Principal Enterprise Security Engineer

Required

• 8+ years of relevant professional experience combining software engineering and security
• 2+ years of experience managing engineers, with a track record of hiring and growing strong technical teams
• Strong background across two or more of endpoint security, network security, enterprise application security, and identity and access management
• Deep understanding of human and machine identity and authentication protocols: OAuth 2.0, SCIM 2.0, SAML 2.0, OIDC, FIDO2/WebAuthn and passkeys
• Experience with one or more policy-as-code or authorization frameworks (OPA/Rego, Cedar, Zanzibar/ReBAC)
• Current proficiency in at least one systems or backend language: Python, Go, Rust
• Proficiency with security-relevant system design: session management, audit logging, rate limiting, secret storage
• Experience threat modeling authentication and authorization systems
• Understanding of Zero Trust architecture and least-privilege access patterns, including device trust and identity-aware network access
• Familiarity with endpoint security controls (EDR, device management, OS hardening) and modern network security patterns (segmentation, service-to-service authentication, egress control)
• Experience securing enterprise SaaS and internally built business applications, including third-party integration and API risk
• Proven ability to lead projects from strategy through execution