Job description

Target PR Range: 77-87/hr DOE SUMMARY/JOB PURPOSE: The Security Engineer will support the Zero Trust Engineering team in strengthening the security posture of corporate systems, cloud environments, and infrastructure. This role will support identity security and secure access operations across enterprise platforms. This role will focus on service account management using Silverfort, integration with Active Directory, Microsoft Entra ID, and other identity platforms, operational support for AI-related and other security projects, and ongoing administration of Zscaler assets in AWS. ESSENTIAL DUTIES AND RESPONSIBILITIES: • Manage and support service accounts and other non-human identities using Silverfort, including discovery, policy implementation, monitoring, access reviews, and lifecycle governance. • Assist with integration and operational support across Active Directory, Microsoft Entra ID, and other enterprise identity platforms to strengthen identity visibility, authentication controls, and access governance. • Contribute to AI-related and other enterprise security projects, particularly where identity, authentication, access control, or service account usage is involved. • Maintain and administer Zscaler App Connectors, including health monitoring, troubleshooting, patching, version upgrades, and operational maintenance. • Develop, update, and maintain runbooks, standard operating procedures, and technical documentation for identity and Zscaler-related operations. • Plan, document, and support disaster recovery drills involving Zscaler, ensuring procedures are tested, repeatable, and aligned with business continuity requirements. • Work closely with security, infrastructure, cloud, and application teams to implement changes, resolve issues, and improve operational resilience. • Provide troubleshooting support, issue analysis, and recommendations for service account security, identity integrations, and Zscaler-related incidents. EDUCATION/EXPERIENCE/KNOWLEDGE & SKILLS: Education: BS/BA degree in Cybersecurity, Computer Science, Information Technology, or related discipline; or Equivalent combination of education, training, and hands-on experience. Experience: *Hands-on experience for service account life cycle management or identity security use cases. *Strong knowledge of Active Directory, Microsoft Entra ID, and enterprise identity and access management concepts. *Experience supporting Zscaler, especially App Connectors, including patching, upgrades, and operational troubleshooting. *Experience writing and maintaining technical runbooks and operational procedures.Ability to support disaster recovery testing, system maintenance, and cross-functional security projects. *Strong documentation, communication, and problem-solving skills. *Familiarity with security tools or cloud platforms is advantageous but not required. *Experience in a regulated or compliance-driven environment is a plus. *Experience in AI/ML systems Knowledge/Skills: * Foundational knowledge of networking (TCP/IP, DNS, routing), operating systems (Windows, Linux), and security fundamentals. * Identity troubleshooting and root cause analysis. * Basic understanding of threat vectors, attacker techniques, and defensive countermeasures. * Ability to analyze logs and troubleshoot basic security or system issues. * Familiarity with scripting (Python, PowerShell) is a plus. * Strong written and verbal communication skills, with the ability to articulate technical topics clearly. * Strong customer service orientation and ability to work collaboratively with technical and non-technical staff. * Ability to prioritize tasks, follow procedures, and adapt to changing priorities. * Demonstrated curiosity, eagerness to learn, and willingness to take on new challenges. WORKING CONDITIONS: Primarily working indoors in office scenarios. Occasional after-hours support may be required for critical issues.

Requirements

Must-haves

Target PR Range: 77-87/hr DOE
Manage and support service accounts and other non-human identities using Silverfort, including discovery, policy implementation, monitoring, access reviews, and lifecycle governance.
Assist with integration and operational support across Active Directory, Microsoft Entra ID, and other enterprise identity platforms to strengthen identity visibility, authentication controls, and access governance.
Contribute to AI-related and other enterprise security projects, particularly where identity, authentication, access control, or service account usage is involved.
Maintain and administer Zscaler App Connectors, including health monitoring, troubleshooting, patching, version upgrades, and operational maintenance.
Develop, update, and maintain runbooks, standard operating procedures, and technical documentation for identity and Zscaler-related operations.
Plan, document, and support disaster recovery drills involving Zscaler, ensuring procedures are tested, repeatable, and aligned with business continuity requirements.
Work closely with security, infrastructure, cloud, and application teams to implement changes, resolve issues, and improve operational resilience.
Provide troubleshooting support, issue analysis, and recommendations for service account security, identity integrations, and Zscaler-related incidents.
BS/BA degree in Cybersecurity, Computer Science, Information Technology, or related discipline; or Equivalent combination of education, training, and hands-on experience.
Hands-on experience for service account life cycle management or identity security use cases.
Strong knowledge of Active Directory, Microsoft Entra ID, and enterprise identity and access management concepts.
Experience supporting Zscaler, especially App Connectors, including patching, upgrades, and operational troubleshooting.
Experience writing and maintaining technical runbooks and operational procedures.Ability to support disaster recovery testing, system maintenance, and cross-functional security projects.
Strong documentation, communication, and problem-solving skills.
Familiarity with security tools or cloud platforms is advantageous but not required.
Experience in AI/ML systems
Foundational knowledge of networking (TCP/IP, DNS, routing), operating systems (Windows,
Linux), and security fundamentals.
Identity troubleshooting and root cause analysis.
Basic understanding of threat vectors, attacker techniques, and defensive countermeasures.
Ability to analyze logs and troubleshoot basic security or system issues.

Nice-to-haves

Experience in a regulated or compliance-driven environment is a plus.
Familiarity with scripting (Python, PowerShell) is a plus.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aiawsmlpython

Platform: wp-job-manager
Effort: medium