Security Vulnerability Engineer
ARCHIVED
We can't find an active application page for this role right now. It may reopen or be listed elsewhere. Use Next Steps to search for an active apply link and similar live jobs.
Security Vulnerability Engineer - IAM / DNS / AD / PKI / Patching
Note:
All Mandatory qualifications must be met on the resume for the candidate to quality. Mandatory: Developing and implementing technical solutions Mitigating security vulnerabilities Technical Experience (Minimum 1 Year) Experience in at least one of the following: Identity and Access Management (IAM) Enterprise DNSActive DirectoryGroup PolicyPublic Key Infrastructure (PKI) Patching & upgrading systems
Location: Remote (Preferred: California or West Coast – Pacific Time)
Duration: 2-year contract with 1-year extension (up to 3 years total)
Position Overview:
We are seeking a Security Engineer / Security Engineering SME to support a large-scale Patch and Configuration Management initiative. This role will focus on strengthening enterprise security posture through the design, implementation, and optimization of security controls and vulnerability mitigation strategies across critical infrastructure systems. This is a hands-on engineering role with a strong emphasis on identity, access, and enterprise security technologies, as well as system hardening, patching, and configuration management. While the role is remote, candidates located in California (especially Sacramento) or the West Coast are highly preferred to support Pacific Time collaboration and occasional on-site meetings if needed.
Key Responsibilities:
- Design and implement technical security solutions to mitigate vulnerabilities across enterprise systems
- Support patching, upgrades, and configuration management processes to maintain system security and compliance
- Implement and manage Identity and Access Management (IAM/IdAM) controls
- Administer and secure enterprise services such as:
- Active DirectoryDNSGroup PolicyPublic Key Infrastructure (PKI)
- Enforce security policies, access controls, and governance frameworks
- Identify and remediate security gaps through proactive monitoring and vulnerability analysis
- Collaborate with infrastructure, DevOps, and application teams to ensure secure system design and operations
- Contribute to documentation, architecture reviews, and security best practices
- Mandatory Qualifications 7+ years (FTE) of experience in Security Engineering or related field
- Proven experience:
- Developing and implementing technical security solutions
- Mitigating security vulnerabilities in enterprise environments
Education:
- Bachelor’s degree in IT, Engineering, or related field(Equivalent experience may be considered in lieu of degree)
- Technical Experience (minimum 1 year in at least one area):Identity and Access Management (IdAM/IAM)
- Enterprise DNSActive DirectoryGroup PolicyPublic Key Infrastructure (PKI)
- Patching & system upgrades
Desired Qualifications:
Security & Technology Certifications (highly preferred):CISSPCompTIA Security+CCSPCCNAVMware certifications or equivalent
Additional experience in:
- Identity & Access Management (IdAM)
- Enterprise DNS and directory services
- Active Directory administration
- Group Policy managementPKI technologies
- Patching and upgrade strategies
- Additional years of relevant experience beyond minimum requirements
- Location & Work Environment
- Remote-first role
- Must be able to work Pacific Time hours
Preferred: Candidates located in California or West Coast
Nice to have:
- Ability to attend occasional on-site meetings in Sacramento, CAIdeal Candidate Profile
- Strong enterprise security engineering background (not just compliance)
- Hands-on experience with infrastructure security technologies
- Comfortable working in complex, regulated environments
- Able to balance security, operations, and system performance
- Strong communicator who can work cross-functionally with technical teams