Senior Cyber Security Engineer - Identity and Device Management, & Networking Security

Latitude AI (lat.ai) is building the future of Ford’s autonomy roadmap to make travel safer, less stressful, and more enjoyable for everyone. Bringing this vision to scale, our fully in-house developed hands-free ADAS platform will debut on the all-new Ford Fathom in 2027. When you join the Latitude team, you’ll work alongside leading experts across machine learning and robotics, cloud platforms, mapping, sensors and compute systems, test operations, systems and safety engineering – all dedicated to redefining the relationship between people and their vehicles for millions of customers. As a Ford Motor Company subsidiary, we operate independently to develop automated driving technology at the speed of a technology startup. Latitude is headquartered in Pittsburgh with engineering centers in Dearborn, Mich., and Palo Alto, Calif. Meet the Team: The Enterprise Cyber Security team is focused on ensuring the resilience of our corporate environment with focus on protection of our corporate systems, IP, and employee data. We are a close-knit team with strong cross-functional roles in the company. As a Cyber Security Engineer, you will be the hands-on technical lead securing our High Performance Computing (HPC)/Virtualization environments. Your job is to have a deep understanding of this infrastructure, network architecture, and the operations depending on it, including our software/hardware/network engineering, fleet operations requirements, and administrative functions. You will use your knowledge and experience to design, implement, automate, and continuously improve our security posture. What you'll do: • Identity Management and Device Management design, implementation, and deployment (Entra/Okta, MDM solutions like Intune) • Network Security design and engineering, applying best practices in software, network, and infrastructure engineering • Consult and advocate security best practices for DMZ architectures, NAC/NAP, lateral isolation, and multi-site data movement in Network management tooling (like Palo Alto, Fortinet, F5) • Deliver projects on time, on budget, with excellent quality and security configurations • Review the existing and new deployments and architecture designs looking for design flaws, security improvements, and advocate for stronger security controls that meet functional and operational needs • Work hand-in-hand with the Cloud Platform, IT, and Product teams to research, design and develop security solutions and deployments and strategies tailored to Latitude’s business needs • Engage actively in Data Center and Network Security initiatives to assess existing security access controls, and implementations of supplemental technical solutions to improve overall security. • Document findings, conduct comparisons, perform threat and risk assessments, and Proof of Concepts aiding the team in making informed decisions about the impact of various design options. • Develop, Review, and Design the automation and orchestration for security aspects device controls and access to services • Provide inputs into dashboards and report metrics on the status of the Cyber Security posture • Plan for, execute, and follow through on projects and engagements independently • Hands on deployment of solutions, working independently and as part of a team • Provide mentoring and skill set knowledge transfer to team members and engineering staff • Moderate and contribute to Supercomputing System Administration that contributes to: • Proactive monitoring, analysis, and correcting system security issues • Development of scripts to automate, perform security checks, and develop tools to enhance support of the Cloud/Virtualized systems and development environments • Developing playbooks/runbooks, operational and troubleshooting documentation • Evaluate and contribute to designs for Network and Infrastructure Solutions with Security and Functionality as pillars of implementation What you'll need to succeed: • At a minimum, a Bachelor's degree in Computer Engineering, Computer Science, Cyber Security or a related field and 4+ years of relevant experience (or Master's degree and 2+ years of relevant experience) • Strongly prefer 8+ years related experience or 6 years with a Master’s degree; as an Identity and Device Management Engineer and/or Network Security Architect/Engineer. Actively deploying solutions from scratch to Production • 2+ years of related experience in vulnerability management and adjusting the risk rating/severity dependent on internal factors for cloud and other infra. • Experience with Lustre, Kerberos, and Linux Administration • Proficiency in scripting languages, including Bash, Python, Go, or Java to create production level services and automation tools that incorporate into CI/CD • Proficiency and hands-on experience using Infrastructure as Code (IaC) to automate the creation of cloud resources, virtualized systems, and review infrastructure deployments. E.g. Terraform, Cloud Formation, Ansible, or others • Ability to grasp new technologies quickly and prioritize and multitask on multiple responsibilities. • Hands-on Experience with patching and hardening Linux, MacOS, and Windows Systems (clients and servers), images, and containers. • Proficient in Network Protocols and Firewall Management, with hands-on experience in configuration and optimization to ensure network security internally and at perimeters. • Critical thinking and a holistic view of Cyber Security with ability to balance security requirements with mission needs and collaboration across teams • Exceptional organizational and time management skills demonstrated through adept autonomy, independent work, collaborative teamwork, and a professional demeanor. • Strong experience with architecting/deploying scalable security services and workloads in cloud native and virtualized environments • Ability to deploy Device Management solutions to control access to Company Solutions • Understand engineering design limitations and provide guidance for teams to secure their deployments to achieve desired performance in budget and on time • An Independent take-charge attitude while being open-minded, creatively thinking, willing to take calculated risks, and make informed decisions • Strong understanding of Cyber Security Standards (ISO27001, NIST 800-53) • Experience with Jenkins a plus • Experience with Zero Trust Architecture (ZTA) principles and implementations • Exposure to data governance, secure data movement, and storage lifecycle management • Must have demonstrated proficiency and strength in verbal, written, presentation, and communications skills, including technical diagramming • A sense of comradery, compassion, and unparalleled passion/energy What we offer you: • Competitive compensation packages • High-quality individual and family medical, dental, and vision insurance • Health savings account with available employer match • Employer-matched 401(k) retirement plan with immediate vesting • Employer-paid group term life insurance and the option to elect voluntary life insurance • Paid parental leave and Adoption/Surrogacy support program • Paid medical leave • Unlimited vacation and 15 paid holidays • Daily lunches, snacks, and beverages available in all office locations • Pre-tax spending accounts for healthcare and dependent care expenses • Pre-tax commuter benefits • Monthly wellness stipend • Backup child and elder care program • Professional development reimbursement • Employee assistance program • Discounted programs that include legal services, identity theft protection, pet insurance, and more • Company and team bonding outlets: employee resource groups, quarterly team activity stipend, and wellness initiatives Learn more about Latitude’s team, mission and career opportunities at lat.ai! The expected base salary range for this full-time position in California is $160,000 - $240,000 USD. Actual starting pay wi