Identity & Device Mgmt Security Architect (Zero Trust)

Latitude; Pittsburgh, Palo Alto (Allegheny County, CA); On-site; USD 160,000 - 240,000; Full time

Benefits offered by this job

Health insurance

401(k) retirement plan

Parental leave

Paid medical leave

Unlimited vacation

Wellness stipend

Equity compensation

Job summary

Latitude AI is hiring for a security-focused engineer to help safeguard Ford’s autonomous driving program. You will design and deploy identity management, network security, and data center security solutions in a highly collaborative environment across cloud and on-prem platforms.

The role emphasizes hands-on implementation, threat modeling, IaC, and cross-functional teamwork with IT, Cloud, and Product teams.

Qualifications

• Bachelor's degree in Computer Engineering, Computer Science, Cyber Security or a related field and 4+ years of relevant experience
• Strongly prefer 8+ years related experience or 6 years with a Master’s degree; as an Identity and Device Management Engineer and/or Network Security Architect/Engineer
• 2+ years of related experience in vulnerability management and adjusting the risk rating/severity dependent on internal factors for cloud and other infra
• Experience with Lustre, Kerberos, and Linux Administration
• Proficiency in scripting languages, including Bash, Python, Go, or Java to create production level services and automation tools that incorporate into CI/CD
• Proficiency and hands‑on experience using Infrastructure as Code (IaC) to automate the creation of cloud resources, virtualized systems, and review infrastructure deployments
• Ability to grasp new technologies quickly and prioritize and multitask on multiple responsibilities
• Hands‑on Experience with patching and hardening Linux, MacOS, and Windows Systems (clients and servers), images, and containers
• Proficient in Network Protocols and Firewall Management, with hands‑on experience in configuration and optimization to ensure network security internally and at perimeters
• Critical thinking and a holistic view of Cyber Security with ability to balance security requirements with mission needs and collaboration across teams
• Exceptional organizational and time management skills demonstrated through adept autonomy, independent work, collaborative teamwork, and a professional demeanor
• Strong experience with architecting/deploying scalable security services and workloads in cloud native and virtualized environments
• Ability to deploy Device Management solutions to control access to Company Solutions
• Understand engineering design limitations and provide guidance for teams to secure their deployments to achieve desired performance in budget and on time
• An Independent take‑charge attitude while being open‑minded, creatively thinking, willing to take calculated risks, and make informed decisions
• Strong understanding of Cyber Security Standards (ISO27001, NIST 800‑53)
• Experience with Jenkins a plus
• Experience with Zero Trust Architecture (ZTA) principles and implementations
• Exposure to data governance, secure data movement, and storage lifecycle management
• Must have demonstrated proficiency and strength in verbal, written, presentation, and communications skills, including technical diagramming
• A sense of comradery, compassion, and unparalleled passion/energy

Responsibilities

• Identity Management and Device Management design, implementation, and deployment (Entra/Okta, MDM solutions like Intune)
• Network Security design and engineering, applying best practices in software, network, and infrastructure engineering
• Consult and advocate security best practices for DMZ architectures, NAC/NAP, lateral isolation, and multi-site data movement in Network management tooling (like Palo Alto, Fortinet, F5)
• Deliver projects on time, on budget, with excellent quality and security configurations
• Review the existing and new deployments and architecture designs looking for design flaws, security improvements, and advocate for stronger security controls that meet functional and operational needs
• Work hand-in‑hand with the Cloud Platform, IT, and Product teams to research, design and develop security solutions and deployments and strategies tailored to Latitude’s business needs
• Engage actively in Data Center and Network Security initiatives to assess existing security access controls, and implementations of supplemental technical solutions to improve overall security.
• Document findings, conduct comparisons, perform threat and risk assessments, and Proof of Concepts aiding the team in making informed decisions about the impact of various design options
• Develop, Review, and Design the automation and orchestration for security aspects device controls and access to services
• Provide inputs into dashboards and report metrics on the status of the Cyber Security posture
• Plan for, execute, and follow through on projects and engagements independently
• Hands on deployment of solutions, working independently and as part of a team
• Provide mentoring and skill set knowledge transfer to team members and engineering staff
• Moderate and contribute to Supercomputing System Administration that contributes to: Proactive monitoring, analysis, and correcting system security issues; Development of scripts to automate, perform security checks, and develop tools to enhance support of the Cloud/Virtualized systems and development environments
• Developing playbooks/runbooks, operational and troubleshooting documentation
• Evaluate and contribute to designs for Network and Infrastructure Solutions with Security and Functionality as pillars of implementation

Skills

Identity Management

Network Security

Python scripting

Cloud Security

Infrastructure as Code

Threat Modeling

Linux Administration

Education

Bachelor's degree in Computer Engineering/CS/Cyber Security

Tools

Jenkins

Palo Alto

Fortinet

F5

Job description

Latitude AI is hiring for a security-focused engineer to help safeguard Ford’s autonomous driving program. You will design and deploy identity management, network security, and data center security solutions in a highly collaborative environment across cloud and on-prem platforms.

The role emphasizes hands-on implementation, threat modeling, IaC, and cross-functional teamwork with IT, Cloud, and Product teams.