engineer

Senior IAM and System Security Engineer full_time

Reporting to the Director of Information Security, the seasoned Senior Security Engineer will lead design and development work for our growing Okta OIE implementation, and will have broad responsibility to develop and implement solutions to ensure system security across the enterprise. The Okta work will have a strong focus on automation and building workflows. They will have a knack for navigating the complexities of cybersecurity, be passionate about safeguarding digital assets, mitigating risks, and staying ahead of emerging threats. Being an effective liaison with our business partners is key to success.

Tustin, CA (onsite 3+ days per week)

Responsibilities

  • Okta Identity and Access Management (IAM): Serve as a subject matter expert in Okta IAM solutions, designing, implementing, and maintaining robust access controls, authentication mechanisms, and identity management strategies.
  • Endpoint Security: Take the lead in fortifying our endpoints against potential breaches and vulnerabilities. Develop and deploy cutting-edge endpoint security solutions to protect our systems and data from malicious activities. Extract full functionality from our patching and vulnerability management tools, as well as EDR.
  • System Security: Implement and oversee comprehensive system security protocols and measures. Work closely with cross-functional teams to identify security gaps, assess risks, and develop strategies to enhance the overall security posture of our infrastructure.
  • Threat and Vulnerability Management: Maintain a high awareness of the latest cyber threats and attack techniques, and recommend improvements to our systems to counter them. Be able to prioritize vulnerabilities based on business impact and work with system owners to coordinate timely remediations, or identify adequate risk mitigations.
  • Incident Response and Management: Act as a key player in our incident response efforts, providing swift and effective responses to security incidents, breaches, and threats. Conduct thorough investigations, root cause analyses, and post-incident reviews to continuously improve our incident response capabilities.

 

What You Bring

  • Extensive Experience: Background in general IT, with 6+ years of hands-on experience in cybersecurity engineering with a focus on Okta IAM and endpoint and system security.
  • Technical Proficiency: Strong proficiency in implementing and managing Okta IAM solutions, with experience in SSO, MFA, access governance, account provisioning, and role-based access control (RBAC). Solid expertise in endpoint security technologies and system hardening techniques. Strong knowledge of how Windows works in a managed network environment (AD, GPOs, WSUS, etc.), interdependencies of enterprise applications (SaaS and on-prem) and how to secure them, and security testing tools. Linux knowledge is a plus.
  • Cloud: Experience working in a multi-cloud environment, with knowledge of Azure and Purview tools.
  • Analytical Skills: Exceptional analytical and problem-solving skills, with the ability to assess complex security issues, analyze data, and develop effective solutions.
  • Communication Skills: Excellent communication and collaboration skills, with the ability to convey technical concepts to both technical and non-technical stakeholders. Very solid writing skills, e.g. for technical documentation.
  • Coding Skills: Experience with programming or scripting is a plus, e.g. Python or PowerShell.
  • Continuous Learner: Demonstrated commitment to staying current with the latest trends, technologies, and best practices in cybersecurity.
  • Work Culture: Ability to work self-directed in a very fast-paced engineering-focused company. Must be proactive about seeking out things that need to be fixed and driving them to closure.

 

Preferences

  • Degree: Bachelor’s degree or higher is preferred but can be substituted with the right work experience.
  • Certifications: Preferred certifications include CISSP, CISM, CEH, or other relevant cybersecurity certifications. Okta certification is desired.

The annual U.S. base salary range for this full-time position is $96,800.00–$147,650.00. The base pay actually offered will vary depending on job-related knowledge, skills, location, and experience and take into account internal equity. Other forms of pay (e.g., bonus or long term incentive) may be provided as part of the compensation package, in addition to a full range of medical, financial, and other benefits, dependent on the position offered. For more information regarding Virgin Galactic benefits, please visit https://vgcareers.virgingalactic.com/global/en/benefits

Who We Are

Virgin Galactic is transforming humanity’s relationship with space. By making it more open and accessible, we are connecting the world to the love, wonder and awe inspired by space travel, helping to create new opportunities for the benefit of life on Earth. Whether it’s supporting cutting-edge research missions for scientists and students, or offering life-changing experiences for the adventurers among us, Virgin Galactic is THE spaceline for Earth. Such an audacious vision requires a team as driven as they are curious – one capable of redefining the boundaries of what’s possible. 

Export Requirements 
To conform to U.S. Government export regulations, applicant must be a U.S. Person (either a U.S. citizen, a lawful permanent resident or a protected individual as defined 8 U.S.C. 1324b(a)(3) or be able to obtain the required authorization from either the U.S. Department of State or the U.S. Department of Commerce. The applicant must also not be included in the list of Specifically Designated Nationals and Blocked Persons maintained by the Office of Foreign Assets Control. See list here.

EEO Statement
Virgin Galactic is an Equal Opportunity Employer; employment with Virgin Galactic is governed on the basis of merit, competence and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, marital status, mental or physical disability or any other legally protected status. 

DRUG FREE WORKPLACE
Virgin Galactic is committed to a Drug Free Workplace.  All applicants post offer and active teammates are subject to testing for marijuana, cocaine, opioids, amphetamines, PCP, and alcohol when criteria is met as outlined in our policies. This can include pre-employment, random, reasonable suspicion, and accident related drug and alcohol testing. 

Job Overview