Job description

Job Title: Senior Security Engineer Location: Local preferred......Will consider remote for the right candidate Employment Type: Contract (1 year +) About the Role We are seeking a Senior Security Engineer to support a critical security and identity workstream tied to the integration. This role will be responsible for securing platform access, data, and infrastructure across the combined environment, with hands-on ownership of Salesforce Shield, Zscaler, and enterprise identity management. The ideal candidate has deep experience securing financial services platforms through large-scale system integrations and can operate independently in a fast-moving, high-stakes environment. Key Responsibilities • Support and administer Salesforce Shield capabilities (Platform Encryption, Event Monitoring, Field Audit Trail) to ensure data protection and compliance across integrated Salesforce environments. • Configure, maintain, and troubleshoot Zscaler (ZIA/ZPA) to secure network traffic, enforce zero-trust access policies, and support secure connectivity during the integration. • Design, implement, and manage identity and access management (IAM) solutions, including provisioning, deprovisioning, SSO, MFA, and role-based access control across merging systems. • Partner with cross-functional teams (infrastructure, application, compliance, and integration leads) to secure data and application access as Commonwealth and LPL environments converge. • Conduct risk assessments and security reviews specific to integration milestones, identifying and remediating gaps before cutover events. • Develop and enforce security policies, standards, and procedures aligned with financial services regulatory requirements (e.g., Client, SEC, SOC 2). • Monitor for security incidents and vulnerabilities across integrated platforms, leading investigation and remediation efforts as needed. • Document security architecture, access models, and integration-specific configurations for audit and operational continuity. • Provide technical guidance and mentorship to junior security engineers supporting the integration effort. Required Qualifications • 5+ years of experience in security engineering, with direct hands-on experience in at least two of the following: Salesforce Shield, Zscaler, enterprise IAM platforms. • Demonstrated experience supporting security workstreams during M&A system integrations, ideally within financial services or wealth management. • Strong understanding of identity management concepts: SSO, MFA, federation (SAML/OIDC), provisioning/deprovisioning, and access governance. • Experience with Zscaler Internet Access (ZIA) and/or Zscaler Private Access (ZPA) configuration and administration. • Salesforce security/administration experience, particularly with Shield product suite (Platform Encryption, Event Monitoring, Field Audit Trail). • Familiarity with financial services regulatory and compliance frameworks (Client, SEC, SOC 2, GLBA). • Strong analytical and problem-solving skills with the ability to work independently in ambiguous, fast-paced integration environments. • Excellent communication skills, with experience working cross-functionally with both technical and business stakeholders. Preferred Qualifications • Prior experience with broker-dealer/RIA platforms. • Relevant certifications (e.g., Salesforce Certified Identity and Access Management Designer, Zscaler certifications, CISSP, CISM). • Experience with additional IAM tools (Okta, Azure AD/Entra ID, SailPoint, or similar). • Background in cloud security architecture (AWS, Azure, or GCP).

Requirements

Must-haves

Job Title: Senior Security Engineer
Employment Type: Contract (1 year +)
Support and administer Salesforce Shield capabilities (Platform Encryption, Event Monitoring, Field Audit Trail) to ensure data protection and compliance across integrated Salesforce environments.
Configure, maintain, and troubleshoot Zscaler (ZIA/ZPA) to secure network traffic, enforce zero-trust access policies, and support secure connectivity during the integration.
Design, implement, and manage identity and access management (IAM) solutions, including provisioning, deprovisioning, SSO, MFA, and role-based access control across merging systems.
Partner with cross-functional teams (infrastructure, application, compliance, and integration leads) to secure data and application access as Commonwealth and LPL environments converge.
Conduct risk assessments and security reviews specific to integration milestones, identifying and remediating gaps before cutover events.
Develop and enforce security policies, standards, and procedures aligned with financial services regulatory requirements (e.g., Client, SEC, SOC 2).
Monitor for security incidents and vulnerabilities across integrated platforms, leading investigation and remediation efforts as needed.
Document security architecture, access models, and integration-specific configurations for audit and operational continuity.
Provide technical guidance and mentorship to junior security engineers supporting the integration effort.
5+ years of experience in security engineering, with direct hands-on experience in at least two of the following: Salesforce Shield, Zscaler, enterprise IAM platforms.
Demonstrated experience supporting security workstreams during M&A system integrations, ideally within financial services or wealth management.
Strong understanding of identity management concepts: SSO, MFA, federation (SAML/OIDC), provisioning/deprovisioning, and access governance.
Experience with Zscaler Internet Access (ZIA) and/or Zscaler Private Access (ZPA) configuration and administration.
Salesforce security/administration experience, particularly with Shield product suite (Platform Encryption, Event Monitoring, Field Audit Trail).
Familiarity with financial services regulatory and compliance frameworks (Client, SEC, SOC 2, GLBA).
Strong analytical and problem-solving skills with the ability to work independently in ambiguous, fast-paced integration environments.
Excellent communication skills, with experience working cross-functionally with both technical and business stakeholders.

Nice-to-haves

Location: Local preferred......Will consider remote for the right candidate
Prior experience with broker-dealer/RIA platforms.
Relevant certifications (e.g., Salesforce Certified Identity and Access Management Designer, Zscaler certifications, CISSP, CISM).
Experience with additional IAM tools (Okta, Azure AD/Entra ID, SailPoint, or similar).
Background in cloud security architecture (AWS, Azure, or GCP).

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

azureawsgcp

Platform: jobdiva
Effort: medium

Benefits

Benefits detected in the listing.

Vision