Edge Security Engineer: PKI, DNS & WAF Lead

Dentsply Sirona; Johnson City (TN); On-site; USD 187,000 - 198,000; Full time

Job summary

Dentsply Sirona is seeking a Senior Security Engineer for PKI and Network Edge to own DNS, certificate lifecycle, and WAF security across enterprise services. You will design and govern security controls, reduce attack surface, and ensure resilient, trusted edge defenses while partnering with Infrastructure, Cloud, and Product Security teams.

Reporting to Security Architecture and Engineering, this senior IC will lead complex initiatives end-to-end and provide high-quality telemetry for Security

Qualifications

• 7+ years in cybersecurity engineering with hands-on internet-facing security
• 3+ years in two or more of DNS security, PKI, and WAF
• Experience designing and operating enterprise-scale edge security controls
• Experience integrating network and edge security with SIEM/SOC operations

Responsibilities

• Own DNS security and domain governance, including DNSSEC and DNS firewalling
• Own enterprise certificate lifecycle management and automated renewal (ACME)</br>
• Lead WAF design, deployment, and tuning across enterprise apps
• Partner with Security Operations to ensure telemetry and detections across DNS, certificates, and WAF

Skills

DNS security

PKI management

WAF engineering

Security automation

IaC Terraform

Python scripting

SIEM integration

Education

Bachelor's degree in Cybersecurity

Bachelor's degree in Computer Science

Bachelor's degree in Information Systems

Tools

Terraform

WAF platforms

Job description

Dentsply Sirona is seeking a Senior Security Engineer for PKI and Network Edge to own DNS, certificate lifecycle, and WAF security across enterprise services. You will design and govern security controls, reduce attack surface, and ensure resilient, trusted edge defenses while partnering with Infrastructure, Cloud, and Product Security teams.

Reporting to Security Architecture and Engineering, this senior IC will lead complex initiatives end-to-end and provide high-quality telemetry for Security