The Enterprise Cyber Security team is focused on ensuring the resilience of our corporate environment with focus on protection of our corporate systems, IP, and employee data. We are a close-knit team with strong cross-functional roles in the company.
As a Cyber Security Architect, you will be the hands-on technical lead securing our High Performance Computing (HPC)/Virtualization environments. Your job is to have a deep understanding of this infrastructure, network architecture, and the operations depending on it, including our software/hardware/network engineering, fleet operations requirements, and administrative functions. You will use your knowledge and experience to design, implement, automate, and continuously improve our security posture.
What you'll do: - Plan for, execute, and follow through on projects and engagements independently
- Apply best practices in software, network, and infrastructure engineering
- Deliver projects on time, on budget, with excellent quality and security configurations
- Review the existing and new deployments and architecture designs looking for design flaws, security improvements, and advocate for stronger security controls that meet functional and operational needs
- Work hand-in-hand with the Cloud Platform, IT, and Product teams to research, design and develop security solutions and deployments and strategies tailored to Latitude's business needs
- Engage actively in Data Center and Network Security initiatives to assess existing security and implementations of supplemental technical solutions to improve security
- Document findings, conduct comparisons, perform threat and risk assessments, and Proof of Concepts aiding the team in making informed decisions about the impact of various design options
- Develop, Review, and Design the automation and orchestration for security aspects of cloud and virtualized deployments
- Provide inputs into dashboards and report metrics on the status of the Cyber Security posture
- Hands on deployment of solutions, working independently and as part of a team
- Provide mentoring and skill set knowledge transfer to team members and engineering staff
- Moderate and contribute to Supercomputing System Administration that contributes to:
- Proactive monitoring, analysis, and correcting system security issues
- Development of scripts to automate, perform security checks, and develop tools to enhance support of the Cloud/Virtualized systems and development environments
- Developing playbooks/runbooks, operational and troubleshooting documentation
- Evaluate and contribute to designs for Network and Infrastructure Solutions with Security and Functionality as pillars of implementation
- Consult and advocate security best practices for DMZ architectures, NAC/NAP, lateral isolation, and multi-site data movement in Network management tooling (like Palo Alto, Fortinet, F5)
What you'll need to succeed:- At a minimum, a Bachelor's degree in Computer Engineering, Computer Science, Cyber Security or a related field and 4+ years of relevant experience (or Master's degree and 2+ years of relevant experience)
- Strongly prefer 8+ years related experience or 6 years with a Master's degree; as a Data Center/Virtualization and/or Network Security Architect/Engineer
- 2+ years of related experience in vulnerability management and adjusting the risk rating/severity dependent on internal factors for cloud and other infra
- High proficiency and Hands-on experience in cloud/virtualization technologies (AWS/HPC/MAAS)
- Experience with Lustre, Kerberos, and Linux Administration
- Proficiency in scripting languages, including Bash, Python, Go, or Java to create production level services and automation tools that incorporate into CI/CD
- Proficiency and hands-on experience using Infrastructure as Code (IaC) to automate the creation of cloud resources, virtualized systems, and review infrastructure deployments. E.g. Terraform, Cloud Formation, Ansible, or others
- Ability to grasp new technologies quickly and prioritize and multitask on multiple responsibilities
- Hands-on Experience with patching and hardening Linux, MacOS, and Windows Systems (clients and servers), images, and containers
- Proficient in Network Protocols and Firewall Management, with hands-on experience in configuration and optimization to ensure network security internally and at perimeters
- Critical thinking and a holistic view of Cyber Security with ability to balance security requirements with mission needs and collaboration across teams
- Exceptional organizational and time management skills demonstrated through adept autonomy, independent work, collaborative teamwork, and a professional demeanor
- Strong experience with architecting/deploying scalable security services and workloads in cloud native and virtualized environments
- Strong experience with securing distributed applications and clustered compute workloads running on CPUs, GPUs, and TPUs
- Understand engineering design limitations and provide guidance for teams to secure their deployments to achieve desired performance in budget and on time
- An Independent take-charge attitude while being open-minded, creatively thinking, willing to take calculated risks, and make informed decisions
- Strong understanding of Cyber Security Standards (ISO27001, NIST 800-53)
- Experience with Jenkins a plus
- Experience with Zero Trust Architecture (ZTA) principles and implementations
- Exposure to data governance, secure data movement, and storage lifecycle management
- Must have demonstrated proficiency and strength in verbal, written, presentation, and communications skills, including technical diagramming
- A sense of camaraderie, compassion, and unparalleled passion/energy
What we offer you:- Competitive compensation packages
- High-quality individual and family medical, dental, and vision insurance
- Health savings account with available employer match
- Employer-matched 401(k) retirement plan with immediate vesting
- Employer-paid group term life insurance and the option to elect voluntary life insurance
- Paid parental leave
- Paid medical leave
- Unlimited vacation
- 15 paid holidays
- Daily lunches, snacks, and beverages available in all office locations
- Pre-tax spending accounts for healthcare and dependent care expenses
- Pre-tax commuter benefits
- Monthly wellness stipend
- Adoption/Surrogacy support program
- Backup child and elder care program
- Professional development reimbursement
- Employee assistance program
- Discounted programs that include legal services, identity theft protection, pet insurance, and more
- Company and team bonding outlets: employee resource groups, quarterly team activity stipend, and wellness initiatives
Learn more about Latitude's team, mission and career opportunities at lat.ai!
The expected base salary range for this full-time position in California is $160,000 - $240,000 USD. Actual starting pay will be based on job-related factors, including exact work location, experience, relevant training and education, and skill level. Latitude employees are also eligible to participate in Latitude's annual bonus programs, equity compensation, and generous Company benefits program, subject to eligibility requirements.
