Platform Security Engineer 2

About the role

At HDR, our employee-owners are fully engaged in creating a welcoming environment where each of us is valued and respected, a place where everyone is empowered to bring their authentic selves and novel ideas to work every day. Each role throughout our organization makes a difference in our ability to change the world for the better.

Responsibilities

• Independently implement and maintain vDefend distributed firewall policies and NSX micro-segmentation rules for moderate-complexity environments.
• Administer Identity Broker integrations, federation trusts, and access policy mappings across platform services.
• Enforce platform security baselines and hardening standards for VCF management and workload domains.
• Conduct recurring security configuration reviews and partner with engineering teams on remediation planning.
• Assist in developing reusable policy standards, segmentation templates, and security implementation patterns.
• Support integration of platform security controls with VCF tools such as Aria Operations, Automation, and logging/monitoring workflows.
• Contribute to compliance guardrails by mapping platform configurations to CIS, NIST, and internal control requirements.
• Participate in root cause analysis for security incidents and recurring control failures.
• Provide operational guidance to Platform Security Engineer I staff and peer teams.

Requirements

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or related field; or equivalent practical experience.
• Minimum 3 years of experience in infrastructure security, systems security, network security, or virtualization engineering.
• Experience with firewall rule administration, segmentation, and IAM in enterprise environments.
• Working knowledge of VMware vSphere and experience with at least one of the following: NSX, vDefend, SSO/federation, or policy enforcement platforms.
• Working knowledge of compliance frameworks such as CIS and NIST.
• Experience with scripting, automation, or configuration validation.

Preferred Qualifications

• Hands-on experience with VMware NSX and/or vDefend in production.
• Exposure to Azure, AWS, or hybrid cloud security concepts such as shared responsibility, cloud IAM, and security baselines.
• Familiarity with VCF lifecycle, SDDC Manager, Aria Operations, Aria Automation, or related platform tooling.
• Experience with policy-as-code or configuration-as-code tools such as OPA, Sentinel, Terraform, or Ansible.
• Security+, VMware VCP, SC-900, AZ-500, or equivalent certifications.

Schedule

This on-site role supports 24/7 operations through real-time collaboration. Standard shifts occur within a 6:00 AM - 6:00 PM window, Monday through Friday. Additionally, this position requires scheduled on-call flexibility and the ability to remain reasonably reachable during off-hours for critical business continuity.

Benefits

• Comprehensive benefits package promoting employee ownership, health, performance, and success, including:
  • Medical, dental, and vision insurance
  • Short and long-term disability
  • Life insurance
  • Employee assistance program
  • Paid time away, parental leave, and paid holidays
  • Retirement savings plan with employer match
  • Employee referral bonus
  • Tuition reimbursement
• Eight Employee Network Groups (Asian Pacific, Black, Hispanic/Latino(a), LGBTQ+, People with Disabilities, Veterans, Women, Young Professionals) to foster inclusion and support.

Pay

The expected compensation range for this position depends on skills, experience, education, and geographical location:

• Folsom, CA; Denver, CO; Englewood, CO: $79,541 – $113,630
• Minneapolis, MN; St. Paul, MN: $75,926 – $108,465
• Pennington, NJ: $83,157 – $118,795
• Woodcliff Lake, NJ: $90,388 – $129,125
• Olympia, WA: $72,310 – $103,300

Locations: United States-Nebraska-Omaha (Primary), United States-Arizona-Phoenix, United States-Minnesota-St. Paul, United States-Texas-Austin, United States-Missouri-Kansas City, United States-South Carolina-Columbia, United States-Colorado-Denver, United States-Virginia-Vienna, United States-Minnesota-Saint Louis Park, United States-California-Folsom, United States-Oregon-Portland, United States-New Jersey-Woodcliff Lake, United States-Florida-Orlando, United States-Pennsylvania-Harrisburg, United States-Oregon-Salem, United States-Texas-Fort Worth, United States-Pennsylvania-Pittsburgh, United States-Texas-San Antonio, United States-Texas-Dallas, United States-New Mexico-Albuquerque, United States-Washington-Olympia