Linux Security Engineering Manager (Hands-On)

Referment; New York (NY); Presencial; USD 180 000 - 260 000; Tempo integral

Resumo da oferta

Referment is seeking a high-caliber Engineering Manager to own Linux platform security for a complex, high-performance environment. You will lead a technically skilled team, set a security roadmap and deliver controls that work in production.

You will address challenging issues like AI agent isolation, privileged access redesign and workload identity modernization, while staying close to engineering to turn security ideas into practical solutions.

Qualificações

• Extensive experience securing Linux/Unix environments in production.
• Strong knowledge of authentication, authorization, certificates and cryptographic primitives.
• Experience leading security initiatives through ambiguity to production.
• Ability to build tooling in Python and shell for automation.

Responsabilidades

• Lead the engineering team responsible for Linux and platform security.
• Define the technical roadmap by identifying high-risk paths and weaknesses.
• Design, build and deploy security improvements across a large Linux estate.
• Stay hands-on in engineering, prototyping and problem-solving.
• Collaborate with infra teams to strengthen authentication and privileged workflows.
• Improve service-to-service identity and access controls across the stack.
• Isolate AI agents and untrusted workloads with practical sandboxing approaches.
• Evaluate new Linux security capabilities and translate them into production controls.
• Communicate trade-offs and secure buy-in for changes.

Conhecimentos

Linux security

Security leadership

Authentication & PKI

Python tooling

Production security

Formação académica

Bachelor's degree in CS/Engineering

Ferramentas

SELinux

AppArmor

Kerberos

TLS/SSL

OpenSSL

Python

Descrição da oferta de emprego

Referment is seeking a high-caliber Engineering Manager to own Linux platform security for a complex, high-performance environment. You will lead a technically skilled team, set a security roadmap and deliver controls that work in production.

You will address challenging issues like AI agent isolation, privileged access redesign and workload identity modernization, while staying close to engineering to turn security ideas into practical solutions.