Cybersecurity & IT Engineer

Compound Eye•Redwood City, CA

1d•$150,000 - $185,000•Hybrid

About The Position

Compound Eye is seeking a Cybersecurity & IT Engineer to report directly to the VP of Engineering. This role is responsible for owning the identity, endpoint, network, and security practices that support the engineering team. It is a hands-on generalist position focused on improving the existing technology stack, enabling engineers to build securely, and ensuring the safe path is the easy path for a mostly-remote team. While not directly responsible for CMMC compliance, all configuration decisions must be NIST 800-171 aware. The engineer will partner with the DevOps Engineer who manages AWS workloads, GPU compute, and the developer toolchain.

Requirements

5+ years in IT, systems administration, or security engineering, with experience owning broad scope on a small team.
Hands-on administration of both Microsoft 365 and Google Workspace.
Strong Linux administration skills, with working competence in Windows and macOS.
Hands-on networking experience with firewalls, VPNs, managed switches, VLANs, and routing.
Practical experience with zero-trust/overlay networking (e.g., Cloudflare Tunnel, WireGuard, Tailscale).
Ownership of DNS and email authentication for a production domain.
Familiarity with NIST 800-171 and CMMC 2.0 sufficient to avoid compliance debt (no certification required).
Proven ability to write security practices that engineers adopt.
Comfortable working independently and partnering with engineering teams without close oversight.

Responsibilities

Build internal security standards on top of NIST 800-171, including hardening guides, onboarding/offboarding procedures, access reviews, and incident response runbooks.
Conduct recurring audits of access, logs, and configurations, and maintain evidence for compliance contractors.
Manage identity across Entra ID, Intune, Microsoft 365 (Defender, Purview, GCC High), and Google Workspace.
Oversee email authentication and DNS (SPF, DKIM, DMARC, MTA-STS) and manage zones/certificates across Cloudflare.
Secure engineer and lab access using Cloudflare Tunnel/Zero Trust Mesh, VPN jump hosts, and SSH certificate authorities.
Manage the device fleet (Windows, macOS, Linux, Android, iOS) and the physical network (firewalls, switches, VLANs, lab isolation).
Define AI tooling guardrails for Claude Code and other agentic workflows.
Maintain documentation and manage vendor relationships within budget.
Handle hardware logistics from the Redwood City office, including shipping, returns, and spare equipment storage.