Security Engineer

CI Financial•Austin, TX

26d•Onsite

About The Position

Join a team that values your ambition and empowers your growth At Corient, we help high- and ultra-high-net-worth individuals and families to enjoy a full life, while enabling them to preserve their wealth for future generations, and provide for the people, causes and communities they care about. We focus on exceeding expectations, simplifying lives, and establishing legacies that last for generations. We are always looking for talented and motivated individuals to join our team. If you want to work for a company that values your contributions and supports your growth, we would like to meet you.

Requirements

Bachelor’s degree in Computer Science, Engineering, Information Security, or related field.
6+ years of experience in security engineering, infrastructure engineering, or cloud security.
Experience implementing Zero Trust architectures, preferably with Zscaler ZIA and ZPA.
Experience designing or implementing IAM and identity governance solutions.
Experience working with enterprise email security technologies.
Experience with Microsoft cloud and security platforms such as Microsoft Defender and Microsoft Purview.
Strong understanding of authentication and access technologies including MFA, SAML, OAuth, and conditional access.
Scripting or automation experience using PowerShell, Python, or similar tools.
Familiarity with security frameworks such as NIST, CIS, or ISO
Must be 18 years of age or older.
Must have unrestricted work authorization to work in the United States.
For U.S. employment opportunities, Corient hires U.S. citizens or permanent residents.
Must be willing to execute Corient’s Employee Agreement or Confidentiality and Non-Disclosure Agreement, which require, among other things, post-employment obligations relating to non-solicitation, confidentiality, and non-disclosure.

Responsibilities

Design and implement Zero Trust access controls using Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA).
Support the modernization of Identity and Access Management and Identity Governance capabilities, including authentication, authorization, and least-privilege access models using technologies such as MFA, SAML, OAuth, and conditional access.
Design and maintain enterprise security platforms that enforce security policies across endpoints, cloud environments, and enterprise networks.
Enhance enterprise email security to protect against phishing, malware, and business email compromise.
Collaborate with infrastructure and cloud engineering teams to implement security controls across hybrid environments.
Develop automation and integrations using tools such as PowerShell, Python, and platform APIs to improve scalability and consistency of security controls.
Provide engineering guidance to ensure systems are built according to secure-by-design and defense-in-depth principles.