprise release plans. Scale foundational platform services, including enterprise data pipelines, shared microservices, API gateways, and system integrations. Treat internal developers and platform consumers as your primary customers by delivering reliable internal APIs, SDKs, and clear architectural documentation. "Paved Road" Governance, Security & Compliance Partner closely with Cybersecurity, Legal, and Compliance teams to enforce strict security and data-privacy guardrails across the platform. Bake programmatic guardrails into backend services for PII/PHI data masking, role-based access control (RBAC/IAM), data lineage, and auditability. Translate complex healthcare compliance frameworks (e.g., HIPAA, HITRUST, SOC 2) directly into automated backend platform features. Platform Reliability, Performance & Unit Economics Optimize cloud infrastructure footprints, API latency, and platform operating costs without sacrificing system performance or availability. Ruthlessly balance new platform feature delivery with infrastructure scalability, technical debt reduction, and system reliability. Agile Dependency & Stakeholder Orchestration Deconstruct complex architectural initiatives into crisp technical epics, user stories, and quantitative acceptance criteria. Lead Scrum/Agile ceremonies, including sprint planning, daily stand-ups, backlog refinement, and cross-team dependency mapping across multiple engineering squads. Communicate roadmap progress, architectural risks, and delivery status clearly to both Principal Architects and executive business stakeholders. Required Qualifications Experience: 5+ years of explicit experience driving technical product ownership, technical product management, or platform management within a large-scale enterprise environment. Domain Expertise: Proven track record delivering backend infrastructure components, enterprise data platforms (e.g., Snowflake, Databricks, cloud data warehouses), or highly distributed API/microservices systems. Regulated Industry DNA: Direct experience navigating the data complexities and strict security architectures of highly regulated ecosystems (Healthcare, HealthTech, Health Insurance, or comparable regulated enterprises). Technical Literacy: Ability to challenge architectural decisions, review API contracts and data models, and speak the native language of Principal Architects and backend engineers. Compliance Awareness: Strong familiarity with data governance frameworks and security compliance standards (e.g., HIPAA, HITRUST, SOC 2, PII/PHI protection). Agile Rigor: Mastery of Scrum/SAFe frameworks at scale, with deep proficiency using Jira and Confluence to manage complex cross-team dependencies. Preferred Qualifications (Nice to Have) AI-Enabled Capabilities: Exposure to integrating or governing enterprise AI tools, intelligent automation, or AI-assisted product workflows.
Intro Are you ready to explore a world of possibilities, both at work and during your time off? Join our American Airlines family, and you'll travel the world, grow your expertise, and become the best version of you. As you embark on a new journey, you'll tackle challenges with flexibility and grace, learning new skills and advancing your career while having the time of your life. Feel free to enrich both your personal and work life and hop onboard! Why you'll love this job As part of the Identity Services team, you'll help deliver secure digital products that support a reliable and profitable airline. You will design, implement, and care for cybersecurity solutions that protect users, systems, operations, and data, by ensuring strong identity controls such as role based access, authentication, authorization, and governance. This role requires attention to detail, strong problem solving, and high ethical responsibility. The fast paced global airline environment offers opportunities for professional development, continuous growth, and meaningful impact. In the Identity Services domain, you will be responsible for the architecture, design, standards, and patterns for delivering strong identity and access programs. You will be expected to balance technical oversight, and business alignment to secure organization's digital assets while ensuring the team is empowered, the systems are resilient, and the entire operation runs smoothly, effectively, and proactively. Additional information about the skills needed for this position is listed in the Skills, Licenses & Certifications section below. What you'll do As noted above, this list is intended to reflect the current job but there may be additional essential functions (and certainly non-essential job functions) that are not referenced. Management will modify the job or require other tasks be performed whenever it is deemed appropriate to do so, observing, of course, any legal obligations including any collective bargaining obligations. Identity and Access Management (IAM) Architecture: Design and oversee the architecture and deployment of IAM solutions to manage user identities, roles, and access privileges across the organization's systems and applications. User Provisioning and De-provisioning Framework: Architect and optimize the processes for automating the creation, modification, and removal of user accounts and access rights based on organizational policies and user roles. Security and Governance: Establishing policies for user access, role-based access control (RBAC), and ensuring audit compliance. Designing Secure Architectures: Develop and design secure IT architectures that protect the organization's data, applications, and infrastructure from cyber threats. Collaboration with Stakeholders: Work closely with other IT teams, business units, and external partners to ensure security requirements are understood and implemented effectively. Security Standards and Best Practices: Establish and enforce security standards, guidelines, and best practices across the organization. Leadership: Provide technical guidance and oversight to the engineering team, system owners and customers. Incident Response Planning: Develop and maintain comprehensive incident response plans and procedures to ensure swift and effective handling of security incidents. Monitoring and Auditing Systems: Design and direct the continuous monitoring of IAM systems for suspicious activities, perform regular audits to ensure compliance with security policies, and generate comprehensive reports on access controls and user activities. Communication: Clearly convey project risks and strategies to senior management and stakeholders, ensuring transparency and informed decision-making. Operational Management and Monitoring: Design monitoring strategies to ensure the continuous availability, performance, and reliability of identity services. Compliance and Risk Management Framework: Design frameworks to ensure compliance with data protection laws and standards (e.g., GDPR, CCPA). Conduct risk assessments and audits to identify and address vulnerabilities. All you'll need for success Minimum Qualifications- Education & Prior Job Experience Bachelor's degree in Computer Science, Computer Engineering, Technology, Information Systems (CIS/MIS), Engineering, or a related technical discipline, or equivalent experience/training. Extensive job experience in cybersecurity architecture or a related field is required, with a proven track record of designing and implementing secure IT architecture and frameworks. Demonstrated expertise in leading architectural design and strategic oversight in cybersecurity initiatives. 12+ years experience in Cybersecurity Architecture Preferred Qualifications- Education & Prior Job Experience Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field; advanced degree preferred. 5+ years' experience in cybersecurity architecture or related roles. Experience designing and implementing comprehensive security architectures and frameworks. Familiarity with cloud platforms (e.g., AWS, Azure, Google Cloud) and their security features. Experience with regulatory compliance and industry standards (e.g., GDPR, PCI-DSS, ISO 27001). Skills, Licenses & Certifications Relevant certifications including but not limited to Certified Information Systems Security Professional (CISSP); Certified Information Security Manager (CISM); Certified Information Systems Auditor (CISA); Certified in Risk and Information Systems Control (CRISC); Certified Information Privacy Professional (CIPP); Certified Information Systems Security Professional - Architecture (CISSP-ISSAP) Proficiency in identity and access management (IAM) tools and technologies Expertise in developing and implementing cybersecurity IAM policies and procedures Knowledge of IAM principles and methodologies Understanding of regulatory requirements and standards related to IAM (e.g., GDPR, HIPAA, SOX) Familiarity with cybersecurity frameworks and standards (e.g., NIST, ISO 27001) Ability to conduct assessments and audits of IAM practices to identify vulnerabilities and gaps Strong problem-solving skills to address IAM management challenges Ability to collaborate effectively with cross-functional teams Experience in managing IAM projects, including planning, execution, and monitoring Proficiency in identity and access management (IAM) solutions (e.g., Saviynt, Okta, Ping Identity, Microsoft Azure AD) Knowledge of authentication protocols (e.g., SAML, OAuth, OpenID Connect, Kerberos) Familiarity with cloud security and cloud IAM (e.g., AWS IAM, Azure AD) Ability to analyze complex security requirements and design effective access management solutions Strong problem-solving skills to address security challenges and incidents Excellent written and verbal communication skills to articulate security concepts and solutions to technical and non-technical stakeholders What you'll get Feel free to take advantage of all that American Airlines has to offer: Travel Perks: Ready to explore the world? You, your family and your friends can reach 365 destinations on more than 6,800 daily flights across our global network. Health Benefits: On day one, you'll have access to your health, dental, prescription and vision benefits to help you stay well. And that's just the start, we also offer virtual doctor visits, flexible spending accounts and more. Wellness Programs: We want you to be the best version of yourself - that's why our wellness programs provide you with all the right tools, resources and support you need. 401(k) Program: Available upon hire and, depending on the workgroup, employer contributions to your 401(k) program are available after one year. Additional Benefits: Other great benefits include our Employee Assistance Program, pet insurance and discounts on hotels, cars, cruises and more Feel free to be yourself at American From the team members we hire to the customers we serve, inclusion and diversity are the foundation of the dynamic workforce at American Airlines. Our 20+ Team Member Business Resource Groups are focused on connecting our team members to our customers, suppliers, communities and shareholders, helping team members reach their full potential and creating an inclusive work environment to meet and exceed the needs of our diverse world. Are you ready to feel a tremendous sense of pride and satisfaction as you do your part to keep the largest airline in the world running smoothly as we care for people on life's journey? Feel free to be yourself at American.
11/14/2026
Full time
Intro Are you ready to explore a world of possibilities, both at work and during your time off? Join our American Airlines family, and you'll travel the world, grow your expertise, and become the best version of you. As you embark on a new journey, you'll tackle challenges with flexibility and grace, learning new skills and advancing your career while having the time of your life. Feel free to enrich both your personal and work life and hop onboard! Why you'll love this job As part of the Identity Services team, you'll help deliver secure digital products that support a reliable and profitable airline. You will design, implement, and care for cybersecurity solutions that protect users, systems, operations, and data, by ensuring strong identity controls such as role based access, authentication, authorization, and governance. This role requires attention to detail, strong problem solving, and high ethical responsibility. The fast paced global airline environment offers opportunities for professional development, continuous growth, and meaningful impact. In the Identity Services domain, you will be responsible for the architecture, design, standards, and patterns for delivering strong identity and access programs. You will be expected to balance technical oversight, and business alignment to secure organization's digital assets while ensuring the team is empowered, the systems are resilient, and the entire operation runs smoothly, effectively, and proactively. Additional information about the skills needed for this position is listed in the Skills, Licenses & Certifications section below. What you'll do As noted above, this list is intended to reflect the current job but there may be additional essential functions (and certainly non-essential job functions) that are not referenced. Management will modify the job or require other tasks be performed whenever it is deemed appropriate to do so, observing, of course, any legal obligations including any collective bargaining obligations. Identity and Access Management (IAM) Architecture: Design and oversee the architecture and deployment of IAM solutions to manage user identities, roles, and access privileges across the organization's systems and applications. User Provisioning and De-provisioning Framework: Architect and optimize the processes for automating the creation, modification, and removal of user accounts and access rights based on organizational policies and user roles. Security and Governance: Establishing policies for user access, role-based access control (RBAC), and ensuring audit compliance. Designing Secure Architectures: Develop and design secure IT architectures that protect the organization's data, applications, and infrastructure from cyber threats. Collaboration with Stakeholders: Work closely with other IT teams, business units, and external partners to ensure security requirements are understood and implemented effectively. Security Standards and Best Practices: Establish and enforce security standards, guidelines, and best practices across the organization. Leadership: Provide technical guidance and oversight to the engineering team, system owners and customers. Incident Response Planning: Develop and maintain comprehensive incident response plans and procedures to ensure swift and effective handling of security incidents. Monitoring and Auditing Systems: Design and direct the continuous monitoring of IAM systems for suspicious activities, perform regular audits to ensure compliance with security policies, and generate comprehensive reports on access controls and user activities. Communication: Clearly convey project risks and strategies to senior management and stakeholders, ensuring transparency and informed decision-making. Operational Management and Monitoring: Design monitoring strategies to ensure the continuous availability, performance, and reliability of identity services. Compliance and Risk Management Framework: Design frameworks to ensure compliance with data protection laws and standards (e.g., GDPR, CCPA). Conduct risk assessments and audits to identify and address vulnerabilities. All you'll need for success Minimum Qualifications- Education & Prior Job Experience Bachelor's degree in Computer Science, Computer Engineering, Technology, Information Systems (CIS/MIS), Engineering, or a related technical discipline, or equivalent experience/training. Extensive job experience in cybersecurity architecture or a related field is required, with a proven track record of designing and implementing secure IT architecture and frameworks. Demonstrated expertise in leading architectural design and strategic oversight in cybersecurity initiatives. 12+ years experience in Cybersecurity Architecture Preferred Qualifications- Education & Prior Job Experience Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field; advanced degree preferred. 5+ years' experience in cybersecurity architecture or related roles. Experience designing and implementing comprehensive security architectures and frameworks. Familiarity with cloud platforms (e.g., AWS, Azure, Google Cloud) and their security features. Experience with regulatory compliance and industry standards (e.g., GDPR, PCI-DSS, ISO 27001). Skills, Licenses & Certifications Relevant certifications including but not limited to Certified Information Systems Security Professional (CISSP); Certified Information Security Manager (CISM); Certified Information Systems Auditor (CISA); Certified in Risk and Information Systems Control (CRISC); Certified Information Privacy Professional (CIPP); Certified Information Systems Security Professional - Architecture (CISSP-ISSAP) Proficiency in identity and access management (IAM) tools and technologies Expertise in developing and implementing cybersecurity IAM policies and procedures Knowledge of IAM principles and methodologies Understanding of regulatory requirements and standards related to IAM (e.g., GDPR, HIPAA, SOX) Familiarity with cybersecurity frameworks and standards (e.g., NIST, ISO 27001) Ability to conduct assessments and audits of IAM practices to identify vulnerabilities and gaps Strong problem-solving skills to address IAM management challenges Ability to collaborate effectively with cross-functional teams Experience in managing IAM projects, including planning, execution, and monitoring Proficiency in identity and access management (IAM) solutions (e.g., Saviynt, Okta, Ping Identity, Microsoft Azure AD) Knowledge of authentication protocols (e.g., SAML, OAuth, OpenID Connect, Kerberos) Familiarity with cloud security and cloud IAM (e.g., AWS IAM, Azure AD) Ability to analyze complex security requirements and design effective access management solutions Strong problem-solving skills to address security challenges and incidents Excellent written and verbal communication skills to articulate security concepts and solutions to technical and non-technical stakeholders What you'll get Feel free to take advantage of all that American Airlines has to offer: Travel Perks: Ready to explore the world? You, your family and your friends can reach 365 destinations on more than 6,800 daily flights across our global network. Health Benefits: On day one, you'll have access to your health, dental, prescription and vision benefits to help you stay well. And that's just the start, we also offer virtual doctor visits, flexible spending accounts and more. Wellness Programs: We want you to be the best version of yourself - that's why our wellness programs provide you with all the right tools, resources and support you need. 401(k) Program: Available upon hire and, depending on the workgroup, employer contributions to your 401(k) program are available after one year. Additional Benefits: Other great benefits include our Employee Assistance Program, pet insurance and discounts on hotels, cars, cruises and more Feel free to be yourself at American From the team members we hire to the customers we serve, inclusion and diversity are the foundation of the dynamic workforce at American Airlines. Our 20+ Team Member Business Resource Groups are focused on connecting our team members to our customers, suppliers, communities and shareholders, helping team members reach their full potential and creating an inclusive work environment to meet and exceed the needs of our diverse world. Are you ready to feel a tremendous sense of pride and satisfaction as you do your part to keep the largest airline in the world running smoothly as we care for people on life's journey? Feel free to be yourself at American.
Job Description Role Overview: The Vice President, Workforce Identity and Directory Services, serves as the primary owner of all Active Directory-related infrastructure and strategy. This role leads the design, governance, and modernization of the enterprise identity platform across on-premises, hybrid, and cloud environments. The VP is responsible for developing long-term technology roadmaps, driving security best practices, and partnering with Security, Infrastructure, and Application teams to deliver scalable, resilient identity services aligned with business objectives. Key Responsibilities: Serve as the primary owner and point of contact for all Active Directory infrastructure, strategy, and operations across on-premises and cloud environments. Lead and execute a long-term technology roadmap to modernize the Active Directory environment, including forest and domain consolidation, AD tiering model implementation, strategic reduction and decommissioning of on-premises domain controllers, and accelerating workload migration from on-premises AD to Microsoft Entra ID. Architect and govern enterprise Active Directory Domain Services (AD DS), Active Directory Certificate Services (AD CS), DNS, and DHCP, PKI, ensuring high availability, disaster recovery readiness, and security at scale. Drive the adoption and optimization of Microsoft Entra ID security features, including Conditional Access, Identity Protection, Identity Governance, Workload Identities, and Entra Permissions Management. Govern Entra ID external collaboration and application identity, including cross-tenant access policies, B2B guest account lifecycle, app registration and enterprise application management, API permission and consent policy governance, and service principal security and credential rotation. Manage hybrid Active Directory environments, including Azure AD Connect / Cloud Sync configuration, seamless SSO, pass-through authentication, and directory synchronization health monitoring. Design and enforce Group Policy architecture at scale, including GPO lifecycle management, security baselines, and policy inheritance strategies across complex OU structures. Establish and enforce identity security best practices, policies, and standards across the organization in alignment with zero trust principles and AD tiering models (Enhanced Security Admin Environment). Oversee Kerberos, NTLM, LDAP, and certificate-based authentication protocols, driving migration away from legacy protocols toward modern authentication standards. Lead AD Forest and domain trust management, replication topology optimization, Sites and Services configuration, and schema extension governance. Partner with Security, Compliance, and Risk teams to ensure identity infrastructure meets regulatory and audit requirements, including SOX, NIST, and industry-specific mandates. Oversee incident response, disaster recovery, and root cause analysis for identity-related security events, AD replication failures, and service disruptions. Evaluate emerging identity technologies and industry trends including passwordless authentication, decentralized identity, and AI-driven threat detection to inform strategic planning and investment decisions. Required Qualifications: 10+ years of progressive experience in IT infrastructure with a focus on Active Directory and identity management, including at least 5 years in an architect or senior engineering capacity. Deep knowledge of Microsoft 365 from an identity and access management perspective, including Exchange Online, SharePoint Online, and Teams integration with Entra ID, M365 group and license management, app consent frameworks, service principals, and Microsoft 365 Defender for identity-related threat detection. Deep fluency in authentication and federation protocols, including SAML, OAuth 2.0, OpenID Connect, WS-Federation, Kerberos, LDAP, and NTLM, with a track record of migrating environments away from legacy protocols. Experience implementing passwordless authentication strategies, including FIDO2, Windows Hello for Business, and certificate-based authentication via PKI. Hands-on experience with Active Directory security assessment and hardening tools such as BloodHound, PingCastle, and Purple Knight for attack path analysis and security posture evaluation. Knowledge of service account governance, including Group Managed Service Accounts (gMSA), and endpoint security tooling such as LAPS. Proficiency with PowerShell, Terraform, DSC, and Microsoft Graph API for identity infrastructure automation, reporting, and configuration drift detection. Working knowledge of NIST, SOX, or other regulatory compliance frameworks as they relate to identity management and PKI governance. Microsoft certifications such as Microsoft Certified: Identity and Access Administrator Associate, Azure Solutions Architect Expert, or Cybersecurity Architect Expert. Proven track record of building, mentoring, and managing high-performing identity engineering teams. Excellent communication and stakeholder management skills, to include translating complex identity concepts for non-technical audiences and influence at all levels of the organization. Preferred Qualifications: Identity architecture and strategic technology vision Enterprise security and zero trust mindset Deep technical problem solving across complex, multi-forest AD environments Stakeholder management and executive communication Strong ownership, accountability, and bias toward action Experience in financial services, private equity, or other highly regulated industries.
11/14/2026
Full time
Job Description Role Overview: The Vice President, Workforce Identity and Directory Services, serves as the primary owner of all Active Directory-related infrastructure and strategy. This role leads the design, governance, and modernization of the enterprise identity platform across on-premises, hybrid, and cloud environments. The VP is responsible for developing long-term technology roadmaps, driving security best practices, and partnering with Security, Infrastructure, and Application teams to deliver scalable, resilient identity services aligned with business objectives. Key Responsibilities: Serve as the primary owner and point of contact for all Active Directory infrastructure, strategy, and operations across on-premises and cloud environments. Lead and execute a long-term technology roadmap to modernize the Active Directory environment, including forest and domain consolidation, AD tiering model implementation, strategic reduction and decommissioning of on-premises domain controllers, and accelerating workload migration from on-premises AD to Microsoft Entra ID. Architect and govern enterprise Active Directory Domain Services (AD DS), Active Directory Certificate Services (AD CS), DNS, and DHCP, PKI, ensuring high availability, disaster recovery readiness, and security at scale. Drive the adoption and optimization of Microsoft Entra ID security features, including Conditional Access, Identity Protection, Identity Governance, Workload Identities, and Entra Permissions Management. Govern Entra ID external collaboration and application identity, including cross-tenant access policies, B2B guest account lifecycle, app registration and enterprise application management, API permission and consent policy governance, and service principal security and credential rotation. Manage hybrid Active Directory environments, including Azure AD Connect / Cloud Sync configuration, seamless SSO, pass-through authentication, and directory synchronization health monitoring. Design and enforce Group Policy architecture at scale, including GPO lifecycle management, security baselines, and policy inheritance strategies across complex OU structures. Establish and enforce identity security best practices, policies, and standards across the organization in alignment with zero trust principles and AD tiering models (Enhanced Security Admin Environment). Oversee Kerberos, NTLM, LDAP, and certificate-based authentication protocols, driving migration away from legacy protocols toward modern authentication standards. Lead AD Forest and domain trust management, replication topology optimization, Sites and Services configuration, and schema extension governance. Partner with Security, Compliance, and Risk teams to ensure identity infrastructure meets regulatory and audit requirements, including SOX, NIST, and industry-specific mandates. Oversee incident response, disaster recovery, and root cause analysis for identity-related security events, AD replication failures, and service disruptions. Evaluate emerging identity technologies and industry trends including passwordless authentication, decentralized identity, and AI-driven threat detection to inform strategic planning and investment decisions. Required Qualifications: 10+ years of progressive experience in IT infrastructure with a focus on Active Directory and identity management, including at least 5 years in an architect or senior engineering capacity. Deep knowledge of Microsoft 365 from an identity and access management perspective, including Exchange Online, SharePoint Online, and Teams integration with Entra ID, M365 group and license management, app consent frameworks, service principals, and Microsoft 365 Defender for identity-related threat detection. Deep fluency in authentication and federation protocols, including SAML, OAuth 2.0, OpenID Connect, WS-Federation, Kerberos, LDAP, and NTLM, with a track record of migrating environments away from legacy protocols. Experience implementing passwordless authentication strategies, including FIDO2, Windows Hello for Business, and certificate-based authentication via PKI. Hands-on experience with Active Directory security assessment and hardening tools such as BloodHound, PingCastle, and Purple Knight for attack path analysis and security posture evaluation. Knowledge of service account governance, including Group Managed Service Accounts (gMSA), and endpoint security tooling such as LAPS. Proficiency with PowerShell, Terraform, DSC, and Microsoft Graph API for identity infrastructure automation, reporting, and configuration drift detection. Working knowledge of NIST, SOX, or other regulatory compliance frameworks as they relate to identity management and PKI governance. Microsoft certifications such as Microsoft Certified: Identity and Access Administrator Associate, Azure Solutions Architect Expert, or Cybersecurity Architect Expert. Proven track record of building, mentoring, and managing high-performing identity engineering teams. Excellent communication and stakeholder management skills, to include translating complex identity concepts for non-technical audiences and influence at all levels of the organization. Preferred Qualifications: Identity architecture and strategic technology vision Enterprise security and zero trust mindset Deep technical problem solving across complex, multi-forest AD environments Stakeholder management and executive communication Strong ownership, accountability, and bias toward action Experience in financial services, private equity, or other highly regulated industries.
Job Description Description The Defense Systems Group at Leidos has an immediate opening for a Principal Digital Firmware Design Engineer at our St. Petersburg, FL facility. This position supports the development of advanced, mission-critical military communications systems and involves the design, integration, testing, and optimization of secure, ruggedized electronic hardware and firmware for defense applications. The ideal candidate will possess deep expertise in FPGA-based digital design and hands-on experience with integrating hardware and firmware within complex embedded systems. This individual will have a demonstrated track record supporting defense programs across the full product lifecycle-from requirements development and architectural design through integration, qualification testing, and transition to production. The Leidos St. Petersburg facility specializes in the design, development, modeling and simulation, analysis, prototyping, and testing of advanced electronic systems. Our primary focus areas include embedded communications systems, Software Defined Radios (SDR), and Phased Array Antenna Systems supporting Department of Defense and commercial customers. Primary Responsibilities: Participate in a multi-disciplinary engineering team developing secure, high-performance military communications hardware and firmware. Analyze and decompose system-level requirements into detailed hardware design specifications with full traceability. Perform Logic Design; write VHDL code, perform synthesis, logic simulation, test bench generation, functional testing and hardware debugging of designs within FPGA/CPLD devices. Architect, implement and test embedded firmware /software within FPGA-based digital designs including signal processing, control logic, and high-speed interfaces on a variety of platforms (FPGAs, microcontrollers, microprocessors, and mixed signal designs). Troubleshoot and resolve complex hardware, firmware / software and integration issues across prototype and production phases. Support design reviews (SRR, PDR, CDR), technical documentation, and configuration management processes. Provide technical input for cost estimates, schedules, and risk assessments. Collaborate closely with Firmware, Software, RF, systems, and test engineering teams throughout the development lifecycle. Clearance Requirements: U.S. Citizen required. Ability to obtain and maintain a Secret Security Clearance. Active Secret clearance preferred. Ability to obtain Top Secret clearance preferred. Required Qualifications: BS or MS in Electrical Engineering, Computer Engineering, or related field. 8+ years of experience in embedded hardware and digital design (10+ preferred for Senior level). Experience supporting full product development lifecycle including: Requirements analysis, System design and hardware implementation, Integration and test Firmware/software architecture development for embedded systems, including FPGAs and SoCs Technical documentation and formal design reviews Strong VHDL, FPGA/SoC design and implementation experience: Digital logic design using VHDL/Verilog with System-On-Chip devices (SoC's), FPGA's, CPLD/s, and/or Microcontrollers. Modern vendor design tools (IDE's) such as Xilinx Vivado, Vitis, STM, Libero SoC, Lattice Diamond Simulation and Testbench generation (Xilinx simulator, Aldec Active HDL, Riveria Pro, Modelsim, or similar) RISC microprocessors architectures (ARM Cortex, Microblaze, PowerPC, RISC-V) C/C++ language software development for embedded, real-time systems. Experience with one or more of the following: Integrating and troubleshooting digital subsystems within embedded systems. Digital interfaces such as I2C, SPI, RS-232/422, USB, Ethernet ADC/DAC devices and understanding performance characteristics. Hands-on lab experience debugging hardware using oscilloscopes, logic analyzers, and related tools Understand trade-offs of embedded system targets (FPGA, SoC, microcontroller, RTOS, bare-metal) for developing best cost/option architectures Preferred Qualifications: Active Secret or Top Secret clearance. Proven experience in full-stack FPGA development for Xilinx UltraScale/UltraScale+ architectures, spanning RTL design (VHDL/Verilog) and embedded C/C++ development for bare-metal, FreeRTOS, or embedded Linux environments (PetaLinux, etc). Experience with one or more of the following: Design and development with other FPGA/CPLD vendors such as Microsemi, ST-Micro, Lattice, etc High-speed interfaces/protocols such as PCIe, JESD204B, LVDS, and SERDES Simulation and modeling tools (MATLAB, Python, LabVIEW) Implementing signal processing concepts such as digital filters, digital modulation, up/down conversion within HDL designs IP cores and modern processor interfaces (Xilinx IP Cores, AXI4, AXI-Stream or similar) Design, integration and testing electronic circuits within embedded systems, including digital, analog and radio frequency (RF) subsystems. Experience developing ruggedized or military communication systems Experience with the Cooperative Engagement Capability Naval communications system. Experience transitioning prototype designs into production hardware Familiar with schematic capture design tools (Altium, Cadence Allegro/OrCAD, Ki-CAD or equivalent) If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares. Original Posting:October 27, 2026 For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above. Pay Range:Pay Range $107,900.00 - $195,050.00 The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law. About Leidos Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit . Pay and Benefits Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at -benefits. Securing Your Data Beware of fake employment opportunities using Leidos' name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the automated system - never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at . If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission. Commitment to Non-Discrimination All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.
11/13/2026
Full time
Job Description Description The Defense Systems Group at Leidos has an immediate opening for a Principal Digital Firmware Design Engineer at our St. Petersburg, FL facility. This position supports the development of advanced, mission-critical military communications systems and involves the design, integration, testing, and optimization of secure, ruggedized electronic hardware and firmware for defense applications. The ideal candidate will possess deep expertise in FPGA-based digital design and hands-on experience with integrating hardware and firmware within complex embedded systems. This individual will have a demonstrated track record supporting defense programs across the full product lifecycle-from requirements development and architectural design through integration, qualification testing, and transition to production. The Leidos St. Petersburg facility specializes in the design, development, modeling and simulation, analysis, prototyping, and testing of advanced electronic systems. Our primary focus areas include embedded communications systems, Software Defined Radios (SDR), and Phased Array Antenna Systems supporting Department of Defense and commercial customers. Primary Responsibilities: Participate in a multi-disciplinary engineering team developing secure, high-performance military communications hardware and firmware. Analyze and decompose system-level requirements into detailed hardware design specifications with full traceability. Perform Logic Design; write VHDL code, perform synthesis, logic simulation, test bench generation, functional testing and hardware debugging of designs within FPGA/CPLD devices. Architect, implement and test embedded firmware /software within FPGA-based digital designs including signal processing, control logic, and high-speed interfaces on a variety of platforms (FPGAs, microcontrollers, microprocessors, and mixed signal designs). Troubleshoot and resolve complex hardware, firmware / software and integration issues across prototype and production phases. Support design reviews (SRR, PDR, CDR), technical documentation, and configuration management processes. Provide technical input for cost estimates, schedules, and risk assessments. Collaborate closely with Firmware, Software, RF, systems, and test engineering teams throughout the development lifecycle. Clearance Requirements: U.S. Citizen required. Ability to obtain and maintain a Secret Security Clearance. Active Secret clearance preferred. Ability to obtain Top Secret clearance preferred. Required Qualifications: BS or MS in Electrical Engineering, Computer Engineering, or related field. 8+ years of experience in embedded hardware and digital design (10+ preferred for Senior level). Experience supporting full product development lifecycle including: Requirements analysis, System design and hardware implementation, Integration and test Firmware/software architecture development for embedded systems, including FPGAs and SoCs Technical documentation and formal design reviews Strong VHDL, FPGA/SoC design and implementation experience: Digital logic design using VHDL/Verilog with System-On-Chip devices (SoC's), FPGA's, CPLD/s, and/or Microcontrollers. Modern vendor design tools (IDE's) such as Xilinx Vivado, Vitis, STM, Libero SoC, Lattice Diamond Simulation and Testbench generation (Xilinx simulator, Aldec Active HDL, Riveria Pro, Modelsim, or similar) RISC microprocessors architectures (ARM Cortex, Microblaze, PowerPC, RISC-V) C/C++ language software development for embedded, real-time systems. Experience with one or more of the following: Integrating and troubleshooting digital subsystems within embedded systems. Digital interfaces such as I2C, SPI, RS-232/422, USB, Ethernet ADC/DAC devices and understanding performance characteristics. Hands-on lab experience debugging hardware using oscilloscopes, logic analyzers, and related tools Understand trade-offs of embedded system targets (FPGA, SoC, microcontroller, RTOS, bare-metal) for developing best cost/option architectures Preferred Qualifications: Active Secret or Top Secret clearance. Proven experience in full-stack FPGA development for Xilinx UltraScale/UltraScale+ architectures, spanning RTL design (VHDL/Verilog) and embedded C/C++ development for bare-metal, FreeRTOS, or embedded Linux environments (PetaLinux, etc). Experience with one or more of the following: Design and development with other FPGA/CPLD vendors such as Microsemi, ST-Micro, Lattice, etc High-speed interfaces/protocols such as PCIe, JESD204B, LVDS, and SERDES Simulation and modeling tools (MATLAB, Python, LabVIEW) Implementing signal processing concepts such as digital filters, digital modulation, up/down conversion within HDL designs IP cores and modern processor interfaces (Xilinx IP Cores, AXI4, AXI-Stream or similar) Design, integration and testing electronic circuits within embedded systems, including digital, analog and radio frequency (RF) subsystems. Experience developing ruggedized or military communication systems Experience with the Cooperative Engagement Capability Naval communications system. Experience transitioning prototype designs into production hardware Familiar with schematic capture design tools (Altium, Cadence Allegro/OrCAD, Ki-CAD or equivalent) If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares. Original Posting:October 27, 2026 For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above. Pay Range:Pay Range $107,900.00 - $195,050.00 The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law. About Leidos Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit . Pay and Benefits Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at -benefits. Securing Your Data Beware of fake employment opportunities using Leidos' name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the automated system - never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at . If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission. Commitment to Non-Discrimination All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.
This job is with Invesco, an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. About Invesco As one of the world's leading independent global investment firms, Invesco is dedicated to rethinking possibilities for our clients. By delivering the combined power of our distinctive investment management capabilities, we provide a wide range of investment strategies and vehicles to our clients around the world. If you're looking for challenging work, intelligent colleagues, and exposure across a global footprint, come explore your potential at Invesco. What's in it for you? Our people are at the ver y core of our success. Invesco employees get more out of life through our comprehensive compensation and benefit offerings including: Flexible paid time off Hybrid work schedule 401(K) matching of 100% up to the first 6% with a discretionary supplemental contribution Health & wellbeing benefits Parental Leave benefits Employee stock purchase plan Job Description Key Responsibilities / Duties: Define and execute enterprise security architecture strategies, standards, reference architectures, design patterns, and guidelines aligned with business objectives and technology modernization efforts. undefined Partners with business leaders, enterprise architects, engineering teams, and security stakeholders to embed security requirements into technology roadmaps, cloud adoption, and transformation initiatives. undefined Define security functional and non-functional requirements that support business objectives and strengthen solution design. undefined Assess the effectiveness of security controls across data protection, identity and access management, security monitoring, detective controls, infrastructure/network security, and incident response; recommend controls, processes, and remediation actions to address gaps and reduce risk. undefined Research, evaluate, and advocate for emerging technologies, architectures, and security products that advance the security maturity roadmap. undefined Act as a subject matter expert for advisory, review and approval of security designs, configurations, baselines, and technical standards. undefined Mentor security architects and technical teams, promoting architectural excellence, knowledge sharing, and clear communication of complex security concepts to technical and business audiences. undefined Other duties as assigned. Work Experience / Knowledge: 15+ years of progressive IT experience, including 10+ years focused on cybersecurity, security architecture, and enterprise architecture in large, complex organizations. undefined 5+ years of experience with cloud delivery platforms, including IaaS, PaaS, and SaaS, and providers such as Amazon Web Services (AWS) and Microsoft Azure. undefined Strong background across cloud security, Zero Trust, networking, identity and access management, data protection, AI platforms, and risk management. undefined Experience leading enterprise-wide security initiatives, including architecture, implementation, and adoption of security solutions and processes. undefined Ability to engage senior leaders, define requirements, and clearly communicate security risks, decisions, and recommendations. undefined Expertise in two or more technology domains, such as infrastructure, application security, network security, IAM, data protection, endpoint security or AI security. undefined Knowledge of industry security control frameworks such as NIST, CSA CCM, and CIS Critical Security Controls. undefined Proficiency with architecture modeling using industry-standard notation languages, such as ArchiMate. Willingness to travel both domestically and internationally. Frequency and duration to be determined by manager. Skills / Other Personal Attributes Required: Strong ability to influence across technical, business, and executive stakeholders to drive adoption of enterprise architecture standards and security recommendations. undefined Collaborative team player with strong communication, organization, and facilitation skills. High-energy, confident professional with an ability to remain calm and take control in a crisis. Ability to see the big picture and think and act strategically. undefined Self-motivated and able to work independently with minimal direction. undefined Open-minded, flexible, and receptive to diverse perspectives; able to adapt to changing demands and conditions. undefined Committed to continuous learning, capability development, and mentoring others. Formal Education: Bachelor's degree in computer science, information systems, or a related field, or equivalent demonstrated experience. License / Registration / Certification: Certified Information Systems Security Professional ( CISSP) or equivalent certification. undefined Certification in enterprise architecture methodology or framework, such as The Open Group Architecture Framework (TOGAF) or Sherwood Applied Business Security Architecture (SABSA), preferred. undefined Cloud Security Professional (CCSP), Certificate of Cloud Security Knowledge (CCSK), or relevant vendor certifications from AWS or Microsoft Azure preferred. The salary range for this position in Charlottetown is $120,000-130,000 CAD per year. The total compensation offered for this position includes salary and incentive pay and will vary based on skills, experience and location. Full Time / Part Time Full time Worker Type Employee Job Exempt (Yes / No) Yes Workplace Model Pursuant to Invesco's Workplace Policy, employees are expected to comply with the firm's most current workplace model, which as of October 1, 2025, includes spending at least four full days each week working in an Invesco office. This reflects our belief that spending time together in the office helps us build stronger relationships, collaborate more easily, and support each other's growth and development. The above information on this description has been designed to indicate the general nature and level of work performed by employees within this role. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications required of employees assigned to this job. The job holder may be required to perform other duties as deemed appropriate by their manager from time to time. Invesco's culture of inclusivity and its commitment to diversity in the workplace are demonstrated through our people practices. We are proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, creed, color, religion, sex, gender, gender identity, sexual orientation, marital status, national origin, citizenship status, disability, age, or veteran status. Our equal opportunity employment efforts comply with all applicable U.S. state and federal laws governing non-discrimination in employment.
11/13/2026
Full time
This job is with Invesco, an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. About Invesco As one of the world's leading independent global investment firms, Invesco is dedicated to rethinking possibilities for our clients. By delivering the combined power of our distinctive investment management capabilities, we provide a wide range of investment strategies and vehicles to our clients around the world. If you're looking for challenging work, intelligent colleagues, and exposure across a global footprint, come explore your potential at Invesco. What's in it for you? Our people are at the ver y core of our success. Invesco employees get more out of life through our comprehensive compensation and benefit offerings including: Flexible paid time off Hybrid work schedule 401(K) matching of 100% up to the first 6% with a discretionary supplemental contribution Health & wellbeing benefits Parental Leave benefits Employee stock purchase plan Job Description Key Responsibilities / Duties: Define and execute enterprise security architecture strategies, standards, reference architectures, design patterns, and guidelines aligned with business objectives and technology modernization efforts. undefined Partners with business leaders, enterprise architects, engineering teams, and security stakeholders to embed security requirements into technology roadmaps, cloud adoption, and transformation initiatives. undefined Define security functional and non-functional requirements that support business objectives and strengthen solution design. undefined Assess the effectiveness of security controls across data protection, identity and access management, security monitoring, detective controls, infrastructure/network security, and incident response; recommend controls, processes, and remediation actions to address gaps and reduce risk. undefined Research, evaluate, and advocate for emerging technologies, architectures, and security products that advance the security maturity roadmap. undefined Act as a subject matter expert for advisory, review and approval of security designs, configurations, baselines, and technical standards. undefined Mentor security architects and technical teams, promoting architectural excellence, knowledge sharing, and clear communication of complex security concepts to technical and business audiences. undefined Other duties as assigned. Work Experience / Knowledge: 15+ years of progressive IT experience, including 10+ years focused on cybersecurity, security architecture, and enterprise architecture in large, complex organizations. undefined 5+ years of experience with cloud delivery platforms, including IaaS, PaaS, and SaaS, and providers such as Amazon Web Services (AWS) and Microsoft Azure. undefined Strong background across cloud security, Zero Trust, networking, identity and access management, data protection, AI platforms, and risk management. undefined Experience leading enterprise-wide security initiatives, including architecture, implementation, and adoption of security solutions and processes. undefined Ability to engage senior leaders, define requirements, and clearly communicate security risks, decisions, and recommendations. undefined Expertise in two or more technology domains, such as infrastructure, application security, network security, IAM, data protection, endpoint security or AI security. undefined Knowledge of industry security control frameworks such as NIST, CSA CCM, and CIS Critical Security Controls. undefined Proficiency with architecture modeling using industry-standard notation languages, such as ArchiMate. Willingness to travel both domestically and internationally. Frequency and duration to be determined by manager. Skills / Other Personal Attributes Required: Strong ability to influence across technical, business, and executive stakeholders to drive adoption of enterprise architecture standards and security recommendations. undefined Collaborative team player with strong communication, organization, and facilitation skills. High-energy, confident professional with an ability to remain calm and take control in a crisis. Ability to see the big picture and think and act strategically. undefined Self-motivated and able to work independently with minimal direction. undefined Open-minded, flexible, and receptive to diverse perspectives; able to adapt to changing demands and conditions. undefined Committed to continuous learning, capability development, and mentoring others. Formal Education: Bachelor's degree in computer science, information systems, or a related field, or equivalent demonstrated experience. License / Registration / Certification: Certified Information Systems Security Professional ( CISSP) or equivalent certification. undefined Certification in enterprise architecture methodology or framework, such as The Open Group Architecture Framework (TOGAF) or Sherwood Applied Business Security Architecture (SABSA), preferred. undefined Cloud Security Professional (CCSP), Certificate of Cloud Security Knowledge (CCSK), or relevant vendor certifications from AWS or Microsoft Azure preferred. The salary range for this position in Charlottetown is $120,000-130,000 CAD per year. The total compensation offered for this position includes salary and incentive pay and will vary based on skills, experience and location. Full Time / Part Time Full time Worker Type Employee Job Exempt (Yes / No) Yes Workplace Model Pursuant to Invesco's Workplace Policy, employees are expected to comply with the firm's most current workplace model, which as of October 1, 2025, includes spending at least four full days each week working in an Invesco office. This reflects our belief that spending time together in the office helps us build stronger relationships, collaborate more easily, and support each other's growth and development. The above information on this description has been designed to indicate the general nature and level of work performed by employees within this role. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications required of employees assigned to this job. The job holder may be required to perform other duties as deemed appropriate by their manager from time to time. Invesco's culture of inclusivity and its commitment to diversity in the workplace are demonstrated through our people practices. We are proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, creed, color, religion, sex, gender, gender identity, sexual orientation, marital status, national origin, citizenship status, disability, age, or veteran status. Our equal opportunity employment efforts comply with all applicable U.S. state and federal laws governing non-discrimination in employment.
This job is with Capco, an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. Managing Principal, Cybersecurity & AI Location: New York (Hybrid) Practice Area: Technology & Engineering Type: Permanent Lead the future of Cybersecurity and AI in Financial Services The Role Joining Capco means joining an organization that is committed to an inclusive working environment where you are encouraged to . Capco Cybersecurity is a multi-faceted team focused on evaluating, defining, and delivering risk-aware solutions for leading financial services organizations. We are seeking a Managing Principal in the New York Metro area to help scale our Cybersecurity practice at a pivotal stage of growth. This role blends senior leadership responsibilities-driving business development, leading delivery, and developing teams-with a mandate to shape and lead our Cyber + AI offering. You will work closely with senior stakeholders to build market propositions, develop pipelines, deliver impactful programs, and grow a high-performing team. What You'll Do Define and scale a Cyber AI strategy aligned with market demand and business priorities Develop offerings including accelerators, playbooks, and reference architectures Lead complex cybersecurity and AI-enabled security engagements end-to-end Build and grow client relationships, acting as a trusted advisor to senior stakeholders Lead business development activities including pipeline creation, proposals, and deal closure What We're Looking For 12+ years' experience in cybersecurity, information security, or technology risk Ability to be onsite in New York City 3 days per week Experience within a management or technology consulting environment Strong track record delivering complex cybersecurity programs Experience with AI security, GenAI governance, or AI-enabled security operations Ability to communicate technical concepts clearly to diverse audiences Bonus Points For Knowledge of frameworks such as NIST, ISO, or FFIEC Experience across domains such as cloud security, IAM, or resilience Relevant certifications (e.g. CISSP, CISM, CRISC, CISA, cloud or AI certifications) Proven experience leading end-to-end pursuits and closing deals Advanced degree in cybersecurity or related field Why Join Capco Deliver high-impact technology solutions for Tier 1 financial institutions Work in a collaborative, flat, and entrepreneurial consulting culture Access continuous learning, training, and industry certifications Be part of a team shaping the future of digital financial services Help shape the future of digital transformation across FS & Energy We offer a competitive, people-first benefits package designed to support every aspect of your life: Medical, dental, and vision insurance 401(k) with employer matching Paid parental leave and dependent care support Tuition reimbursement and wellness programs Access to discounts and commuter benefits Use of Artificial Intelligence in Talent Acquisition At Capco, we use artificial intelligence (AI) tools to support and enhance several parts of talent acquisition. This includes using AI-enabled features within LinkedIn to help source potential candidates, speeding up routine recruitment communications such as emails, and creating compelling and brand-aligned job postings that accurately reflect role requirements, as well as AI-scheduling applications to improve interview coordination. AI is used as a support tool only. All hiring decisions are made by talent acquisition and hiring teams. Inclusion at Capco We're committed to making our recruitment process accessible and straightforward for everyone. If you need any adjustments at any stage, just let us know - we'll be happy to help. We value each person's unique perspective and contribution. At Capco, we believe that being yourself is your greatest strength. Our culture encourages individuality and collaboration - a mindset that shapes how we work with clients and each other every day. US Pay Range$198,000-$248,000 USD
11/13/2026
Full time
This job is with Capco, an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. Managing Principal, Cybersecurity & AI Location: New York (Hybrid) Practice Area: Technology & Engineering Type: Permanent Lead the future of Cybersecurity and AI in Financial Services The Role Joining Capco means joining an organization that is committed to an inclusive working environment where you are encouraged to . Capco Cybersecurity is a multi-faceted team focused on evaluating, defining, and delivering risk-aware solutions for leading financial services organizations. We are seeking a Managing Principal in the New York Metro area to help scale our Cybersecurity practice at a pivotal stage of growth. This role blends senior leadership responsibilities-driving business development, leading delivery, and developing teams-with a mandate to shape and lead our Cyber + AI offering. You will work closely with senior stakeholders to build market propositions, develop pipelines, deliver impactful programs, and grow a high-performing team. What You'll Do Define and scale a Cyber AI strategy aligned with market demand and business priorities Develop offerings including accelerators, playbooks, and reference architectures Lead complex cybersecurity and AI-enabled security engagements end-to-end Build and grow client relationships, acting as a trusted advisor to senior stakeholders Lead business development activities including pipeline creation, proposals, and deal closure What We're Looking For 12+ years' experience in cybersecurity, information security, or technology risk Ability to be onsite in New York City 3 days per week Experience within a management or technology consulting environment Strong track record delivering complex cybersecurity programs Experience with AI security, GenAI governance, or AI-enabled security operations Ability to communicate technical concepts clearly to diverse audiences Bonus Points For Knowledge of frameworks such as NIST, ISO, or FFIEC Experience across domains such as cloud security, IAM, or resilience Relevant certifications (e.g. CISSP, CISM, CRISC, CISA, cloud or AI certifications) Proven experience leading end-to-end pursuits and closing deals Advanced degree in cybersecurity or related field Why Join Capco Deliver high-impact technology solutions for Tier 1 financial institutions Work in a collaborative, flat, and entrepreneurial consulting culture Access continuous learning, training, and industry certifications Be part of a team shaping the future of digital financial services Help shape the future of digital transformation across FS & Energy We offer a competitive, people-first benefits package designed to support every aspect of your life: Medical, dental, and vision insurance 401(k) with employer matching Paid parental leave and dependent care support Tuition reimbursement and wellness programs Access to discounts and commuter benefits Use of Artificial Intelligence in Talent Acquisition At Capco, we use artificial intelligence (AI) tools to support and enhance several parts of talent acquisition. This includes using AI-enabled features within LinkedIn to help source potential candidates, speeding up routine recruitment communications such as emails, and creating compelling and brand-aligned job postings that accurately reflect role requirements, as well as AI-scheduling applications to improve interview coordination. AI is used as a support tool only. All hiring decisions are made by talent acquisition and hiring teams. Inclusion at Capco We're committed to making our recruitment process accessible and straightforward for everyone. If you need any adjustments at any stage, just let us know - we'll be happy to help. We value each person's unique perspective and contribution. At Capco, we believe that being yourself is your greatest strength. Our culture encourages individuality and collaboration - a mindset that shapes how we work with clients and each other every day. US Pay Range$198,000-$248,000 USD
Job Description Job Description The future of aerospace and defense starts here. Ursa Major was founded to revolutionize how America and its allies access and apply high-performance propulsion, from hypersonics to solid rocket motors, satellite maneuvering and launch. We design and deliver propulsion and defense systems that solve the most urgent and critical national security demands. Ursa Major is bringing a new model to propulsion and defense technology: one where performance and access are no longer constrained by legacy systems. We design, build, and deploy advanced propulsion systems that power national security missions, hypersonic capabilities, and the future of space access. Our mission requires an extraordinary team-one that will mold tomorrow's critical technologies while deploying today's best. We are an intrinsically motivated team with a passion for solving complex technical problems and empowering each other every day, knowing that there is always room for growth. As a Principal DevOps Engineer within our Digital Operations team, you won't just be managing servers or responding to deployment tickets. You will be a principal technical leader and system architect responsible for owning and shaping Ursa Major's platform engineering, infrastructure automation, and software deployment strategies across cloud, on-premise, and manufacturing environments. Sitting at the vital intersection of Software Engineering, IT, Zero-Trust Networking, Digital Manufacturing, and Cybersecurity, you will build the foundational platforms that empower our engineering and manufacturing teams to design, test, and deliver mission-critical systems faster and more reliably. As Ursa Major expands, you will decompose complex technical challenges, author clear architecture designs, and drive pragmatic, high-impact solutions that connect our cloud environments directly to physical manufacturing and test-bench hardware. Responsibilities: Platform Architecture & Developer Experience Lead the research, design, and continuous improvement of platform infrastructure, software deployment, and Developer Experience (DX) across the enterprise. Decompose complex infrastructure problems into maintainable systems; author clear technical design documents and lead cross-functional teams through execution. Act as a strategic connector between Software Engineering, IT, and Networking to unify tooling, share infrastructure patterns, and eliminate operational silos. Infrastructure-as-Code (IaC), GitOps & High Availability (HA) Advance our declarative Infrastructure-as-Code (IaC) and GitOps practices (using Terraform, Helm, and ArgoCD/Flux) to deliver fully automated, drift-free application lifecycles across Azure GovCloud and AWS GovCloud. Extend containerization and orchestration (Kubernetes, Docker) beyond cloud environments into on-premise test benches, shop-floor PCs, and edge manufacturing hardware in alignment with our CMMC Level 2 hybrid strategy. Own Disaster Recovery (DR) and Business Continuity (BC) architecture-maintaining automated backup and failover capabilities that keep critical system recovery times measured in minutes, not days. DevSecOps & AI Pipeline Integration Partner with Cybersecurity and Zero-Trust teams to integrate automated vulnerability scanning, secrets management, and policy-as-code guardrails directly into CI/CD workflows without introducing developer friction. Architect and support automated pipelines for hosted and private AI models, enabling software and engineering teams to leverage high-throughput AI capabilities safely within our secure compliance boundary. Maintain continuous telemetry, metrics, and alerting frameworks (Prometheus, Grafana) to give engineers real-time visibility into application performance and pipeline health. Leadership, Mentorship & Impact Frame all technical initiatives in terms of maximum impact on overall business health, execution speed, and system reliability. Mentor and elevate engineers across the software and IT organizations, fostering a culture of analytical, value-driven problem-solving. Function as a top-level technical decision-maker, managing high-ambiguity challenges with high autonomy while maintaining psychological safety and clear standards of excellence Minimum Qualifications: 8+ years of professional DevOps, SRE, or Infrastructure/Platform Engineering experience, with a proven track record of principal-level technical leadership and system architecture. Hands-on mastery of Azure GovCloud and/or AWS GovCloud environments, with deep expertise in VPC networking, IAM, and cloud-native security controls. Advanced proficiency in Terraform, Docker, Kubernetes, Helm, and continuous delivery via GitOps patterns (ArgoCD, GitHub Actions, or Flux). Direct experience architecting high-availability systems, automated DR solutions, and telemetry suites (Prometheus, Grafana). Practical experience configuring automated container/code and centralized secrets management (AWS/Azure Key Vaults, HashiCorp Vault). Experience automating, deploying, or supporting hosted AI model integrations within production CI/CD pipelines. A proactive problem solver who builds trust across teams, rejects black-and-white thinking, and focuses on enabling business outcomes. Preferred Qualifications: Familiarity with NIST SP 800-171 / CMMC Level 2 compliance standards and securing CUI data flows. Experience with Artifactory, SonarQube, Open Policy Agent (OPA), Kyverno, or automated Software Bill of Materials (SBOM) tooling. Experience automating physical hardware, edge nodes, or shop-floor environments using Packer, Ansible, K3s, or Rancher. Experience orchestrating self-hosted or private AI model execution frameworks. Ability to obtain and maintain a U.S. Government Security Clearance. Colorado law requires us to tell you the base compensation range of this role, which is $175,000 - $215,000, determined by your education, experience, knowledge, skills, and abilities. The salary range for this role is intentionally wide as we are evaluating individuals based on their unique experience and abilities to fit our needs. Most importantly, we are excited to meet you and see if you are a great fit for our team. What we can't quantify for you are the exciting challenges, supportive team, and amazing culture we enjoy. Classification: Full-Time, Exempt Benefits Include: (Please note, Interns are not eligible for benefits) Unlimited PTO - Vacation, Sick, Personal, and Bereavement Paid Parental and Adoptive Leave Medical, Dental and Vision Insurance Tax Advantage Accounts (HSA/FSA) Employer Paid Short and Long Term Disability, Basic Life, AD&D Additional Benefit Options Including Voluntary Life and Emergency Medical Transport EAP Program Retirement Savings Plan - 401k with Company Match Equity Grants in the Company How To Apply: Interested candidates are encouraged to apply by filling out the application below and clicking "Submit Application". This position will be posted for a minimum of 3 days and will remain open until filled or adjusted based on the volume of applicants. NOTE: Research suggests that women and BIPOC individuals may self-select out of opportunities if they don't meet 100% of the job requirements. We encourage anyone who believes they have the skills and the drive necessary to succeed here to apply for this role. Must be a U.S. Person (this includes U.S. Citizens and Permanent Residents). Eligibility to obtain and maintain a U.S. Security Clearance. We're an equal-opportunity employer. You will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran, or disability status. No outside recruiters, please.
09/30/2026
Full time
Job Description Job Description The future of aerospace and defense starts here. Ursa Major was founded to revolutionize how America and its allies access and apply high-performance propulsion, from hypersonics to solid rocket motors, satellite maneuvering and launch. We design and deliver propulsion and defense systems that solve the most urgent and critical national security demands. Ursa Major is bringing a new model to propulsion and defense technology: one where performance and access are no longer constrained by legacy systems. We design, build, and deploy advanced propulsion systems that power national security missions, hypersonic capabilities, and the future of space access. Our mission requires an extraordinary team-one that will mold tomorrow's critical technologies while deploying today's best. We are an intrinsically motivated team with a passion for solving complex technical problems and empowering each other every day, knowing that there is always room for growth. As a Principal DevOps Engineer within our Digital Operations team, you won't just be managing servers or responding to deployment tickets. You will be a principal technical leader and system architect responsible for owning and shaping Ursa Major's platform engineering, infrastructure automation, and software deployment strategies across cloud, on-premise, and manufacturing environments. Sitting at the vital intersection of Software Engineering, IT, Zero-Trust Networking, Digital Manufacturing, and Cybersecurity, you will build the foundational platforms that empower our engineering and manufacturing teams to design, test, and deliver mission-critical systems faster and more reliably. As Ursa Major expands, you will decompose complex technical challenges, author clear architecture designs, and drive pragmatic, high-impact solutions that connect our cloud environments directly to physical manufacturing and test-bench hardware. Responsibilities: Platform Architecture & Developer Experience Lead the research, design, and continuous improvement of platform infrastructure, software deployment, and Developer Experience (DX) across the enterprise. Decompose complex infrastructure problems into maintainable systems; author clear technical design documents and lead cross-functional teams through execution. Act as a strategic connector between Software Engineering, IT, and Networking to unify tooling, share infrastructure patterns, and eliminate operational silos. Infrastructure-as-Code (IaC), GitOps & High Availability (HA) Advance our declarative Infrastructure-as-Code (IaC) and GitOps practices (using Terraform, Helm, and ArgoCD/Flux) to deliver fully automated, drift-free application lifecycles across Azure GovCloud and AWS GovCloud. Extend containerization and orchestration (Kubernetes, Docker) beyond cloud environments into on-premise test benches, shop-floor PCs, and edge manufacturing hardware in alignment with our CMMC Level 2 hybrid strategy. Own Disaster Recovery (DR) and Business Continuity (BC) architecture-maintaining automated backup and failover capabilities that keep critical system recovery times measured in minutes, not days. DevSecOps & AI Pipeline Integration Partner with Cybersecurity and Zero-Trust teams to integrate automated vulnerability scanning, secrets management, and policy-as-code guardrails directly into CI/CD workflows without introducing developer friction. Architect and support automated pipelines for hosted and private AI models, enabling software and engineering teams to leverage high-throughput AI capabilities safely within our secure compliance boundary. Maintain continuous telemetry, metrics, and alerting frameworks (Prometheus, Grafana) to give engineers real-time visibility into application performance and pipeline health. Leadership, Mentorship & Impact Frame all technical initiatives in terms of maximum impact on overall business health, execution speed, and system reliability. Mentor and elevate engineers across the software and IT organizations, fostering a culture of analytical, value-driven problem-solving. Function as a top-level technical decision-maker, managing high-ambiguity challenges with high autonomy while maintaining psychological safety and clear standards of excellence Minimum Qualifications: 8+ years of professional DevOps, SRE, or Infrastructure/Platform Engineering experience, with a proven track record of principal-level technical leadership and system architecture. Hands-on mastery of Azure GovCloud and/or AWS GovCloud environments, with deep expertise in VPC networking, IAM, and cloud-native security controls. Advanced proficiency in Terraform, Docker, Kubernetes, Helm, and continuous delivery via GitOps patterns (ArgoCD, GitHub Actions, or Flux). Direct experience architecting high-availability systems, automated DR solutions, and telemetry suites (Prometheus, Grafana). Practical experience configuring automated container/code and centralized secrets management (AWS/Azure Key Vaults, HashiCorp Vault). Experience automating, deploying, or supporting hosted AI model integrations within production CI/CD pipelines. A proactive problem solver who builds trust across teams, rejects black-and-white thinking, and focuses on enabling business outcomes. Preferred Qualifications: Familiarity with NIST SP 800-171 / CMMC Level 2 compliance standards and securing CUI data flows. Experience with Artifactory, SonarQube, Open Policy Agent (OPA), Kyverno, or automated Software Bill of Materials (SBOM) tooling. Experience automating physical hardware, edge nodes, or shop-floor environments using Packer, Ansible, K3s, or Rancher. Experience orchestrating self-hosted or private AI model execution frameworks. Ability to obtain and maintain a U.S. Government Security Clearance. Colorado law requires us to tell you the base compensation range of this role, which is $175,000 - $215,000, determined by your education, experience, knowledge, skills, and abilities. The salary range for this role is intentionally wide as we are evaluating individuals based on their unique experience and abilities to fit our needs. Most importantly, we are excited to meet you and see if you are a great fit for our team. What we can't quantify for you are the exciting challenges, supportive team, and amazing culture we enjoy. Classification: Full-Time, Exempt Benefits Include: (Please note, Interns are not eligible for benefits) Unlimited PTO - Vacation, Sick, Personal, and Bereavement Paid Parental and Adoptive Leave Medical, Dental and Vision Insurance Tax Advantage Accounts (HSA/FSA) Employer Paid Short and Long Term Disability, Basic Life, AD&D Additional Benefit Options Including Voluntary Life and Emergency Medical Transport EAP Program Retirement Savings Plan - 401k with Company Match Equity Grants in the Company How To Apply: Interested candidates are encouraged to apply by filling out the application below and clicking "Submit Application". This position will be posted for a minimum of 3 days and will remain open until filled or adjusted based on the volume of applicants. NOTE: Research suggests that women and BIPOC individuals may self-select out of opportunities if they don't meet 100% of the job requirements. We encourage anyone who believes they have the skills and the drive necessary to succeed here to apply for this role. Must be a U.S. Person (this includes U.S. Citizens and Permanent Residents). Eligibility to obtain and maintain a U.S. Security Clearance. We're an equal-opportunity employer. You will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran, or disability status. No outside recruiters, please.
Job Description Job Description We are a healthcare technology company that provides platforms and solutions to improve the management and access of cost-effective pharmacy benefits. Our technology helps enterprise and partnership clients simplify their businesses and helps consumers save on prescriptions. As a leader in SaaS technology for healthcare, we offer innovative solutions with integrated intelligence on a single enterprise platform that connects the pharmacy ecosystem. With our expertise and modern, modular platform, our partners use real-time data to transform their business performance and optimize their innovative models in the marketplace. Position Summary The Principal Platform Engineer owns the core engineering platform that every product team at RxSense builds on. As a direct report to the VP, Infrastructure Engineering, this role is accountable for the cloud infrastructure, CI/CD systems, developer tooling, and reliability practices that determine how confidently and how fast RxSense engineering can ship. This is a hands-on-keyboard, architect-level role, partnering with software engineers, AI engineers, security, and finance to build a platform that teams choose to build on rather than one they are required to use. Essential Duties and Responsibilities Design, build, and operate the core cloud infrastructure that supports RxSense engineering, including compute, networking, identity and access management, and container orchestration on AWS. Own the CI/CD platform used across engineering teams, including build pipelines, artifact management, environment promotion, progressive rollout, and rollback. Build and maintain the observability stack across the organization, including logging, metrics, distributed tracing, alerting, and the SLIs and SLOs that define reliable service. Drive infrastructure as code practices across the organization and manage the Kubernetes clusters, custom controllers, and operators that back production workloads. Partner with security and compliance to manage secrets, network policy, and access controls appropriate to a regulated healthcare and pharmacy benefits environment. Design self-service developer tooling and platform APIs and set the abstractions that let product and AI engineering teams' provision, deploy, and operate services without handholding. Own incident response tooling, on-call practices, and reliability engineering standards, and lead or support major incident response across the platform. Partner with engineering leadership and finance on infrastructure cost visibility, capacity planning, and cost optimization. Write documentation, runbooks, and clear interfaces so the platform is adoptable by other engineering teams without handholding. Participate in code review and promote collaboration and best practices, including simplicity, automation, sound design patterns, test coverage, and reusability. Work normal day business hours in the Eastern US time zone Education, Experience, and Competencies BS (or higher, e.g., MS or Ph.D.) in Computer Science or a related technical field involving coding, or equivalent technical experience. 8+ years of platform, infrastructure, or site reliability engineering experience, with demonstrated Staff, Principal, or Architect-level scope, such as owning platform architecture end to end or being accountable for critical production systems. We evaluate candidates on the scope and impact of their work rather than years of experience alone. Deep, hands-on experience designing and operating CI/CD pipelines for high-velocity engineering organizations, including artifact management, environment promotion, and progressive rollout. Strong AWS background, comfortable down to the IAM, networking, and container orchestration layers, including production Kubernetes experience. Experience with GitHub and GitHub actions. Proven track record building internal developer platforms or tools that other engineering teams adopted by choice, not by mandate. Hands-on coding fluency in Python, Go, or TypeScript. This is a keyboard role, not an architecture-only role. Comfortable operating in a polyglot environment. The RxSense engineering stack spans Python, .NET, and TypeScript, and you will support services across all three. Practical experience with infrastructure as code (such as Terraform, CloudFormation, or Pulumi) and modern observability tooling (such as Prometheus, New Relic, Grafana, Datadog, or Open Telemetry). Comfortable owning the cost and reliability conversation with both engineering leadership and finance partners. Strong written communication and a bias toward documentation, runbooks, and clear interfaces. Proven analytical thinking and problem-solving skills. Excellent communication skills, both verbal and written. Bonus Qualifications Experience supporting infrastructure for AI or LLM-powered workloads, including GPU provisioning, model serving, or agent runtime infrastructure. Background in healthcare, PBM, pharmacy, or another regulated data environment. Kubernetes operator experience or comfort building custom controllers. FinOps experience, particularly attributing infrastructure spend to features, teams, or business units. Familiarity with distributed systems tooling such as Kafka, gRPC, or Dragonfly and Redis. Experience with Agile development methodologies, preferably both Scrum and Kanban. Experience with code scanning, security, and quality checks as part of the CICD. Salary Range: $190,000 - $235,000 RxSense believes that a diverse workforce is a more talented and productive workforce. As such, we are an Equal Opportunity and Affirmative Action employer. Our recruitment process is free from discriminatory hiring practices and all qualified applicants are considered for employment without regard to race, color, religion, sex, gender, sexual orientation, gender identity, ancestry, age, or national origin. Neither will qualified applicants be discriminated against on the basis of disability or protected veteran status. We believe in the strength of the collaboration, creativity and sense of community a diverse workforce brings.
09/28/2026
Full time
Job Description Job Description We are a healthcare technology company that provides platforms and solutions to improve the management and access of cost-effective pharmacy benefits. Our technology helps enterprise and partnership clients simplify their businesses and helps consumers save on prescriptions. As a leader in SaaS technology for healthcare, we offer innovative solutions with integrated intelligence on a single enterprise platform that connects the pharmacy ecosystem. With our expertise and modern, modular platform, our partners use real-time data to transform their business performance and optimize their innovative models in the marketplace. Position Summary The Principal Platform Engineer owns the core engineering platform that every product team at RxSense builds on. As a direct report to the VP, Infrastructure Engineering, this role is accountable for the cloud infrastructure, CI/CD systems, developer tooling, and reliability practices that determine how confidently and how fast RxSense engineering can ship. This is a hands-on-keyboard, architect-level role, partnering with software engineers, AI engineers, security, and finance to build a platform that teams choose to build on rather than one they are required to use. Essential Duties and Responsibilities Design, build, and operate the core cloud infrastructure that supports RxSense engineering, including compute, networking, identity and access management, and container orchestration on AWS. Own the CI/CD platform used across engineering teams, including build pipelines, artifact management, environment promotion, progressive rollout, and rollback. Build and maintain the observability stack across the organization, including logging, metrics, distributed tracing, alerting, and the SLIs and SLOs that define reliable service. Drive infrastructure as code practices across the organization and manage the Kubernetes clusters, custom controllers, and operators that back production workloads. Partner with security and compliance to manage secrets, network policy, and access controls appropriate to a regulated healthcare and pharmacy benefits environment. Design self-service developer tooling and platform APIs and set the abstractions that let product and AI engineering teams' provision, deploy, and operate services without handholding. Own incident response tooling, on-call practices, and reliability engineering standards, and lead or support major incident response across the platform. Partner with engineering leadership and finance on infrastructure cost visibility, capacity planning, and cost optimization. Write documentation, runbooks, and clear interfaces so the platform is adoptable by other engineering teams without handholding. Participate in code review and promote collaboration and best practices, including simplicity, automation, sound design patterns, test coverage, and reusability. Work normal day business hours in the Eastern US time zone Education, Experience, and Competencies BS (or higher, e.g., MS or Ph.D.) in Computer Science or a related technical field involving coding, or equivalent technical experience. 8+ years of platform, infrastructure, or site reliability engineering experience, with demonstrated Staff, Principal, or Architect-level scope, such as owning platform architecture end to end or being accountable for critical production systems. We evaluate candidates on the scope and impact of their work rather than years of experience alone. Deep, hands-on experience designing and operating CI/CD pipelines for high-velocity engineering organizations, including artifact management, environment promotion, and progressive rollout. Strong AWS background, comfortable down to the IAM, networking, and container orchestration layers, including production Kubernetes experience. Experience with GitHub and GitHub actions. Proven track record building internal developer platforms or tools that other engineering teams adopted by choice, not by mandate. Hands-on coding fluency in Python, Go, or TypeScript. This is a keyboard role, not an architecture-only role. Comfortable operating in a polyglot environment. The RxSense engineering stack spans Python, .NET, and TypeScript, and you will support services across all three. Practical experience with infrastructure as code (such as Terraform, CloudFormation, or Pulumi) and modern observability tooling (such as Prometheus, New Relic, Grafana, Datadog, or Open Telemetry). Comfortable owning the cost and reliability conversation with both engineering leadership and finance partners. Strong written communication and a bias toward documentation, runbooks, and clear interfaces. Proven analytical thinking and problem-solving skills. Excellent communication skills, both verbal and written. Bonus Qualifications Experience supporting infrastructure for AI or LLM-powered workloads, including GPU provisioning, model serving, or agent runtime infrastructure. Background in healthcare, PBM, pharmacy, or another regulated data environment. Kubernetes operator experience or comfort building custom controllers. FinOps experience, particularly attributing infrastructure spend to features, teams, or business units. Familiarity with distributed systems tooling such as Kafka, gRPC, or Dragonfly and Redis. Experience with Agile development methodologies, preferably both Scrum and Kanban. Experience with code scanning, security, and quality checks as part of the CICD. Salary Range: $190,000 - $235,000 RxSense believes that a diverse workforce is a more talented and productive workforce. As such, we are an Equal Opportunity and Affirmative Action employer. Our recruitment process is free from discriminatory hiring practices and all qualified applicants are considered for employment without regard to race, color, religion, sex, gender, sexual orientation, gender identity, ancestry, age, or national origin. Neither will qualified applicants be discriminated against on the basis of disability or protected veteran status. We believe in the strength of the collaboration, creativity and sense of community a diverse workforce brings.
Job Description Job Description ABOUT FTAI AVIATION LTD. (NASDAQ: FTAI) FTAI owns and maintains commercial jet engines with a focus on the Maintenance, Repair and Exchange (MRE) of CFM56 and V2500 engines. FTAI's propriety portfolio of products, including The Module Factory and a joint venture to distribute engine PMA helps make CFM56 and V2500 engine maintenance simpler, more cost-effective, significantly faster, and more environmentally friendly. Additionally, FTAI owns and leases jet aircraft which often facilitates the acquisition of engines at attractive prices. FTAI invests in aviation assets and aerospace products that generate strong and stable cash flows with the potential for earnings growth and asset appreciation. FTAI operates globally and has offices in New York, Miami, Montreal, California, Singapore, Dubai, United Kingdom and Ireland. JOB OVERVIEW We are seeking a Principal Security Engineer to lead the security program for a public, multi-site organization in a regulated environment. This is a hands-on individual-contributor role that both implements technical controls and drives the policies behind them. Partnering with the MSP, vCISO, IT, and Legal, you will set technical direction and execute it-tuning controls, maturing policy, and aligning the program to recognized frameworks and regulatory requirements Responsibilities: Drive the technical cybersecurity strategy and roadmap; report security posture and material risk to senior leadership Design, configure, and maintain hands-on controls across network, endpoint, identity, and cloud (firewall rules, segmentation, VPNs, IDS/IPS, EDR, MFA) Develop and maintain security policies aligned to NIST CSF, ISO 27001, and CIS and to regulatory requirements, ensuring controls actually enforce them Manage and tune the security stack (SIEM, EDR, email security); build detection rules, alerts, and dashboards Lead incident response end to end and drive risk-based vulnerability and patch management to closure across infrastructure, endpoints, and cloud Own the controls framework and third-party/vendor risk program, coordinating with internal audit/GRC and the legal team Collaborate with MSP and vCISO (managing scope, SLAs, escalation) while keeping core decisions in-house Harden identity infrastructure (AD/Entra ID) and run the security awareness program across sites Qualifications: 7+ years across IT and cybersecurity, including a hands-on technical foundation and 3+ years driving a security program as a senior individual contributor Proven ability to both implement technical controls and author the policies and governance behind them Experience securing a public and/or regulated, multi-site environment (e.g., SOX, FINRA, FAA), including audit and control ownership Command of NIST CSF, ISO 27001, CIS, and SOX/ITGC, with experience owning control evidence through external audits Strong cloud (Azure and/or AWS) and enterprise network security-firewalls, VPNs, segmentation, and IDS/IPS Hands-on with SIEM (e.g., Microsoft Sentinel) and endpoint protection (e.g., SentinelOne), plus scripting (PowerShell and/or Python) and identity hardening (AD/Entra ID)
09/28/2026
Full time
Job Description Job Description ABOUT FTAI AVIATION LTD. (NASDAQ: FTAI) FTAI owns and maintains commercial jet engines with a focus on the Maintenance, Repair and Exchange (MRE) of CFM56 and V2500 engines. FTAI's propriety portfolio of products, including The Module Factory and a joint venture to distribute engine PMA helps make CFM56 and V2500 engine maintenance simpler, more cost-effective, significantly faster, and more environmentally friendly. Additionally, FTAI owns and leases jet aircraft which often facilitates the acquisition of engines at attractive prices. FTAI invests in aviation assets and aerospace products that generate strong and stable cash flows with the potential for earnings growth and asset appreciation. FTAI operates globally and has offices in New York, Miami, Montreal, California, Singapore, Dubai, United Kingdom and Ireland. JOB OVERVIEW We are seeking a Principal Security Engineer to lead the security program for a public, multi-site organization in a regulated environment. This is a hands-on individual-contributor role that both implements technical controls and drives the policies behind them. Partnering with the MSP, vCISO, IT, and Legal, you will set technical direction and execute it-tuning controls, maturing policy, and aligning the program to recognized frameworks and regulatory requirements Responsibilities: Drive the technical cybersecurity strategy and roadmap; report security posture and material risk to senior leadership Design, configure, and maintain hands-on controls across network, endpoint, identity, and cloud (firewall rules, segmentation, VPNs, IDS/IPS, EDR, MFA) Develop and maintain security policies aligned to NIST CSF, ISO 27001, and CIS and to regulatory requirements, ensuring controls actually enforce them Manage and tune the security stack (SIEM, EDR, email security); build detection rules, alerts, and dashboards Lead incident response end to end and drive risk-based vulnerability and patch management to closure across infrastructure, endpoints, and cloud Own the controls framework and third-party/vendor risk program, coordinating with internal audit/GRC and the legal team Collaborate with MSP and vCISO (managing scope, SLAs, escalation) while keeping core decisions in-house Harden identity infrastructure (AD/Entra ID) and run the security awareness program across sites Qualifications: 7+ years across IT and cybersecurity, including a hands-on technical foundation and 3+ years driving a security program as a senior individual contributor Proven ability to both implement technical controls and author the policies and governance behind them Experience securing a public and/or regulated, multi-site environment (e.g., SOX, FINRA, FAA), including audit and control ownership Command of NIST CSF, ISO 27001, CIS, and SOX/ITGC, with experience owning control evidence through external audits Strong cloud (Azure and/or AWS) and enterprise network security-firewalls, VPNs, segmentation, and IDS/IPS Hands-on with SIEM (e.g., Microsoft Sentinel) and endpoint protection (e.g., SentinelOne), plus scripting (PowerShell and/or Python) and identity hardening (AD/Entra ID)
Job Description Job Description ABOUT HUT 8 Imagine the ultimate destination for those who want to work at the cutting edge of technology, energy, and infrastructure. Hut 8 is on a mission to build and operate some of the world's largest data centers for next-generation computing workloads, including AI, Colocation, Cloud, and Bitcoin Mining. We are proud to offer interesting and challenging opportunities for individuals who want to build teams, solve problems, and make an impact from day one. If you're an ambitious individual looking for a career that is as rewarding as it is challenging, you've come to the right place. ABOUT THE ROLE We are seeking a motivated Transmission & Interconnection, Principal to support Hut 8's interconnection and transmission planning efforts across the United States. As Hut 8 scales its energy infrastructure platform-powering next-generation data centers, AI workloads, and Bitcoin mining operations-securing reliable, cost-effective grid access is mission-critical. In this role, you will support the interconnection queue process for large load and co-located generation assets, working closely with utilities and grid operators to prepare study materials, maintain power system models, and translate technical findings for internal and external stakeholders. You will partner cross-functionally with the broader Transmission & Interconnection team to help identify, track, and mitigate interconnection timelines, cost exposures, and technical requirements. Key Responsibilities Utility Interface Prepare materials for utility and grid operator submittals Track study milestones and support related negotiation processes Maintain internal records to support study oversight Power System Modeling & Simulation Maintain model currency across regional grid operator systems Perform power flow studies to support load capacity screening, network upgrade cost estimation, and system reliability analysis Support system stability and protection-related studies as needed Prepare clear technical reports and analysis Translate technical findings for both engineering and business audiences Support coordination across internal teams Dynamic Model Quality Testing Coordinate with external consultants to build and validate power flow and dynamic models using standard industry software Process Improvement Support workflow automation and modern software tools to scale study throughput as project volume grows ABOUT YOU Required Qualifications BSEE from an ABET-accredited program with a power emphasis 3-5 years of experience in power systems, transmission planning, and interconnection gained as a consultant, ISO/utility engineer, or in an equivalent role Hands on experience with TARA for transmission reliability, power flow, and contingency analysis. Proficient with power system modeling and simulation software such as PSS/E, PSLF, PowerWorld, PSCAD, or equivalent. Strong analytical skills with ability to interpret complex interconnection study results and develop actionable recommendations Track record of successfully negotiating interconnection agreements and managing cost and schedule risk. Skilled in report preparation, data analytics, and cost modeling, with clear written and verbal communication Prior internship or co-op experience in power systems, transmission planning, or interconnection is a plus Preferred Qualifications Experience within an ISO/RTO, consulting firm, or utility, with exposure to organized markets such as PJM, ERCOT, MISO, SPP, or the Southeast (Georgia Power, Duke, TVA) Direct exposure to large-load or HPC/data center power requirements-including in an academic context-is a strong plus given the unit's focus on speed to power Familiarity with dynamic model validation and benchmarking via model quality testing Proficiency with workflow automation and application program interfaces to scale process development as study volume grows Professional Engineer (PE) license, or progress toward licensure ABOUT THE WORK ENVIRONMENT This role is in office at our corporate headquarters in the Brickell area of Miami, Florida. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. WHAT MAKES HUT 8 A GREAT PLACE TO WORK Hut 8 offers a benefits and wellness program that includes medical, dental, vision, life, and short-term and long-term disability insurance, as well as paid time off. We are proud to invest in building the best team in the industry. At all levels of the organization, we are driven by an entrepreneurial spirit, radical transparency, and relentless growth mentality. At Hut 8, you will have the opportunity to: Work with bright, driven peers from a range of educational and professional backgrounds including software development, energy, engineering, entrepreneurship, investment banking, private equity, and management consulting Design and pitch new products, services, and other initiatives to a leadership team consisting of serial entrepreneurs and seasoned executives and backed by a board of directors consisting of industry veterans of energy, finance, and government Debate ideas and alternatives in a truly meritocratic setting where the learning curve is steep and the lessons come from both senior and junior members of the team Build a lifelong network of friends and professional connections at the cutting-edge intersection of technology, energy, and infrastructure
09/28/2026
Full time
Job Description Job Description ABOUT HUT 8 Imagine the ultimate destination for those who want to work at the cutting edge of technology, energy, and infrastructure. Hut 8 is on a mission to build and operate some of the world's largest data centers for next-generation computing workloads, including AI, Colocation, Cloud, and Bitcoin Mining. We are proud to offer interesting and challenging opportunities for individuals who want to build teams, solve problems, and make an impact from day one. If you're an ambitious individual looking for a career that is as rewarding as it is challenging, you've come to the right place. ABOUT THE ROLE We are seeking a motivated Transmission & Interconnection, Principal to support Hut 8's interconnection and transmission planning efforts across the United States. As Hut 8 scales its energy infrastructure platform-powering next-generation data centers, AI workloads, and Bitcoin mining operations-securing reliable, cost-effective grid access is mission-critical. In this role, you will support the interconnection queue process for large load and co-located generation assets, working closely with utilities and grid operators to prepare study materials, maintain power system models, and translate technical findings for internal and external stakeholders. You will partner cross-functionally with the broader Transmission & Interconnection team to help identify, track, and mitigate interconnection timelines, cost exposures, and technical requirements. Key Responsibilities Utility Interface Prepare materials for utility and grid operator submittals Track study milestones and support related negotiation processes Maintain internal records to support study oversight Power System Modeling & Simulation Maintain model currency across regional grid operator systems Perform power flow studies to support load capacity screening, network upgrade cost estimation, and system reliability analysis Support system stability and protection-related studies as needed Prepare clear technical reports and analysis Translate technical findings for both engineering and business audiences Support coordination across internal teams Dynamic Model Quality Testing Coordinate with external consultants to build and validate power flow and dynamic models using standard industry software Process Improvement Support workflow automation and modern software tools to scale study throughput as project volume grows ABOUT YOU Required Qualifications BSEE from an ABET-accredited program with a power emphasis 3-5 years of experience in power systems, transmission planning, and interconnection gained as a consultant, ISO/utility engineer, or in an equivalent role Hands on experience with TARA for transmission reliability, power flow, and contingency analysis. Proficient with power system modeling and simulation software such as PSS/E, PSLF, PowerWorld, PSCAD, or equivalent. Strong analytical skills with ability to interpret complex interconnection study results and develop actionable recommendations Track record of successfully negotiating interconnection agreements and managing cost and schedule risk. Skilled in report preparation, data analytics, and cost modeling, with clear written and verbal communication Prior internship or co-op experience in power systems, transmission planning, or interconnection is a plus Preferred Qualifications Experience within an ISO/RTO, consulting firm, or utility, with exposure to organized markets such as PJM, ERCOT, MISO, SPP, or the Southeast (Georgia Power, Duke, TVA) Direct exposure to large-load or HPC/data center power requirements-including in an academic context-is a strong plus given the unit's focus on speed to power Familiarity with dynamic model validation and benchmarking via model quality testing Proficiency with workflow automation and application program interfaces to scale process development as study volume grows Professional Engineer (PE) license, or progress toward licensure ABOUT THE WORK ENVIRONMENT This role is in office at our corporate headquarters in the Brickell area of Miami, Florida. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. WHAT MAKES HUT 8 A GREAT PLACE TO WORK Hut 8 offers a benefits and wellness program that includes medical, dental, vision, life, and short-term and long-term disability insurance, as well as paid time off. We are proud to invest in building the best team in the industry. At all levels of the organization, we are driven by an entrepreneurial spirit, radical transparency, and relentless growth mentality. At Hut 8, you will have the opportunity to: Work with bright, driven peers from a range of educational and professional backgrounds including software development, energy, engineering, entrepreneurship, investment banking, private equity, and management consulting Design and pitch new products, services, and other initiatives to a leadership team consisting of serial entrepreneurs and seasoned executives and backed by a board of directors consisting of industry veterans of energy, finance, and government Debate ideas and alternatives in a truly meritocratic setting where the learning curve is steep and the lessons come from both senior and junior members of the team Build a lifelong network of friends and professional connections at the cutting-edge intersection of technology, energy, and infrastructure
Job Description Job Description About the Company : Sungrow North America is a leading provider of renewable energy solutions, specializing in the development and manufacturing of photovoltaic inverters and energy storage systems. The company offers a comprehensive range of products and services designed to optimize the performance and efficiency of solar power installations. Sungrow North America aims to provide sustainable and reliable energy solutions to meet the growing demand for clean power and is known for its commitment to innovation, high-quality standards, and exceptional customer service. Security Engineer - Network & Identity: The Security Engineer (Network & Identity) is a hands-on engineering role within the IT team responsible for designing, implementing, securing, and automating Sungrow USA's network security, PKI and certificate management, and identity & access infrastructure across on-premises, cloud, and SaaS environments. This role serves as the technical owner for network security architecture, cryptographic services, certificate lifecycle management, authentication, and access controls. The position focuses on Zero Trust security, network segmentation, certificate-based authentication, and identity protection to reduce organizational risk and enable secure business operations and platform ownership rather than SOC operations, threat monitoring, or incident response. Essential Duties and Responsibilities: Network Security Design, implement, and maintain secure enterprise network architectures across corporate offices, data centers, cloud platforms, and remote workforce environments. Architect network segmentation, Zero Trust access controls, and secure connectivity standards using Fortinet and Zscaler security solutions. Develop and maintain Zero Trust architectures across network, identity, endpoint, application, and cloud environments. Design and administer secure remote access using Zscaler Private Access, VPN technologies, and identity-aware access controls. Manage firewall policies, network security controls, routing security, DNS security, and hybrid-cloud connectivity. Design and support Network Access Control architectures using IEEE 802.1X, RADIUS, and certificate-based authentication. Assess network security posture, develop remediation plans, and drive continuous security improvements. Cryptography, PKI & Certificate Management Own the enterprise PKI, cryptography, and certificate lifecycle management architecture, standards, and governance program. Design and manage certificate-based authentication and machine identity solutions for users, devices, servers, applications, cloud workloads, and network infrastructure across Azure, AWS, and hybrid environments. Implement and maintain certificate lifecycle automation using Microsoft Cloud PKI, Keyfactor, CyberArk Certificate Manager, EJBCA, DigiCert, AppViewX, or comparable platforms. Manage certificate issuance, enrollment, discovery, deployment, monitoring, renewal, revocation, auditing, and compliance across the enterprise. Design and support cryptographic services and certificate-based security controls, including TLS/mTLS, code signing, PKI trust hierarchies, certificate-based authentication, SCEP, PKCS, and machine identities. Establish PKI and cryptographic standards, key management practices, and security controls to support Zero Trust, regulatory compliance, and enterprise security requirements. Troubleshoot and resolve complex certificate, cryptographic, trust chain, authentication, and secure communications issues across enterprise systems and applications. Identity & Access Define authentication and authorization standards for workforce, partner, application, service, and machine identities. Design, implement, and maintain Microsoft Entra ID architecture, tenant governance, and identity security controls. Develop, test, and enforce Conditional Access policies and Zero Trust access controls. Implement and maintain MFA, passwordless authentication, phishing-resistant authentication, and Microsoft Entra ID Protection capabilities. Design and support enterprise SSO and federation integrations using SAML, OAuth 2.0, OpenID Connect, and SCIM. Implement least-privilege and risk-based access models across enterprise platforms. Administer RBAC, administrative separation, Microsoft Entra Privileged Identity Management, and least-privilege access controls. Govern application registrations, service principals, enterprise applications, API permissions, and managed identities. Support B2B collaboration, guest-user governance, external workforce access, and third-party identity integrations. Design and implement security controls across Microsoft Azure and AWS environments. Apply least privilege, RBAC, encryption, secrets management, and secure configuration standards to on-prem and cloud resources. Automate identity provisioning and deprovisioning, access governance, certificate management, configuration validation, and security operations. Create reusable secure-by-default templates and reduce manual administration through automation and orchestration Conduct access reviews, entitlement certifications, and identity governance activities. Education or Desired License and Certificates: Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field, or equivalent professional experience. Microsoft Certified: Identity and Access Administrator Associate (SC-300) preferred. Microsoft Certified: Azure Security Engineer Associate (AZ-500) preferred. CCNA, Fortinet, Zscaler, AWS Security, CISSP, CISM, Terraform, or relevant PKI certification preferred Preferred Experience & Qualifications: 5+ years of experience in security engineering, identity & access management (IAM), network security, cloud security, or a related enterprise IT discipline. Hands-on experience with Microsoft Entra ID, including Conditional Access, MFA, SSO, Identity Protection, PIM, RBAC, identity governance, and modern authentication protocols (SAML, OAuth, OpenID Connect, SCIM). Experience designing, implementing, and securing enterprise identity, privileged access, and machine identity solutions across hybrid and multi-cloud environments. Hands-on experience with Fortinet, Zscaler (ZIA/ZPA), Zero Trust architectures, least-privilege access models, and network security controls. Experience designing and operating enterprise PKI, certificate lifecycle management, certificate-based authentication, and machine identity platforms such as Keyfactor, DigiCert, EJBCA, AppViewX, CyberArk Certificate Manager, or similar solutions. Experience securing Azure and AWS environments, including identity, networking, encryption, secrets management, logging, and security monitoring. Experience with PAM and IGA platforms such as CyberArk, Delinea, BeyondTrust, SailPoint, Saviynt, or similar technologies. Experience integrating identity, network, cloud, and security telemetry with SIEM and security operations platforms. Strong automation and Infrastructure as Code skills using PowerShell, Python, Microsoft Graph API, REST APIs, Terraform, or similar technologies. Strong troubleshooting skills across authentication, federation, certificates, PKI, network security, cloud access, application integrations, and enterprise identity services. Knowledge of cybersecurity and compliance frameworks including SOC 2, ISO/IEC 27001, NIST CSF, NIST 800-63, CIS Controls, Zero Trust, and NERC CIP. Competencies: Mandarin fluency preferred but not required. Strong analytical, troubleshooting, and problem-solving skills. Ability to work independently and collaboratively in a fast-paced environment. Excellent communication, stakeholder management, and technical documentation skills. Strong organization, attention to detail, initiative, and ownership. Ability to balance security, reliability, usability, scalability, and business requirements. Proactive approach to automation, standardization, and continuous improvement. Travel 5%-20% Work Location and Status: Full time, Hybrid at any Sungrow USA office in Phoenix, Costa Mesa, or Houston No visa sponsorship Compensation: Compensation commensurate with experience Competitive salary and annual bonus eligibility Comprehensive benefits package including health, dental, vision, and retirement plans Strong personal and company growth opportunities Sungrow is an equal opportunity employer. Due to strong interest in this position, Sungrow will only reach out to those candidates who best meet the requirements. Thank you for your interest in Sungrow.
09/28/2026
Full time
Job Description Job Description About the Company : Sungrow North America is a leading provider of renewable energy solutions, specializing in the development and manufacturing of photovoltaic inverters and energy storage systems. The company offers a comprehensive range of products and services designed to optimize the performance and efficiency of solar power installations. Sungrow North America aims to provide sustainable and reliable energy solutions to meet the growing demand for clean power and is known for its commitment to innovation, high-quality standards, and exceptional customer service. Security Engineer - Network & Identity: The Security Engineer (Network & Identity) is a hands-on engineering role within the IT team responsible for designing, implementing, securing, and automating Sungrow USA's network security, PKI and certificate management, and identity & access infrastructure across on-premises, cloud, and SaaS environments. This role serves as the technical owner for network security architecture, cryptographic services, certificate lifecycle management, authentication, and access controls. The position focuses on Zero Trust security, network segmentation, certificate-based authentication, and identity protection to reduce organizational risk and enable secure business operations and platform ownership rather than SOC operations, threat monitoring, or incident response. Essential Duties and Responsibilities: Network Security Design, implement, and maintain secure enterprise network architectures across corporate offices, data centers, cloud platforms, and remote workforce environments. Architect network segmentation, Zero Trust access controls, and secure connectivity standards using Fortinet and Zscaler security solutions. Develop and maintain Zero Trust architectures across network, identity, endpoint, application, and cloud environments. Design and administer secure remote access using Zscaler Private Access, VPN technologies, and identity-aware access controls. Manage firewall policies, network security controls, routing security, DNS security, and hybrid-cloud connectivity. Design and support Network Access Control architectures using IEEE 802.1X, RADIUS, and certificate-based authentication. Assess network security posture, develop remediation plans, and drive continuous security improvements. Cryptography, PKI & Certificate Management Own the enterprise PKI, cryptography, and certificate lifecycle management architecture, standards, and governance program. Design and manage certificate-based authentication and machine identity solutions for users, devices, servers, applications, cloud workloads, and network infrastructure across Azure, AWS, and hybrid environments. Implement and maintain certificate lifecycle automation using Microsoft Cloud PKI, Keyfactor, CyberArk Certificate Manager, EJBCA, DigiCert, AppViewX, or comparable platforms. Manage certificate issuance, enrollment, discovery, deployment, monitoring, renewal, revocation, auditing, and compliance across the enterprise. Design and support cryptographic services and certificate-based security controls, including TLS/mTLS, code signing, PKI trust hierarchies, certificate-based authentication, SCEP, PKCS, and machine identities. Establish PKI and cryptographic standards, key management practices, and security controls to support Zero Trust, regulatory compliance, and enterprise security requirements. Troubleshoot and resolve complex certificate, cryptographic, trust chain, authentication, and secure communications issues across enterprise systems and applications. Identity & Access Define authentication and authorization standards for workforce, partner, application, service, and machine identities. Design, implement, and maintain Microsoft Entra ID architecture, tenant governance, and identity security controls. Develop, test, and enforce Conditional Access policies and Zero Trust access controls. Implement and maintain MFA, passwordless authentication, phishing-resistant authentication, and Microsoft Entra ID Protection capabilities. Design and support enterprise SSO and federation integrations using SAML, OAuth 2.0, OpenID Connect, and SCIM. Implement least-privilege and risk-based access models across enterprise platforms. Administer RBAC, administrative separation, Microsoft Entra Privileged Identity Management, and least-privilege access controls. Govern application registrations, service principals, enterprise applications, API permissions, and managed identities. Support B2B collaboration, guest-user governance, external workforce access, and third-party identity integrations. Design and implement security controls across Microsoft Azure and AWS environments. Apply least privilege, RBAC, encryption, secrets management, and secure configuration standards to on-prem and cloud resources. Automate identity provisioning and deprovisioning, access governance, certificate management, configuration validation, and security operations. Create reusable secure-by-default templates and reduce manual administration through automation and orchestration Conduct access reviews, entitlement certifications, and identity governance activities. Education or Desired License and Certificates: Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field, or equivalent professional experience. Microsoft Certified: Identity and Access Administrator Associate (SC-300) preferred. Microsoft Certified: Azure Security Engineer Associate (AZ-500) preferred. CCNA, Fortinet, Zscaler, AWS Security, CISSP, CISM, Terraform, or relevant PKI certification preferred Preferred Experience & Qualifications: 5+ years of experience in security engineering, identity & access management (IAM), network security, cloud security, or a related enterprise IT discipline. Hands-on experience with Microsoft Entra ID, including Conditional Access, MFA, SSO, Identity Protection, PIM, RBAC, identity governance, and modern authentication protocols (SAML, OAuth, OpenID Connect, SCIM). Experience designing, implementing, and securing enterprise identity, privileged access, and machine identity solutions across hybrid and multi-cloud environments. Hands-on experience with Fortinet, Zscaler (ZIA/ZPA), Zero Trust architectures, least-privilege access models, and network security controls. Experience designing and operating enterprise PKI, certificate lifecycle management, certificate-based authentication, and machine identity platforms such as Keyfactor, DigiCert, EJBCA, AppViewX, CyberArk Certificate Manager, or similar solutions. Experience securing Azure and AWS environments, including identity, networking, encryption, secrets management, logging, and security monitoring. Experience with PAM and IGA platforms such as CyberArk, Delinea, BeyondTrust, SailPoint, Saviynt, or similar technologies. Experience integrating identity, network, cloud, and security telemetry with SIEM and security operations platforms. Strong automation and Infrastructure as Code skills using PowerShell, Python, Microsoft Graph API, REST APIs, Terraform, or similar technologies. Strong troubleshooting skills across authentication, federation, certificates, PKI, network security, cloud access, application integrations, and enterprise identity services. Knowledge of cybersecurity and compliance frameworks including SOC 2, ISO/IEC 27001, NIST CSF, NIST 800-63, CIS Controls, Zero Trust, and NERC CIP. Competencies: Mandarin fluency preferred but not required. Strong analytical, troubleshooting, and problem-solving skills. Ability to work independently and collaboratively in a fast-paced environment. Excellent communication, stakeholder management, and technical documentation skills. Strong organization, attention to detail, initiative, and ownership. Ability to balance security, reliability, usability, scalability, and business requirements. Proactive approach to automation, standardization, and continuous improvement. Travel 5%-20% Work Location and Status: Full time, Hybrid at any Sungrow USA office in Phoenix, Costa Mesa, or Houston No visa sponsorship Compensation: Compensation commensurate with experience Competitive salary and annual bonus eligibility Comprehensive benefits package including health, dental, vision, and retirement plans Strong personal and company growth opportunities Sungrow is an equal opportunity employer. Due to strong interest in this position, Sungrow will only reach out to those candidates who best meet the requirements. Thank you for your interest in Sungrow.
Job Description Job Description Overview We are looking for a AV/VTC Technician to join our team! Three or more years of experience working as an AV VTC Technician. Primary Skills include: Candidates are expected to have experience with videoconference and conference room upgrades, knowledge of Extron and Crestron infrastructure and control products, Bi-amp audio devices, Tandberg codecs, projection system and other audio/video equipment knowledge. Installing complex AV systems. Technicians must complete technical installation of AV systems, including equipment rack fabrication, site preparation, termination and calibration of audio and video equipment, and implementation of Crestron Digital Media and control systems. Also, trouble-shoot complex audio, video, switching and control systems problems as required. Install, configure, integrate and test videoconferencing and integrated audio/visual technologies (videoconferencing, multimedia, displays, video projection systems, audio reinforcement systems, cameras, microphones, document cameras, streaming technologies, etc.) and A/V based collaboration technologies. Integrate and configure A/V systems with Crestron control systems. Install and configure Crestron Digital Media products. Additional Responsibilities Assist in Developing and conduct on-site user and administrative training for the installed integrated A/V systems. Assist in design, integration, testing and troubleshooting of various network and telecommunications systems including IP and ISDN networks. Assist in customer site surveys, including collecting and recording existing detailed operational, functional and technical requirements, developing project scopes. This would be the design engineer responsibility not a technician. Understanding plans and specifications to identify the materials and equipment needed to ensure compliance with project requirements. This would be the design engineer responsibility. Knowledge of design techniques, tools, and principals involved in the production of electrical plans, blueprint and drawings. Load and test touch panels and control programs. Troubleshoot hardware cabling. Provide system testing and troubleshooting expertise on high-end A/V solutions as related to the remote control sub-systems of the integrated solutions. Provide training and training material, including advanced training for the technical support and services personnel and directs easy to understand basic training for the end-users of the systems. Responsibilities Required Experience At a minimum, 3 years of experience with troubleshooting videoconferencing, audio conferencing, and integrated A/V technologies in a large enterprise. At a minimum, 3 years of experience installing and troubleshooting Digital Media, BiAmp, Extron, Tandberg, Polycom, Crestron, Lutron, and corresponding hardware and software infrastructure. Familiarity with IT, telecommunications, A/V and electrical equipment including related materials and specifications. Detailed knowledge of videoconferencing standards. Experience reading and interpreting blueprints. Administer ITSM / Service Now network ticket queue Crestron Digital Media Certification (preferred). Qualifications Benefits Health Care Plan (Medical, Dental & Vision) Retirement Plan (401k,with matching) Life Insurance Plan PTO Short Term & Long-Term Disability Internet & Phone Allowance (for applicable roles) Wellness Resources (EAP) Pet Insurance Work-Life balance Flexible Hours Full-Time Permanent Positions JW Affinity IT is a full-service IT solutions provider supporting schools and private organizations with strategic, innovative technology projects. We take the time to understand our clients' needs to successfully develop, implement, and manage each initiative. JW is a certified small, woman- and minority-owned business through the National Minority Supplier Development Council. We are committed to fostering a diverse, inclusive, and innovative workplace where different perspectives lead to better IT solutions. As an Equal Opportunity Employer, we welcome applicants from all backgrounds and are dedicated to creating an inclusive environment.
09/28/2026
Full time
Job Description Job Description Overview We are looking for a AV/VTC Technician to join our team! Three or more years of experience working as an AV VTC Technician. Primary Skills include: Candidates are expected to have experience with videoconference and conference room upgrades, knowledge of Extron and Crestron infrastructure and control products, Bi-amp audio devices, Tandberg codecs, projection system and other audio/video equipment knowledge. Installing complex AV systems. Technicians must complete technical installation of AV systems, including equipment rack fabrication, site preparation, termination and calibration of audio and video equipment, and implementation of Crestron Digital Media and control systems. Also, trouble-shoot complex audio, video, switching and control systems problems as required. Install, configure, integrate and test videoconferencing and integrated audio/visual technologies (videoconferencing, multimedia, displays, video projection systems, audio reinforcement systems, cameras, microphones, document cameras, streaming technologies, etc.) and A/V based collaboration technologies. Integrate and configure A/V systems with Crestron control systems. Install and configure Crestron Digital Media products. Additional Responsibilities Assist in Developing and conduct on-site user and administrative training for the installed integrated A/V systems. Assist in design, integration, testing and troubleshooting of various network and telecommunications systems including IP and ISDN networks. Assist in customer site surveys, including collecting and recording existing detailed operational, functional and technical requirements, developing project scopes. This would be the design engineer responsibility not a technician. Understanding plans and specifications to identify the materials and equipment needed to ensure compliance with project requirements. This would be the design engineer responsibility. Knowledge of design techniques, tools, and principals involved in the production of electrical plans, blueprint and drawings. Load and test touch panels and control programs. Troubleshoot hardware cabling. Provide system testing and troubleshooting expertise on high-end A/V solutions as related to the remote control sub-systems of the integrated solutions. Provide training and training material, including advanced training for the technical support and services personnel and directs easy to understand basic training for the end-users of the systems. Responsibilities Required Experience At a minimum, 3 years of experience with troubleshooting videoconferencing, audio conferencing, and integrated A/V technologies in a large enterprise. At a minimum, 3 years of experience installing and troubleshooting Digital Media, BiAmp, Extron, Tandberg, Polycom, Crestron, Lutron, and corresponding hardware and software infrastructure. Familiarity with IT, telecommunications, A/V and electrical equipment including related materials and specifications. Detailed knowledge of videoconferencing standards. Experience reading and interpreting blueprints. Administer ITSM / Service Now network ticket queue Crestron Digital Media Certification (preferred). Qualifications Benefits Health Care Plan (Medical, Dental & Vision) Retirement Plan (401k,with matching) Life Insurance Plan PTO Short Term & Long-Term Disability Internet & Phone Allowance (for applicable roles) Wellness Resources (EAP) Pet Insurance Work-Life balance Flexible Hours Full-Time Permanent Positions JW Affinity IT is a full-service IT solutions provider supporting schools and private organizations with strategic, innovative technology projects. We take the time to understand our clients' needs to successfully develop, implement, and manage each initiative. JW is a certified small, woman- and minority-owned business through the National Minority Supplier Development Council. We are committed to fostering a diverse, inclusive, and innovative workplace where different perspectives lead to better IT solutions. As an Equal Opportunity Employer, we welcome applicants from all backgrounds and are dedicated to creating an inclusive environment.
