Principal Enterprise Security Engineer

About the role

The Principal Enterprise Security Engineer is the senior technical authority and strategic thought leader across corporate architecture, SaaS platforms and workforce technologies. This is a hands-on individual contributor role combining enterprise security strategy and architecture with direct software engineering: designing, writing, reviewing, testing and deploying code that secures the corporate environment. The role is open to remote work.

Key responsibilities

• Define and maintain the end-to-end enterprise security architecture blueprint covering endpoint, identity, network and data, and lead architectural reviews of major initiatives such as AI adoption, zero trust modernization and vendor onboarding.
• Design, build and operate security services, internal tools, API integrations and automation across identity, endpoint, SaaS, network and data security, and own their delivery lifecycle.
• Review platform and service architectures so security is integrated from the start, and give risk-based recommendations to executive stakeholders.
• Build reusable infrastructure, configuration and policy as code to automate control deployment, drift detection and remediation, and enable safe, rapid change through peer review, automated tests and CI/CD.
• Act as the architecture liaison between Corporate Security and Product Security, and mentor engineers and security practitioners across seniority levels.

Required profile

• 10+ years in cybersecurity or related engineering, including leading complex technical initiatives at principal, staff, lead or equivalent scope, with continued hands-on engineering.
• Demonstrated record of personally shipping and operating security capabilities that reduce risk or manual effort.
• Excellent communication skills, able to explain complex security concepts to executives and engineers.

Required skills

• Proficiency in at least one general-purpose language such as Python, Go or TypeScript, with recent production software experience.
• Experience building security tools and integrations via APIs, SDKs and event-driven workflows (authentication, authorization, secrets management).
• In-depth cloud security knowledge (AWS, GCP) and SaaS ecosystems (Google Workspace, Slack, Okta).
• Working knowledge of IAM, endpoint security, data protection, network segmentation and zero trust.

What we offer

• Base pay for new hires in the United States ranging from $184,500 to $289,050 depending on pay zone.
• Possible eligibility for benefits, bonuses, commissions and equity.
• Flexible work arrangements: office, home or a mix.