Senior Cyber Security Engineer - Identity and Device Management, & Networking Security

Latitude AI is seeking a Senior Cyber Security Engineer to provide hands-on technical leadership across identity and device management, as well as networking security. In this onsite role in Palo Alto, CA, you will help secure Latitude AI’s High Performance Computing (HPC) and virtualization environments by designing, implementing, automating, and continuously improving security controls.

You will collaborate closely with the Cloud Platform, IT, and Product teams to build security solutions aligned to business needs, while also supporting data center and network security initiatives. The Enterprise Cyber Security team focuses on strengthening the resilience of the corporate environment, with emphasis on protecting corporate systems, IP, and employee data.

Responsibilities

• Design, implement, and deploy identity and device management capabilities using Entra/Okta and MDM solutions such as Intune
• Lead network security design and engineering by applying best practices across software, network, and infrastructure engineering
• Consult and advocate for security best practices for DMZ architectures, NAC/NAP, lateral isolation, and multi-site data movement in network management tooling (including Palo Alto, Fortinet, and F5)
• Deliver security-focused projects on time and within budget, maintaining excellent quality and secure configurations
• Review existing and new deployments and architecture designs for flaws, recommend improvements, and support stronger security controls that meet functional and operational needs
• Work with Cloud Platform, IT, and Product teams to research, design, and develop security deployments and strategies tailored to Latitude AI
• Participate in data center and network security initiatives to assess access control posture and help implement supplemental technical solutions
• Document findings, run comparisons, conduct threat and risk assessments, and create Proof of Concepts to support informed architectural decisions
• Develop, review, and design automation and orchestration for security controls related to device access to services
• Provide inputs into dashboards and report metrics for the status of the cyber security posture
• Plan, execute, and follow through on projects independently, while also contributing as part of a team
• Perform hands-on deployments, proactively monitor and analyze system security issues, and correct problems
• Develop scripts to automate security checks and build tools that improve support for cloud and virtualized systems and development environments
• Create and maintain playbooks and runbooks, including operational and troubleshooting documentation
• Evaluate and contribute to network and infrastructure solution designs where security and functionality are core implementation pillars
• Moderate and contribute to Supercomputing System Administration efforts tied to the security initiatives
• Provide mentoring and knowledge transfer to team members and engineering staff

Requirements

• Bachelor’s degree in Computer Engineering, Computer Science, Cyber Security, or a related field, plus 4+ years of relevant experience (or a Master’s degree with 2+ years relevant experience)
• Strong preference for 8+ years related experience or 6 years with a Master’s degree, specifically as an Identity and Device Management Engineer and/or Network Security Architect/Engineer, including actively deploying solutions from scratch to production
• 2+ years of experience in vulnerability management and adjusting risk ratings or severity based on internal factors for cloud and other infrastructure
• Experience with Lustre, Kerberos, and Linux administration
• Proficiency in scripting languages including Bash, Python, Go, or Java to build production-level services and automation tools integrated into CI/CD
• Proficiency with Infrastructure as Code (IaC) to automate cloud resources and virtualized systems, such as Terraform, Cloud Formation, and Ansible
• Ability to learn new technologies quickly and prioritize multiple responsibilities simultaneously
• Hands-on experience patching and hardening Linux, MacOS, and Windows systems (clients and servers), images, and containers
• Strong understanding of network protocols and firewall management with hands-on experience configuring and optimizing security internally and at perimeters
• Critical thinking and a holistic view of cybersecurity, with the ability to balance security needs with mission requirements and cross-team collaboration
• Exceptional organization and time management, with demonstrated autonomy and collaborative teamwork
• Strong experience architecting and deploying scalable security services and workloads in cloud-native and virtualized environments
• Ability to deploy device management solutions to control access to company solutions
• Understanding of engineering design limitations and ability to guide teams to secure deployments while achieving performance, budget, and schedule goals
• Independent, take-charge mindset with openness to calculated risks and informed decision-making
• Strong understanding of cybersecurity standards including ISO27001 and NIST 800-53
• Experience with Jenkins is a plus
• Exposure to Zero Trust Architecture (ZTA) principles and implementations
• Exposure to data governance, secure data movement, and storage lifecycle management
• Demonstrated strength in verbal, written, and presentation communication, including technical diagramming
• A sense of comradery, compassion, and passion/energy

Technologies

• Entra, Okta, Intune
• Palo Alto, Fortinet, F5
• DMZ architectures, NAC/NAP, lateral isolation
• Lustre, Kerberos, Linux
• Bash, Python, Go, Java
• CI/CD
• Infrastructure as Code (IaC): Terraform, Cloud Formation, Ansible
• MacOS, Windows
• NIST 800-53, ISO27001
• Zero Trust Architecture (ZTA)
• Jenkins

Benefits

• Competitive compensation packages
• High-quality individual and family medical, dental, and vision insurance
• Health savings account with available employer match
• Employer-matched 401(k) retirement plan with immediate vesting
• Employer-paid group term life insurance and option to elect voluntary life insurance
• Paid parental leave and Adoption/Surrogacy support program
• Paid medical leave
• Unlimited vacation and 15 paid holidays
• Daily lunches, snacks, and beverages available in all office locations
• Pre-tax spending accounts for healthcare and dependent care expenses
• Pre-tax commuter benefits
• Monthly wellness stipend
• Backup child and elder care program
• Professional development reimbursement
• Employee assistance program
• Discounted programs including legal services, identity theft protection, pet insurance, and more
• Company and team bonding outlets: employee resource groups, quarterly team activity stipend, and wellness initiatives

Location: Palo Alto, CA (onsite)
Salary: USD 160,000 - 240,000 per year