Principal Enterprise Security Engineer

Atlassian•Seattle, WA

86d•$184,500 - $289,050•Hybrid

About The Position

The Principal Enterprise Security Engineer is a senior technical authority and strategic thought leader across corporate architecture, SaaS platforms, and workforce technologies. This hands-on principal individual-contributor role combines enterprise security strategy and architecture with direct software engineering to secure corporate assets while enabling business agility and innovation at scale. The engineer personally designs, writes, reviews, tests, and deploys security code and capabilities. The role defines enterprise security architecture and controls, builds and operates security services and automation, and advises engineering teams and executive stakeholders. It also connects Corporate Security with Product Security, mentors security practitioners, and drives broad adoption of secure, reusable solutions. Success in the first 6–12 months includes publishing an enterprise security architecture vision and reference patterns; improving key risk measures and operational performance; defining SLOs for critical controls; reducing exceptions and manual toil; and achieving adoption of paved-road solutions across multiple teams.

Requirements

10+ years of experience in cybersecurity or related engineering disciplines.
Substantial experience leading complex technical initiatives at principal, staff, lead, or equivalent scope, with continued hands-on engineering contributions.
Demonstrated proficiency in at least one general-purpose programming language, such as Python, Go, or TypeScript, with recent experience writing, testing, debugging, and maintaining production software.
Experience building security tools and integrations using APIs, SDKs, and event-driven workflows, including authentication, authorization, secrets management, error handling, and safe failure behavior.
A demonstrated record of personally shipping and operating security capabilities that measurably reduce risk or manual effort.
In-depth knowledge of cloud security architecture, including AWS and GCP, and SaaS ecosystems such as Google Workspace, Slack, and Okta.
Deep implementation and troubleshooting expertise in one or more enterprise security domains, with working knowledge across identity and access management, endpoint security, data protection, network segmentation, and zero-trust architecture.
Excellent communication skills, including the ability to explain complex security concepts to executives and engineers.

Responsibilities

Define and maintain the end-to-end enterprise security architecture blueprint covering endpoint, identity, network, and data.
Lead architectural reviews of major enterprise technology initiatives, including AI adoption, zero-trust modernization, and vendor onboarding.
Establish architectural controls and paved paths, and conduct periodic maturity assessments.
Design, build, and operate security services, internal tools, API integrations, and automation across identity, endpoint, SaaS, network, and data security.
Personally implement critical components and reference implementations, then partner with engineering teams to extend and adopt them.
Own the delivery lifecycle for key capabilities, including technical design, implementation, testing, deployment, monitoring, troubleshooting, and ongoing maintenance.
Advise engineering teams on security best practices, technologies, and methodologies, and diagnose complex failures across code, APIs, identity flows, endpoints, networks, and cloud services.
Review and influence platform and service architecture designs to integrate security from the outset.
Provide risk-based architectural recommendations and influence executive stakeholders and investment decisions.
Develop reusable infrastructure, configuration, and policy as code to automate control deployment, drift detection, and remediation; reduce exceptions and shorten adoption time through shared security capabilities.
Enable safe, rapid change through peer review, automated tests, and CI/CD for software, integrations, policies, and configuration, with staged rollouts and recovery plans.
Collaborate with security teams, engineering partners, product leaders, and principal architects on large-scale security initiatives.
Serve as the architecture liaison between Corporate Security and Product Security to support a unified security strategy across enterprise and customer-facing environments.
Lead code and design reviews and mentor engineers and security practitioners across seniority levels in implementation, debugging, and secure software development.
Establish clear OKRs and metrics with partner teams, improve key risk measures and operational performance, and drive adoption of paved-road solutions.