Principal Security Engineer: Hands-on Hybrid Cloud Security

Energy Jobline ZR; Dallas (TX); On-site; USD 140,000 - 180,000; Full time

Benefits offered by this job

Medical coverage (100% for employees)

PTO 15 days

Personal days 5

401k matching

Job summary

Topaz Labs is seeking a Principal Security Engineer to own security across our hybrid infrastructure, from AWS to colo data centers and from training clusters to the office network. You will be hands-on, shaping security posture while enabling creative workflows.

You will perform penetration testing, secure the AI model supply chain, and manage endpoint security for macOS devices using Jamf, alongside AD governance. This role is onsite in Dallas.

Qualifications

• 7+ years of security engineering experience across infrastructure, IT, and offensive security.
• Deep hands-on cloud security and compliance experience (AWS, IAM, VPC, SOC II).
• Experience with endpoint management and governance tools (Jamf, AD).
• Physical and network security experience in office/colo environments.
• Hands-on penetration testing of networks and web apps.Competent scripting (Python/Bash) for automation.

Responsibilities

• Own security across hybrid infrastructure (AWS & Colo) and data centers.
• Manage corporate endpoints and devices (macOS) with Jamf; oversee AD governance.
• Conduct regular hands-on penetration tests on internal networks, office infrastructure, and AI apps.
• Design systems to secure the AI supply chain: weights, storage, delivery, tamper-proofing.
• Collaborate with teams to balance security with creative workflows.

Skills

Cloud security

Endpoint management

Penetration testing

Python scripting

Bash scripting

Linux internals

Networking

IAM management

Active Directory

Tools

Jamf

Active Directory

Job description

Topaz Labs is seeking a Principal Security Engineer to own security across our hybrid infrastructure, from AWS to colo data centers and from training clusters to the office network. You will be hands-on, shaping security posture while enabling creative workflows.

You will perform penetration testing, secure the AI model supply chain, and manage endpoint security for macOS devices using Jamf, alongside AD governance. This role is onsite in Dallas.