DirectJobHub
Jobs · Information Technology · Florida

Principal Information Security Engineer

Florida Crystals · West Palm Beach, FL · 1 mo ago
Information TechnologyFull-time

About the role

The Principal IT Security Engineer serves as the technical lead for securing the company's enterprise IT environment across various platforms and systems. The role focuses on enterprise security engineering, network and identity architecture, and protecting systems and data that run the business.

Responsibilities

  • Design, implement, and operate enterprise security controls across endpoints, servers, business applications, data, cloud and on-prem infrastructure, mobile, and networking, including firewalls, IDS/IPS, secure remote access, VPN, ZTNA, and network access control.

  • Lead the design and rollout of network microsegmentation and zone-based architectures using technologies such as identity-based segmentation, VLANs, next-generation firewalls, and policy-based controls across on-premises and cloud environments.

  • Function as a Subject Matter Expert (SME) for security integrations and authentication elements, including firewall and network security, conditional access, VPN, Zero Trust network architecture, SSO federation, MFA, and email security solutions.

  • Engineer and maintain secure connectivity between corporate IT and plant networks where those environments interconnect, applying least-privilege and defense-in-depth principles at the IT/OT boundary.

  • Collaborate with network, infrastructure, cloud, and application teams to design and review security architectures for new and existing business systems, SaaS platforms, and infrastructure services.

  • Implement and administer security tools and platforms across endpoints, servers, network, identity, and cloud environments, including EDR, SIEM/SOC integrations, vulnerability management, and secure remote access solutions.

  • Perform security engineering and threat modeling for enterprise systems and integrations, identifying and mitigating risks introduced by new connectivity, vendors, and technologies.

  • Drive vulnerability management for network, infrastructure, and platform components and coordinate safe remediation activities across production business systems.

  • Create, manage, and update Standard Operating Procedures, and coordinate cross-team communications and activities that improve and sustain operational security functions.

  • Provide mentorship and technical guidance to infrastructure, operations, and security team members on security best practices and secure design principles.

  • Stay current on threats and trends affecting enterprise IT environments and evaluate new solutions that support segmentation, identity, visibility, and protection objectives.

  • Implement, configure, and operate application allowlisting / default-deny Zero Trust endpoint tooling (e.g., ThreatLocker, AppLocker, Airlock, or equivalent), including policy design, ringfencing, exception governance, and integration with EDR and SIEM.

Requirements

  • Eight (8) or more years of hands-on experience as an Information Security Engineer or Network Security Engineer in enterprise environments.

  • Broad security experience in heterogeneous environments spanning diverse applications, systems, databases, SaaS solutions, and hybrid cloud and on-premises platforms.

  • Proven experience planning and executing network segmentation or microsegmentation programs, including firewall-based segmentation, SDN, or identity-based segmentation.

  • Working familiarity with manufacturing or plant environments and the IT/OT boundary is a plus.

  • Demonstrated experience implementing and configuring application allowlisting / default-deny Zero Trust endpoint tooling (e.g., ThreatLocker, AppLocker, Airlock, or equivalent) in enterprise environments.

Qualifications

  • Bachelor's degree in Information Systems, Computer Science, Engineering, or a related field, or equivalent experience.

  • Relevant certifications preferred, including CISSP, CCNP Security, CCSP, or comparable enterprise security and network-focused certifications.

Skills

  • Strong expertise in network security, routing and switching fundamentals, firewalls, secure remote access, and segmentation or microsegmentation technologies.

  • Experience designing and implementing Zero Trust-aligned architectures, including identity-aware access controls and least-privilege network policies.

  • Expert understanding of cloud and on-premises security, identity and access management, multi-factor authentication, SSO federation, and related security protocols.

  • Strong expertise with cloud security and firewall technologies, and a working understanding of security architecture models and application security.

  • Demonstrated knowledge of common adversary tactics, techniques, and procedures (TTPs) and relevant network defense and intelligence frameworks.

  • Ability to collect, analyze, and interpret technical data from multiple tools, including firewalls, SIEM platforms, EDR solutions, and vulnerability scanners, and produce clear, actionable recommendations.

  • Awareness of how corporate IT environments interface with plant and OT systems, sufficient to design safe connectivity and segmentation at that boundary.

  • Strong communication, collaboration, and leadership skills, with the ability to influence cross-functional teams and drive alignment on critical security decisions and policies.

Pay

Negotiable based on experience and qualifications.

Schedule

Remote or West Palm Beach, FL.

Similar jobs