Security Engineer: Network & Identity, Zero Trust

Sungrow; Houston (TX); Hybrid; USD 140,000 - 180,000; Full time

Benefits offered by this job

Health, dental, vision benefits

401(k) retirement plans

Paid time off

Job summary

Sungrow USA is hiring a Security Engineer – Network & Identity to design and own our network security, PKI, and identity infrastructure across on‑prem, cloud, and SaaS. You will focus on Zero Trust, machine identities, and secure access controls, not incident response.

The role requires hands‑on expertise with Entra ID, MFA, and PKI platforms, plus automation to improve security posture across Azure, AWS, and hybrid environments.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or equivalent.
• 5+ years of security engineering, IAM, network security, or cloud security.
• Hands-on with Microsoft Entra ID including CA, MFA, SSO, and Conditional Access.
• Experience with Fortinet and Zscaler in Zero Trust architectures.
• Experience designing and operating enterprise PKI and certificate lifecycle management.

Responsibilities

• Design, implement, and maintain enterprise network security architectures.
• Own PKI, cryptography, and certificate lifecycle management across Azure/AWS/hybrid.
• Implement and enforce identity security controls, MFA, and conditional access.
• Develop automation for identity provisioning, certificate management, and security validation.
• Support network access control, SSO integrations, and least-privilege access models.

Skills

Network security

IAM / Identity

PKI / certificate mgmt

Zero Trust

Fortinet

Zscaler

Microsoft Entra ID

MFA / Passwordless

TLS/mTLS

Automation / IaC

Education

Bachelor's degree in CS/IT/Engineering

Security certifications (SC-300, AZ-500, CISSP, CISM)

Tools

Fortinet

Zscaler

Microsoft Entra ID

Keyfactor / PKI tools

DigiCert / PKI platforms

Job description

Sungrow USA is hiring a Security Engineer – Network & Identity to design and own our network security, PKI, and identity infrastructure across on‑prem, cloud, and SaaS. You will focus on Zero Trust, machine identities, and secure access controls, not incident response.

The role requires hands‑on expertise with Entra ID, MFA, and PKI platforms, plus automation to improve security posture across Azure, AWS, and hybrid environments.