Senior Cyber Security Engineer - Identity and Device Management, & Networking Security

Latitude AI•Pittsburgh, MI

About The Position

Latitude AI is building automated driving technology as part of Ford Motor Company’s autonomy roadmap. The Enterprise Cyber Security team protects the corporate environment, including corporate systems, intellectual property, and employee data. This engineer serves as a hands-on technical lead securing high-performance computing (HPC) and virtualization environments, with a deep understanding of their infrastructure, network architecture, and operational dependencies across software, hardware, network engineering, fleet operations, and administrative functions. The role designs, implements, automates, and continuously improves security posture. It covers identity and device management, network security, data center and network security initiatives, and security for cloud-native and virtualized systems. The engineer collaborates with Cloud Platform, IT, Product, and engineering teams to develop solutions tailored to business needs, deliver projects, assess architectures and risks, automate security controls, and contribute to system administration, monitoring, documentation, and team knowledge transfer.

Requirements

Bachelor’s degree in Computer Engineering, Computer Science, Cyber Security, or a related field and at least 4 years of relevant experience; alternatively, a master’s degree and at least 2 years of relevant experience.
Experience as an Identity and Device Management Engineer and/or Network Security Architect/Engineer; the posting strongly prefers 8+ years of related experience, or 6 years with a master’s degree.
Experience actively deploying solutions from scratch to production.
At least 2 years of related experience in vulnerability management, including adjusting risk ratings or severity based on internal factors for cloud and other infrastructure.
Experience with Lustre, Kerberos, and Linux administration.
Proficiency in Bash, Python, Go, or Java for creating production-level services and automation tools integrated into CI/CD.
Hands-on proficiency with Infrastructure as Code to automate cloud resources, virtualized systems, and infrastructure deployment reviews; examples include Terraform, CloudFormation, and Ansible.
Hands-on experience patching and hardening Linux, macOS, and Windows systems, including clients, servers, images, and containers.
Proficiency in network protocols and firewall management, with hands-on configuration and optimization experience for internal and perimeter network security.
Strong experience architecting and deploying scalable security services and workloads in cloud-native and virtualized environments.
Ability to deploy device management solutions that control access to company solutions.
Understanding of engineering design limitations and ability to guide teams in securing deployments while meeting performance, budget, and schedule needs.
Strong understanding of cybersecurity standards, including ISO 27001 and NIST 800-53.
Ability to learn new technologies quickly and prioritize and multitask across responsibilities.
Critical thinking and a holistic cybersecurity perspective, balancing security requirements with mission needs and collaborating across teams.
Strong organizational and time-management skills, autonomy, ability to work independently and collaboratively, and a professional demeanor.
Independent, take-charge attitude, openness to new ideas, creative thinking, willingness to take calculated risks, and ability to make informed decisions.
Demonstrated strength in verbal, written, presentation, and communication skills, including technical diagramming.
A sense of camaraderie, compassion, and strong passion and energy.

Nice To Haves

Experience with Jenkins.
Experience with Zero Trust Architecture (ZTA) principles and implementations.
Exposure to data governance, secure data movement, and storage lifecycle management.

Responsibilities

Design, implement, and deploy identity management and device management solutions, including Entra or Okta and MDM solutions such as Intune.
Design and engineer network security using software, network, and infrastructure engineering best practices.
Consult on and advocate for security best practices for DMZ architectures, NAC/NAP, lateral isolation, and multi-site data movement using network management tools such as Palo Alto, Fortinet, and F5.
Deliver projects on time and on budget, with high quality and secure configurations.
Review existing and new deployments and architecture designs to identify flaws, security improvements, and stronger controls that meet functional and operational needs.
Collaborate with Cloud Platform, IT, Product, and other teams to research, design, and develop security solutions, deployments, and strategies tailored to Latitude’s business needs.
Participate in data center and network security initiatives, assess existing security access controls, and implement supplemental technical solutions to improve security.
Document findings, conduct comparisons, perform threat and risk assessments, and develop proofs of concept to support informed design decisions.
Develop, review, and design automation and orchestration for device security controls and access to services.
Provide inputs for dashboards and report metrics on the status of the cybersecurity posture.
Plan, execute, and follow through on projects and engagements independently; deploy solutions hands-on, independently and as part of a team.
Mentor team members and engineering staff and transfer skills and knowledge.
Contribute to supercomputing system administration, including proactive monitoring, analyzing and correcting security issues, and developing scripts and tools for security checks and support of cloud, virtualized systems, and development environments.
Develop playbooks, runbooks, operational documentation, and troubleshooting documentation.
Evaluate and contribute to network and infrastructure solution designs, balancing security and functionality.

Benefits

Competitive compensation packages.
Individual and family medical, dental, and vision insurance.
Health savings account with available employer match.
Employer-matched 401(k) retirement plan with immediate vesting.
Employer-paid group term life insurance and the option to elect voluntary life insurance.
Paid parental leave and adoption/surrogacy support program.
Paid medical leave.
Unlimited vacation and 15 paid holidays.
Daily lunches, snacks, and beverages available in office locations.
Pre-tax healthcare and dependent-care spending accounts.
Pre-tax commuter benefits.
Monthly wellness stipend.
Backup child and elder care program.
Professional development reimbursement.
Employee assistance program.
Discounted programs including legal services, identity theft protection, and pet insurance.
Employee resource groups, quarterly team activity stipend, and wellness initiatives.