Astreya-posted about 23 hours ago
Full-time • Mid Level
Hybrid • Seattle, WA
1,001-5,000 employees

Role Summary Serve as a technical advisor and subject matter expert for global smart‑building portfolio, with a focus on secure IoT/OT networking, Azure integration, identity/SSO, and operational resilience. You will not implement changes directly; instead, you will triage issues, guide architecture and security decisions, lead risk‑mitigation strategies, and equip internal teams and partners through documentation, training, and governance. Key Responsibilities IoT/OT Network & Security Advisory - Technical triage: Rapidly assess questions or incidents to distinguish network vs. device vs. cloud causes; recommend next steps and owners. - Advise on segmentation, encryption, and firewall policies for IoT/OT environments; define guardrails that balance safety, availability, and security. - Design secure dataflow patterns (edge → gateways → cloud) and certificate/credential handling approaches appropriate for constrained OT devices. - Produce risk assessments and mitigation plans for new integrations, vendor connections, and inter‑site traffic; track risks to closure. Azure Platform & Enterprise Integration (Advisory) - Guide solution patterns across Azure IoT Hub, Device Provisioning Service (DPS), IoT Edge, Azure Digital Twins, and related telemetry/analytics services. - Advise on identity and SSO using Microsoft Entra ID (Azure AD) and modern auth flows; define least‑privilege controls and conditional access guardrails. - Define secure onboarding and offboarding patterns for devices and applications; recommend resilience/failover and rollback strategies. Smart Building Systems Oversight - Provide technical insight into BAS/BMS, Environmental, People Density, occupancy, parking, digital signage and other Commercial & Industrial IoT systems and their integration with Azure IoT platforms. - Validate data integrity and performance through telemetry reviews, dashboards, and controlled tests; recommend tuning, buffering, and retry patterns. - Deliver stakeholder presentations that explain how building systems map to network and cloud architectures, highlighting operational and security implications. Troubleshooting, Triage & Escalation - Act as a Tier‑3 escalation point for complex IoT/OT connectivity and platform issues; perform deep diagnostics (logs, packet captures, edge/cloud traces). - Lead root cause analysis (RCA) and write clear post‑incident reports with preventive actions, ownership, and timelines. - Run knowledge‑transfer sessions and post‑incident reviews to build field/vendor capabilities and reduce repeat occurrences. Lifecycle & Preventative Maintenance - Support lifecycle planning for firmware, certificates/keys, controller upgrades, and network segmentation milestones. - Partner with field teams and vendors to align preventative maintenance with uptime/SLA and security objectives; recommend proactive risk‑reduction actions. Standards, Training & Documentation - Define onboarding requirements for IoT/OT solutions (compliance checks, service mapping, ops readiness). - Own and maintain KBAs, runbooks, RACIs, workflows, and architecture patterns; ensure global applicability and version control. - Create and deliver training modules and technical presentations for networking, operations, and app teams, measure adoption. Global Project Support & Governance - Contribute to project scope, risk identification, acceptance criteria, and Key Performance Indicator (KPI) Objective and Key Results (OKR) definitions for global rollouts. - Facilitate risk workshops and status readouts; provide executive‑level presentations on readiness, risk posture, and remediation progress. - Coordinate across security, networking, facilities, and vendor teams to maintain alignment and accountability. Onsite Technical Liaison (Hybrid) - Attend onsite tests, commissioning events, device reviews, and vendor alignment meetings; provide real-time triage and decision support. - Capture onsite findings and convert them into updated standards, patterns, and training content.

  • Technical triage: Rapidly assess questions or incidents to distinguish network vs. device vs. cloud causes; recommend next steps and owners.
  • Advise on segmentation, encryption, and firewall policies for IoT/OT environments; define guardrails that balance safety, availability, and security.
  • Design secure dataflow patterns (edge → gateways → cloud) and certificate/credential handling approaches appropriate for constrained OT devices.
  • Produce risk assessments and mitigation plans for new integrations, vendor connections, and inter‑site traffic; track risks to closure.
  • Guide solution patterns across Azure IoT Hub, Device Provisioning Service (DPS), IoT Edge, Azure Digital Twins, and related telemetry/analytics services.
  • Advise on identity and SSO using Microsoft Entra ID (Azure AD) and modern auth flows; define least‑privilege controls and conditional access guardrails.
  • Define secure onboarding and offboarding patterns for devices and applications; recommend resilience/failover and rollback strategies.
  • Provide technical insight into BAS/BMS, Environmental, People Density, occupancy, parking, digital signage and other Commercial & Industrial IoT systems and their integration with Azure IoT platforms.
  • Validate data integrity and performance through telemetry reviews, dashboards, and controlled tests; recommend tuning, buffering, and retry patterns.
  • Deliver stakeholder presentations that explain how building systems map to network and cloud architectures, highlighting operational and security implications.
  • Act as a Tier‑3 escalation point for complex IoT/OT connectivity and platform issues; perform deep diagnostics (logs, packet captures, edge/cloud traces).
  • Lead root cause analysis (RCA) and write clear post‑incident reports with preventive actions, ownership, and timelines.
  • Run knowledge‑transfer sessions and post‑incident reviews to build field/vendor capabilities and reduce repeat occurrences.
  • Support lifecycle planning for firmware, certificates/keys, controller upgrades, and network segmentation milestones.
  • Partner with field teams and vendors to align preventative maintenance with uptime/SLA and security objectives; recommend proactive risk‑reduction actions.
  • Define onboarding requirements for IoT/OT solutions (compliance checks, service mapping, ops readiness).
  • Own and maintain KBAs, runbooks, RACIs, workflows, and architecture patterns; ensure global applicability and version control.
  • Create and deliver training modules and technical presentations for networking, operations, and app teams, measure adoption.
  • Contribute to project scope, risk identification, acceptance criteria, and Key Performance Indicator (KPI) Objective and Key Results (OKR) definitions for global rollouts.
  • Facilitate risk workshops and status readouts; provide executive‑level presentations on readiness, risk posture, and remediation progress.
  • Coordinate across security, networking, facilities, and vendor teams to maintain alignment and accountability.
  • Attend onsite tests, commissioning events, device reviews, and vendor alignment meetings; provide real-time triage and decision support.
  • Capture onsite findings and convert them into updated standards, patterns, and training content.
  • IoT/OT networking, firewalls, and encryption: Strong grasp of routing, segmentation, VPNs/proxies, TLS/PKI, and secure edge‑to‑cloud patterns.
  • Azure IoT expertise: Practical advisory experience across IoT Hub, DPS, IoT Edge, Azure Digital Twins, and telemetry/analytics pipelines.
  • Identity & SSO: Hands‑on advisory experience with Microsoft Entra ID (Azure AD), modern auth (OIDC/SAML/OAuth2), and least‑privilege access patterns.
  • Troubleshooting & RCA: Demonstrated ability to lead deep diagnostics and produce clear, actionable RCAs with preventive controls.
  • Smart building Information Gathering systems: Working knowledge Environmental, People Density, Parking and other various experiences.
  • Risk mitigation & governance: Ability to produce risk registers, mitigation plans, acceptance criteria, and track to closure.
  • Enablement skills: Excellent documentation, training, and presentation skills; ability to influence global stakeholders in a hybrid environment.
  • Astreya offers comprehensive b enefits to all Regular, Full-Time Employees, including:
  • Medical provided through Cigna (PPO, HSA, EPO options) / Medical provided through Kaiser (HMO option only) for California employees only
  • Dental provided through Cigna (DPPO & DHMO options)
  • Nationwide Vision provided through VSP
  • Flexible Spending Account for Health & Dependent Care
  • Pre-Tax Account for Commuter Benefit/Parking & Transit (location-specific)
  • Continuing Education and Professional Development via various integrated platforms, e.g. Udemy and Coursera
  • Corporate Wellness Program
  • Employee Assistance Program
  • Wellness Days
  • 401k Plan
  • Basic Life, Accidental Life, Supplemental Life Insurance
  • Short Term & Long Term Disability
  • Critical Illness, Critical Hospital, and Voluntary Accident Insurance
  • Tuition Reimbursement (available 6 months after start date, capped)
  • Paid Time Off (accrued and prorated, maximum of 120 hours annually)
  • Paid Holidays
  • Any other statutory leaves, paid time, or other fringe benefits required under state and federal law
© 2024 Teal Labs, Inc
Privacy PolicyTerms of Service