Security Engineer

Planet Pharma; Alameda (CA); On-site; USD 106,075 - 119,851; Full time

Job summary

Planet Pharma is seeking a Security Engineer to strengthen our Zero Trust posture across corporate systems, cloud environments, and infrastructure. You will focus on service account management using Silverfort, integration with Active Directory and Microsoft Entra ID, and administration of Zscaler assets in AWS.

The role supports AI-related and other security projects, with opportunity to contribute to runbooks and disaster recovery exercises.

Qualifications

• Hands-on experience with service account lifecycle management or identity security use cases.
• Strong knowledge of AD, Microsoft Entra ID, and enterprise IAM concepts.
• Experience supporting Zscaler, App Connectors, including patching and troubleshooting.
• Experience writing and maintaining technical runbooks and procedures.
• Ability to support disaster recovery testing and cross-functional security projects.
• Strong documentation, communication, and problem-solving skills.

Responsibilities

• Manage and support service accounts and non-human identities using Silverfort, including discovery, policy implementation, monitoring, access reviews, and lifecycle governance.
• Assist integration and operational support across Active Directory, Microsoft Entra ID, and other identity platforms to strengthen visibility and access governance.
• Contribute to AI-related and enterprise security projects focusing on identity, authentication, and access control.
• Maintain Zscaler App Connectors, including monitoring, patching, upgrades, and maintenance.
• Develop and maintain runbooks, SOPs, and documentation for identity and Zscaler operations.
• Plan and support disaster recovery drills for Zscaler aligned with business continuity requirements.
• Collaborate with security, infrastructure, cloud, and application teams to implement changes and improve resilience.
• Provide troubleshooting support and recommendations for service account security and identity integrations.

Skills

Service account lifecycle management

Identity security

Security operations

Documentation

Education

BS/BA in Cybersecurity or related

Tools

Silverfort

Zscaler App Connectors

Active Directory

Microsoft Entra ID

Job description

Target PR Range: 77-87/hr DOE

Summary / Job Purpose

The Security Engineer will support the Zero Trust Engineering team strengthening the security posture of corporate systems, cloud environments, and infrastructure. This role will support identity security and secure access operations across enterprise platforms. This role will focus on service account management using Silverfort, integration with Active Directory, Microsoft Entra ID, and other identity platforms, operational support for AI-related and other security projects, and ongoing administration of Zscaler assets in AWS.

Essential Duties and Responsibilities

• Manage and support service accounts and other non-human identities using Silverfort, including discovery, policy implementation, monitoring, access reviews, and lifecycle governance.
• Assist with integration and operational support across Active Directory, Microsoft Entra ID, and other enterprise identity platforms to strengthen identity visibility, authentication controls, and access governance.
• Contribute to AI-related and other enterprise security projects, particularly where identity, authentication, access control, or service account usage is involved.
• Maintain and administer Zscaler App Connectors, including health monitoring, troubleshooting, patching, version upgrades, and operational maintenance.
• Develop, update, and maintain runbooks, standard operating procedures, and technical documentation for identity and Zscaler-related operations.
• Plan, document, and support disaster recovery drills involving Zscaler, ensuring procedures are tested, repeatable, and aligned with business continuity requirements.
• Work closely with security, infrastructure, cloud, and application teams to implement changes, resolve issues, and improve operational resilience.
• Provide troubleshooting support, issue analysis, and recommendations for service account security, identity integrations, and Zscaler-related incidents.

Education / Experience / Knowledge & Skills

Education

BS/BA degree in Cybersecurity, Computer Science, Information Technology, or related discipline; or equivalent combination of education, training, and hands‑on experience.

Experience

• Hands‑on experience for service account life cycle management or identity security use cases.
• Strong knowledge of Active Directory, Microsoft Entra ID, and enterprise identity and access management concepts.
• Experience supporting Zscaler, especially App Connectors, including patching, upgrades, and operational troubleshooting.
• Experience writing and maintaining technical runbooks and operational procedures.
• Ability to support disaster recovery testing, system maintenance, and cross‑functional security projects.
• Strong documentation, communication, and problem‑solving skills.
• Familiarity with security tools or cloud platforms is advantageous but not required.
• Experience in a regulated or compliance‑driven environment is a plus.
• Experience in AI/ML systems.

Knowledge / Skills

• Foundational knowledge of networking (TCP/IP, DNS, routing), operating systems (Windows, Linux), and security fundamentals.
• Identity troubleshooting and root cause analysis.
• Basic understanding of threat vectors, attacker techniques, and defensive countermeasures.
• Ability to analyze logs and troubleshoot basic security or system issues.
• Familiarity with scripting (Python, PowerShell) is a plus.
• Strong written and verbal communication skills, with the ability to articulate technical topics clearly.
• Strong customer service orientation and ability to work collaboratively with technical and non‑technical staff.
• Ability to prioritize tasks, follow procedures, and adapt to changing priorities.
• Demonstrated curiosity, eagerness to learn, and willingness to take on new challenges.

Working Conditions

Primarily working indoors in office scenarios. Occasional after‑hours support may be required for critical issues.