Senior Security Engineer

Strata Decision Technology•Chicago, IL

2d•$130,000 - $150,000•Hybrid

About The Position

The Senior Security Engineer works as a member of Strata’s Security team to ensure appropriate security measures are in place and continuously improve security capabilities protecting client data. The role helps maintain the organization’s Zero Trust security framework and associated tools across a hybrid environment that includes on-premises and cloud infrastructure. The engineer manages and maintains this environment through configuration management, upgrades, identifying end-of-life or unsupported systems for replacement, designing new solutions, and recommending and implementing changes to improve efficiency, reliability, and performance. The position focuses on expanding Zero Trust principles, deploying and integrating security tools, automating security operations, and collaborating across teams. The engineer partners with IT, networking, security, DevOps, business teams, and clients as needed, and communicates complex security concepts to audiences at all levels. Strata’s preferred location for open roles is Chicago, Illinois, and the company values in-person connection and regularly hosts on-campus events.

Requirements

Minimum 4–6 years of security experience.
Hands-on experience with Zero Trust security tools and platforms is required.
Strong analytical skills and the ability to help resolve system issues across multiple integrated locations and systems.
Strong written and verbal communication skills with all levels of management and personnel.
Ability to learn quickly and apply learned principles.
Time-management and organizational skills.

Nice To Haves

Experience with scripting and Terraform.
Certifications such as CCIE, CCSE, GIAC, or equivalent.
Experience with Zero Trust tools such as Zscaler, Netskope, or Cloudflare.

Responsibilities

Mature Strata’s Zero Trust program through policy refinement, tool optimization, roadmap development, and alignment with business use cases.
Manage identity, access, and secure connectivity controls, including MFA, conditional access, privileged access, least privilege, DNS and content filtering, secure web gateway, and certificate-based controls.
Partner with IT, networking, security, and business teams to resolve access issues, blocked traffic, policy behavior, connectivity problems, and related security events.
Strengthen enterprise security controls across endpoint, cloud, SaaS, AI, identity, network, and data protection platforms using security frameworks, CIS benchmarks, lifecycle management, and threat data.
Lead the selection, deployment, and optimization of security tools, including SIEM, EDR, XDR, IAM, and cloud security solutions.
Implement automation for security operations to improve efficiency, accuracy, and response times.
Tune security tools to reduce alert fatigue and false positives.
Use AI to make workflows efficient and automated.
Manage and maintain the hybrid security environment, including configuration management and upgrades.
Identify end-of-life or unsupported systems that need replacement.
Architect new solutions and recommend and execute system modifications to improve efficiency, reliability, and performance.
Work with IT, DevOps, and other teams to integrate security best practices throughout the business.
Partner with the security organization to establish guidelines that allow the organization to move quickly and securely.
Explain complex concepts in understandable terms to all levels of the business.