Staff Security Engineer

Job description

**Employer:** Aledade PBC **Job Title:** Staff Security Engineer **Job Location/Place of Employment Address:** 4550 Montgomery Ave, Suite 1050N, Bethesda, MD 20814 ### Job Duties/Description: The Staff Security Engineer will be responsible for designing, implementing, and maintaining security services that support Aledade’s business. Understand data and automation are important ingredients to the company’s mission and actively employ these ingredients at scale. Partner cross-functionally across various teams to shape security services strategy and execution, driving impactful outcomes and further securing the digital landscape. Lead the development, implementation, and ongoing maintenance of comprehensive security strategies and solutions. Design and deploy advanced security controls to safeguards networks, systems, and applications. Mentor and galvanize new engineers. Set and uphold the standard for security processes to support high-quality engineering. This is a remote work position. ### Minimum Requirements: Must have a Bachelor’s degree or foreign degree equivalent in Computer Science, Engineering, Information Technology, Cybersecurity, or a related field and eight (8) years of experience in software or security engineering within Cloud Native environments. The position also requires demonstrated knowledge and experience with the following: leading architectural design for hybrid-cloud ingress and egress inspection pipelines, ensuring non-routable private connectivity and minimizing public IP exposure; deploying, configuring, and tuning Deep Packet Inspection (DPI), SSL/TLS inspection at scale, and threat Detection and Prevention across Zscaler and AWS native appliances; establishing threat defense using Web Application Firewall (WAF) via Cloudflare and AWS WAF to secure edge endpoints; integrating Cloud Access Security Broker (CASB) capabilities and Data Loss Prevention (DLP) engines across Zscaler and Cloudflare to prevent data exfiltration; automating cloud network infrastructure and security policy enforcement using Terraform, Pulumi, or AWS CloudFormation; managing network configuration drifted detection and automated remediation workflows using CI/CD pipelines; and operationalize network observability by orchestrating flow log ingestion (AWS VPC Flow Logs, Zscaler NSS, Cloudflare Logpush) into SIEM platforms (e.g., Crowdstrike, Sumologic, Wiz) for real-time threat hunting. This is a remote work position.