Senior Cyber Security Engineer - Identity and Device Management, & Networking Security

Latitude AI (lat.ai) is building the future of Ford’s autonomy roadmap to make travel safer, less stressful, and more enjoyable for everyone. Bringing this vision to scale, our fully in-house developed hands-free ADAS platform will debut on the all-new Ford Fathom in 2027. When you join the Latitude team, you’ll work alongside leading experts across machine learning and robotics, cloud platforms, mapping, sensors and compute systems, test operations, systems and safety engineering – all dedicated to redefining the relationship between people and their vehicles for millions of customers.As a Ford Motor Company subsidiary, we operate independently to develop automated driving technology at the speed of a technology startup. Latitude is headquartered in Pittsburgh with engineering centers in Dearborn, Mich., and Palo Alto, Calif.Meet the Team:The Enterprise Cyber Security team is focused on ensuring the resilience of our corporate environment with focus on protection of our corporate systems, IP, and employee data. We are a close-knit team with strong cross-functional roles in the company.As a Cyber Security Engineer, you will be the hands-on technical lead securing our High Performance Computing (HPC)/Virtualization environments. Your job is to have a deep understanding of this infrastructure, network architecture, and the operations depending on it, including our software/hardware/network engineering, fleet operations requirements, and administrative functions. You will use your knowledge and experience to design, implement, automate, and continuously improve our security posture. What you'll do:Identity Management and Device Management design, implementation, and deployment (Entra/Okta, MDM solutions like Intune)Network Security design and engineering, applying best practices in software, network, and infrastructure engineeringConsult and advocate security best practices for DMZ architectures, NAC/NAP, lateral isolation, and multi-site data movement in Network management tooling (like Palo Alto, Fortinet, F5)Deliver projects on time, on budget, with excellent quality and security configurationsReview the existing and new deployments and architecture designs looking for design flaws, security improvements, and advocate for stronger security controls that meet functional and operational needsWork hand-in-hand with the Cloud Platform, IT, and Product teams to research, design and develop security solutions and deployments and strategies tailored to Latitude’s business needsEngage actively in Data Center and Network Security initiatives to assess existing security access controls, and implementations of supplemental technical solutions to improve overall security. Document findings, conduct comparisons, perform threat and risk assessments, and Proof of Concepts aiding the team in making informed decisions about the impact of various design options.Develop, Review, and Design the automation and orchestration for security aspects device controls and access to servicesProvide inputs into dashboards and report metrics on the status of the Cyber Security posturePlan for, execute, and follow through on projects and engagements independentlyHands on deployment of solutions, working independently and as part of a teamProvide mentoring and skill set knowledge transfer to team members and engineering staffModerate and contribute to Supercomputing System Administration that contributes to:Proactive monitoring, analysis, and correcting system security issuesDevelopment of scripts to automate, perform security checks, and develop tools to enhance support of the Cloud/Virtualized systems and development environmentsDeveloping playbooks/runbooks, operational and troubleshooting documentationEvaluate and contribute to designs for Network and Infrastructure Solutions with Security and Functionality as pillars of implementationWhat you'll need to succeed:At a minimum, a Bachelor's degree in Computer Engineering, Computer Science, Cyber Security or a related field and 4+ years of relevant experience (or Master's degree and 2+ years of relevant experience)Strongly prefer 8+ years related experience or 6 years with a Master’s degree; as an Identity and Device Management Engineer and/or Network Security Architect/Engineer. Actively deploying solutions from scratch to Production2+ years of related experience in vulnerability management and adjusting the risk rating/severity dependent on internal factors for cloud and other infra.Experience with Lustre, Kerberos, and Linux AdministrationProficiency in scripting languages, including Bash, Python, Go, or Java to create production level services and automation tools that incorporate into CI/CDProficiency and hands-on experience using Infrastructure as Code (IaC) to automate the creation of cloud resources, virtualized systems, and review infrastructure deployments. E.g. Terraform, Cloud Formation, Ansible, or othersAbility to grasp new technologies quickly and prioritize and multitask on multiple responsibilities.Hands-on Experience with patching and hardening Linux, MacOS, and Windows Systems (clients and servers), images, and containers. Proficient in Network Protocols and Firewall Management, with hands-on experience in configuration and optimization to ensure network security internally and at perimeters.Critical thinking and a holistic view of Cyber Security with ability to balance security requirements with mission needs and collaboration across teamsExceptional organizational and time management skills demonstrated through adept autonomy, independent work, collaborative teamwork, and a professional demeanor.Strong experience with architecting/deploying scalable security services and workloads in cloud native and virtualized environmentsAbility to deploy Device Management solutions to control access to Company SolutionsUnderstand engineering design limitations and provide guidance for teams to secure their deployments to achieve desired performance in budget and on timeAn Independent take-charge attitude while being open-minded, creatively thinking, willing to take calculated risks, and make informed decisionsStrong understanding of Cyber Security Standards (ISO27001, NIST 800-53)Experience with Jenkins a plusExperience with Zero Trust Architecture (ZTA) principles and implementationsExposure to data governance, secure data movement, and storage lifecycle managementMust have demonstrated proficiency and strength in verbal, written, presentation, and communications skills, including technical diagrammingA sense of comradery, compassion, and unparalleled passion/energyWhat we offer you:Competitive compensation packagesHigh-quality individual and family medical, dental, and vision insuranceHealth savings account with available employer matchEmployer-matched 401(k) retirement plan with immediate vestingEmployer-paid group term life insurance and the option to elect voluntary life insurancePaid parental leave and Adoption/Surrogacy support programPaid medical leaveUnlimited vacation and 15 paid holidaysDaily lunches, snacks, and beverages available in all office locationsPre-tax spending accounts for healthcare and dependent care expensesPre-tax commuter benefitsMonthly wellness stipendBackup child and elder care programProfessional development reimbursementEmployee assistance programDiscounted programs that include legal services, identity theft protection, pet insurance, and moreCompany and team bonding outlets: employee resource groups, quarterly team activity stipend, and wellness initiativesLearn more about Latitude’s team, mission and career opportunities at lat.ai!The expected base salary range for this full-time position in California is $160,000 - $240,000 USD. Actual starting pay will be based on job-related factors, including exact work location, experience, relevant training and education, and skill level. Latitude employees are also eligible to participate in Latitude’s annual bonus programs, equity compensation, and generous Company benefits program, subject to eligibility requirements.Candidates for positions with Latitude AI must be legally authorized to work in the United States on a permanent basis. Verification of employment eligibility will be required at the time of hire.We are an Equal Opportunity Employer committed to a culturally diverse workforce. All qualified applicants will receive consideration for employment without regard to race, religion, color, age, sex, national origin, sexual orientation, gender identity, disability status or protected veteran status.