About role

Roku is seeking a senior-level Identity Engineer to enhance its Zero-Trust architecture, drive standardization initiatives, and optimize its Microsoft-centric identity platform for a geographically distributed workforce. The ideal candidate has hands-on experience in identity and access management (IAM) and securing cloud environments within the Microsoft ecosystem, with deep expertise in Azure Entra ID. Equally important is a strong automation mindset—designing, scripting, and building repeatable workflows. The role also requires the ability to communicate complex technical concepts clearly to both technical and non-technical audiences. 

For New York Only - The estimated annual salary for this position is between $158,000 - $279,000 annually.  Compensation packages are based on factors unique to each candidate, including but not limited to skill set, certifications, and specific geographical location. This role is eligible for health insurance, equity awards, life insurance, disability benefits, parental leave, wellness benefits, and paid time off.

What you'll be doing

• Lead enterprise-wide IAM standardization, including identity lifecycle, access governance, and policy enforcement across global regions.
• Drive automation across IAM to streamline administration and deliver a smoother user experience.
• Support enterprise applications onboarding into Azure Entra ID, including SSO, Conditional Access, and role-based access control (RBAC).
• Enhance privileged access management and implement scalable monitoring, alerting, and auditability solutions to support a secure, geographically distributed workforce.
• Collaborate with IT, Networking, and Security teams to troubleshoot identity-related issues and support global infrastructure initiatives.
• Advance Zero Trust Identity Fabric principles like continuous verification, least-privilege access, and identity-aware policy enforcement across users, devices, workloads, and non-human identities.
• Build identity automation with a DevOps mindset, writing scripts, developing pipelines, and engineering tooling from scratch rather than just configuring them.

We're excited if you have

• 8+ years of hands-on experience with identity and access management and automating cloud technologies, particularly within the Microsoft ecosystem.
• Strong analytical skills and attention to detail, with the ability to troubleshoot complex infrastructure and identity-related issues.
• Excellent communication skills, with the ability to clearly explain technical concepts to both technical and non-technical stakeholders.
• Deep experience with Microsoft Entra ID, including Conditional Access, Identity Governance, and Privileged Identity Management.
• Familiarity with Microsoft 365 services: Exchange Online, Defender, Purview, Sentinel, Intune, and related platforms.
• Automation and scripting skills using PowerShell, Azure CLI, and Microsoft Graph API; working knowledge of Azure services such as Function Apps and Logic Apps.
• Experience in onboarding and managing enterprise applications in Azure Entra ID.
• Advanced knowledge of Azure Single Sign-On (SSO) login methods, including OAuth2, OpenID Connect, and SAML, and their integration with enterprise applications.
• Knowledge of privileged access tools (Azure PIM, CyberArk, etc), secrets management (HashiCorp or Azure Key Vault), and workload identity patterns SPIFEE & SPIRE.
• Familiarity with NHI governance concepts for service accounts and AI agents, and exposure to OPA / Rego or similar policy-as-code frameworks.
• Good to have familiarity with Microsoft Purview for DLP and data classification.
• Strong understanding of multi-factor authentication and FIDO2.
• Familiarity with IT security frameworks and compliance standards.
• Knowledge of logging, monitoring, and alerting practices for identity and access events.
• Basic understanding of email security and DNS.
• Experience with backup and recovery strategies for identity-related services.
• Understanding of Zero Trust Architecture principles.
• Familiarity with Jira and Confluence.
• B.S. in Computer Science, Information Technology, Engineering, or equivalent experience. 

#LI-SR2

About role

Roku is seeking a senior-level Identity Engineer to enhance its Zero-Trust architecture, drive standardization initiatives, and optimize its Microsoft-centric identity platform for a geographically distributed workforce. The ideal candidate has hands-on experience in identity and access management (IAM) and securing cloud environments within the Microsoft ecosystem, with deep expertise in Azure Entra ID. Equally important is a strong automation mindset—designing, scripting, and building repeatable workflows. The role also requires the ability to communicate complex technical concepts clearly to both technical and non-technical audiences. 

For Massachusetts Only - The estimated annual salary for this position is between $158,000 - $279,000 annually.  Compensation packages are based on factors unique to each candidate, including but not limited to skill set, certifications, and specific geographical location. This role is eligible for health insurance, equity awards, life insurance, disability benefits, parental leave, wellness benefits, and paid time off.

What you'll be doing

• Lead enterprise-wide IAM standardization, including identity lifecycle, access governance, and policy enforcement across global regions.
• Drive automation across IAM to streamline administration and deliver a smoother user experience.
• Support enterprise applications onboarding into Azure Entra ID, including SSO, Conditional Access, and role-based access control (RBAC).
• Enhance privileged access management and implement scalable monitoring, alerting, and auditability solutions to support a secure, geographically distributed workforce.
• Collaborate with IT, Networking, and Security teams to troubleshoot identity-related issues and support global infrastructure initiatives.
• Advance Zero Trust Identity Fabric principles like continuous verification, least-privilege access, and identity-aware policy enforcement across users, devices, workloads, and non-human identities.
• Build identity automation with a DevOps mindset, writing scripts, developing pipelines, and engineering tooling from scratch rather than just configuring them.

We're excited if you have

• 8+ years of hands-on experience with identity and access management and automating cloud technologies, particularly within the Microsoft ecosystem.
• Strong analytical skills and attention to detail, with the ability to troubleshoot complex infrastructure and identity-related issues.
• Excellent communication skills, with the ability to clearly explain technical concepts to both technical and non-technical stakeholders.
• Deep experience with Microsoft Entra ID, including Conditional Access, Identity Governance, and Privileged Identity Management.
• Familiarity with Microsoft 365 services: Exchange Online, Defender, Purview, Sentinel, Intune, and related platforms.
• Automation and scripting skills using PowerShell, Azure CLI, and Microsoft Graph API; working knowledge of Azure services such as Function Apps and Logic Apps.
• Experience in onboarding and managing enterprise applications in Azure Entra ID.
• Advanced knowledge of Azure Single Sign-On (SSO) login methods, including OAuth2, OpenID Connect, and SAML, and their integration with enterprise applications.
• Knowledge of privileged access tools (Azure PIM, CyberArk, etc), secrets management (HashiCorp or Azure Key Vault), and workload identity patterns SPIFEE & SPIRE.
• Familiarity with NHI governance concepts for service accounts and AI agents, and exposure to OPA / Rego or similar policy-as-code frameworks.
• Good to have familiarity with Microsoft Purview for DLP and data classification.
• Strong understanding of multi-factor authentication and FIDO2.
• Familiarity with IT security frameworks and compliance standards.
• Knowledge of logging, monitoring, and alerting practices for identity and access events.
• Basic understanding of email security and DNS.
• Experience with backup and recovery strategies for identity-related services.
• Understanding of Zero Trust Architecture principles.
• Familiarity with Jira and Confluence.
• B.S. in Computer Science, Information Technology, Engineering, or equivalent experience. 

#LI-SR2

About SimpliSafe

We’re a high-tech home security company passionate about protecting the life you’ve built and our mission to keep Every Home Secure. And we’ve created a culture here that cares just as deeply about the career you’re building. Ours is a no-ego culture of collaboration and innovation where those seeking their next challenge can find big opportunities and make a huge impact on the lives of all those whom we protect. We don’t just want you to work here. We want you to grow and thrive here.

Why are we hiring?

We are a rapidly growing and successful company seeking smart, talented, and humble individuals who share our values. Join us in our mission to disrupt the home security space and relentlessly pursue our goal to keep Every Home Secure.

What You’ll Do

At SimpliSafe, corporate IT is part of the Information Security and Technology (IS&T) team, led by our Chief Information Security Officer (CISO). IT does more than fix laptops—we empower every team member to do their best work and make sure SimpliSafers feel supported, connected, and confident in their technology.

We’re looking for a Staff IAM Engineer to join our IT team in Boston, Massachusetts. In this role, you’ll report to our Manager, IS&T, and:

• Own and evolve SimpliSafe’s Okta environment and identity strategy, serving as the go-to expert on all things IAM.
• Partner with Security, Engineering, and HR to build scalable access governance and lifecycle automation.
• Define IAM standards and architecture that grow with the company and keep us secure and compliant.

We’re a hybrid team — you’ll come into our Boston office two days a week, with flexibility to work the rest of the time remotely. 

Primary responsibilities include:

• Defining and driving SimpliSafe’s IAM strategy across the enterprise, including identity governance, access management, and zero trust principles.
• Serving as the internal subject matter expert on all things identity — Okta, SSO, MFA, lifecycle management, and directory services.
• Developing a roadmap for IAM maturity, identifying gaps, prioritizing investments, and aligning with security and compliance objectives.
• Owning the design, configuration, and optimization of our Okta environment, including SSO integrations, MFA policies, adaptive authentication, and lifecycle automation.
• Building and maintaining Okta Workflows to automate provisioning, deprovisioning, and access reviews across SaaS, cloud, and on-prem systems.
• Designing and enforcing RBAC and least-privilege principles across our application and infrastructure landscape.
• Leading access certification and review programs, working with IT, Security, and HR to ensure accurate and timely access decisions.
• Owning integrations between identity systems and HR platforms to support joiner/mover/leaver processes.
• Supporting audit and compliance activities (e.g., SOC 2, ISO 27001) by maintaining robust IAM controls and evidence.
• Mentoring junior IT and security team members on identity best practices.

What You’ll Bring

• 8+ years of experience in identity and access management, with deep hands-on expertise in Okta (Okta Certified Professional or Administrator certification strongly preferred).
• Proven experience architecting and managing enterprise IAM programs, not just operating tooling.
• Strong technical skills across SSO (SAML, OIDC/OAuth), MFA, directory services (Active Directory, LDAP), and SCIM-based provisioning.
• Experience with lifecycle management automation, including HR-to-IT integrations and joiner/mover/leaver workflows.
• Familiarity with PAM solutions (e.g., CyberArk, BeyondTrust, or similar) and privileged access controls.
• Experience supporting security frameworks and audits (SOC 2, ISO 27001, or similar).
• Ability to translate business and security requirements into practical IAM architecture and policy.
• Strong communication skills — able to explain identity concepts to technical and non-technical stakeholders alike.

Preferred Qualifications

• Experience with Okta Privileged Access or Okta Identity Governance (OIG).
• Familiarity with IGA platforms such as SailPoint or Saviynt.
• Experience with AWS IAM and cloud identity patterns (federated roles, workload identity).
• Exposure to zero-trust network access (ZTNA) architectures and their relationship to identity.
• Scripting or automation experience (Python, PowerShell, or similar) for identity lifecycle tasks.
• Background in fast-growing technology or consumer hardware companies.

What Values You’ll Share

• Customer Obsessed - Building deep empathy for our customers, putting them at the core of our work, and developing strong, long-term relationships with them.
• Aim High - Always challenging ourselves and others to raise the bar.
• No Ego - Maintaining a “no job too small” attitude, and an open, inclusive and humble style.
• One Team - Taking a highly collaborative approach to achieving success.
• Lift As We Climb - Investing in developing others and helping others around us succeed.
• Lean & Nimble - Working with agility and efficiency to experiment in an often ambiguous environment.

What We Offer

• A mission- and values-driven culture and a safe, inclusive environment where you can build, grow and thrive  
• A comprehensive total rewards package that supports your wellness and provides security for SimpliSafers and their families (For more information on our total rewards please click here)
• Free SimpliSafe system and professional monitoring for your home. 
• Employee Resource Groups (ERGs) that bring people together, give opportunities to network, mentor and develop, and advocate for change.

The target annual base pay range for this role is $135,900 to $199,300.

This target annual base pay range represents our good-faith estimate of what we expect to pay for this role. We use a market-based compensation approach to set our target annual base pay ranges and make adjustments annually. We carefully tailor individual compensation packages, including base pay, taking into consideration employees’ job-related skills, experience, qualifications, work location, and other relevant business factors. 

Beyond base pay, we offer a Total Rewards package that may include participation in our annual bonus program, equity, and other forms of compensation, in addition to a full range of medical, retirement, and lifestyle benefits. More details can be found here.

We’re committed to fair and equitable pay practices, as well as pay transparency. We regularly review our programs to ensure they remain competitive and aligned with our values.

We wholeheartedly embrace and actively seek applications from all individuals, no matter how they identify. We are committed to cultivating a diverse and inclusive workplace, and we believe our work is enriched when we incorporate a multitude of perspectives, backgrounds, and experiences. We want everyone who works here to thrive and contribute to not only our mission of keeping every home secure, but also to making our workplace safe and supportive for others. If a reasonable accommodation may be needed to fully participate in the job application or interview process, to perform the essential functions of a position, or to receive other benefits and privileges of employment, please contact careers@simplisafe.com.

Role overview

The Principal IT Systems Administrator is the most senior individual contributor on the IT Systems team, setting technical direction for core platforms, endpoints, networks, and security within IT Operations. This role drives reliability, scalability, and automation.

You will lead complex initiatives, serve as a top escalation point, and partner across the business to ensure infrastructure and endpoints enable productivity while meeting security and compliance needs.

What you'll do

• System Configuration & Administration: Design and implement complex configurations for core IT platforms (identity, collaboration, infrastructure, SaaS). Establish configuration management, lead performance/reliability improvements, and automate repetitive tasks.
• Workspace & Endpoint Management: Design enterprise-wide endpoint strategies (macOS, Windows, mobile). Develop and enforce security policies, automate software/OS deployments via MDM/EMM, and own compliance reporting.
• Network & Infrastructure: Design and implement complex network configurations (LAN/WAN/Wi-Fi/VPN/voice) for scalability and security. Maintain monitoring, automate network management, and lead infrastructure projects (e.g., migrations, new site buildouts).
• Security Engineering & Operations: Define and drive security strategies within IT Systems (identity, access, endpoints, networks). Integrate security tools (SSO/MFA, EDR, DLP), enforce access policies, and act as a technical lead during critical security incidents.
• Incident Management & Reliability: Define and implement incident response strategies, lead Post-Incident Reviews (PIRs) to drive corrective action, develop runbooks, and oversee on-call rotations.
• Documentation & Knowledge Management: Define documentation standards (architecture, SOPs, runbooks) and ensure knowledge bases are accurate, comprehensive, and easily discoverable.

What you'll bring

• Extensive experience (typically 8+ years) in IT systems engineering/administration, with significant time in senior/lead roles on enterprise-scale environments.
• Deep expertise in: Core IT systems (identity, collaboration, directory), Endpoint management (MDM/EMM, lifecycle), Network infrastructure (switching, routing, VPN), and Security controls (EDR, SSO/MFA).
• Demonstrated ability to design complex configurations, lead large cross-functional projects, and influence architectural decisions.
• Strong automation mindset and proficiency with scripting/infrastructure-as-code (Python, PowerShell, Terraform).
• Proven track record leading major incidents and PIRs.
• Excellent cross-functional collaboration and communication skills, comfortable engaging all levels.
• Experience in environments with security, regulatory, or audit requirements (SOC 2, SOX).
• A bias toward ownership, documentation, and mentorship.

Nice to have: Experience in a high-growth SaaS or technology company, familiarity with CarGurus tools (Okta, Google Workspace/M365, Jamf, Intune), and experience partnering with Security Engineering and GRC.

We are seeking an experienced and strategic Principal Security Architect to lead the design, implementation, and oversight of enterprise-class network and cloud security across our global infrastructure. This role blends deep technical expertise with strategic leadership and focuses on securing our on-premises data centers, public cloud platforms, and enterprise network edge using best-in-class tools like Palo Alto and Cisco.

This is a hands-on leadership role that influences global security architecture, mentors’ engineers, and collaborates with cross-functional teams to protect our digital assets at scale.

Key Responsibilities

Security Architecture & Engineering

• Lead the design and evolution of security controls across hybrid cloud and on-prem environments.
• Architect and implement network segmentation, next-gen firewall policies, and zero-trust access models.
• Define secure connectivity strategies across WAN, remote access, data centers, and cloud networks.

Technology Ownership

• Serve as SME for Palo Alto Networks firewalls, Prisma Access, and Panorama.
• Lead security configuration, lifecycle management, and policy enforcement on Cisco security platforms (ASA, ISE, Firepower, Umbrella).
• Harden security for multi-cloud platforms (AWS, Azure, GCP) including IAM, VPCs, firewalls, and API security.

Operations & Response

• Lead threat detection and response for network and infrastructure incidents.
• Collaborate with SOC, GRC, and infrastructure teams to close security gaps and maintain compliance.
• Continuously improve security monitoring, alerting, and forensics capabilities.

Security Automation & Tooling

• Integrate security into CI/CD pipelines and infrastructure provisioning via Terraform, Ansible, or Python.
• Automate security posture checks and drift detection in public cloud and data center environments.
• Work with vulnerability management platforms and integrate findings into remediation workflows.

Governance, Risk & Compliance

• Define security baselines and configuration standards for networking and infrastructure teams.
• Ensure compliance with frameworks such as ISO 27001, NIST, CIS, and industry-specific requirements.
• Participate in audits, risk assessments, and security reviews for new technologies and vendors.

Required Qualifications

• 10+ years of experience in infrastructure or network security, with 3+ years in a principal or lead role.
• Deep expertise in Palo Alto Networks products and Cisco security platforms.
• Strong understanding of cloud security architecture and native security tools in AWS, Azure, and/or GCP.
• Experience securing on-premise and hybrid data centers, including virtualization and SDN technologies.
• Proven experience designing and enforcing enterprise security policies across global networks.
• Solid knowledge of routing/switching protocols (BGP, OSPF), VPNs, DNS security, and NAC.
• Familiarity with SIEM, NDR, and EDR tools for detection and response.
• Scripting/automation proficiency (Python, Bash, PowerShell, or IaC tools).

Preferred Qualifications

• Certifications such as PCNSE, CISSP, CCNP Security, AWS/Azure Security Specialty.
• Experience with identity federation (SAML, OAuth), secrets management, and PKI.
• Background in segmentation frameworks (e.g., SCADA/ICS, OT security), or data loss prevention (DLP).
• Experience in DevSecOps or cloud-native security tooling.

We are an equal-opportunity employer and do not discriminate because of race, color, religion, sex, national origin, ancestry, marital status, veteran status, age, disability, sexual orientation or gender identity or expression or any other legally protected category. InterSystems is an E-Verify Employer in the United States.

Summary 

As a CNAPP Cloud Security Engineer, you will be part of a growing team of highly skilled cybersecurity experts providing delivery services for customers in several verticals.  Your primary responsibilities revolve around partnering with our customers to advise, develop, implement, and run CNAPP Cloud Security tools. You will constantly learn about and utilize the newest cloud security technologies, such as CNAPP, IaC, CSPM, and CWPP technologies.

Role and Responsibilities:

• Perform implementation of CNAPP and CSPM tools in multi-account AWS and Azure environments.
• Implement IaC scanning tools within the CI/CD Pipelines.
• Develop Infrastructure as code in Cloud Formation or Terraform.
• Develop custom control checks within CNAPP Platforms using JSON, REGO, or Terraform.
• Analysis – identifies and evaluates potential threats and vulnerabilities to the public cloud environments network, applications, infrastructure, and systems.
• Issue Resolution – leads the resolution of identified issues in public cloud environments.
  • Vulnerabilities – Cloud, System, and Application
  • Compliance – CIS, NIST, AWS, and Azure best practices.
  • Cloud Entitlements – Excessive Permissions and various IAM best practices.
  • Secrets – unprotected secrets on VMs, Containers, and IaC repositories.
  • IaC – misconfigurations and vulnerabilities within developed IaC.
• Deep understanding of Kubernetes and microservices security best practices.
• Performs container registry scanning.
• Reviewing and creating metrics, KPIs, and KRIs to track overall cloud security posture.
• Create, maintain, and update runbooks for cloud configuration checks.
• Assess the overall security posture of cloud security infrastructure and workloads.
• Advise customers on Cloud security best practices.

Experience, Education, and Technical Requirements.

• At least 3 years of experience working in Cloud Security with Amazon AWS, Microsoft Azure, or GCP.
• Experience with Cloud Security tools like: Wiz.io, Orca, Lacework, Trivy, Aqua, Ermetic or Prisma Cloud
• Experience with integrating tools into development pipelines such as Azure DevOps, Jenkins, Etc.
• Understanding of a broad range of Cloud Security issues as well as their mitigation strategies
• Understanding of Cloud Security-related vulnerabilities
• Experience developing code in Terraform, Python, PowerShell, Rego, and other languages.
• Written communication skills for written interactions with clients
• Strong communication skills include articulating thoughts and refining complex problems into digestible information clearly.
• Ability to manage time independently while handling multiple projects concurrently.
• Bachelor’s degree in computer science or information Security preferred
• Cloud Security certifications are preferred.

About the team:

Klaviyo’s global corporate Information Technology (IT) team is responsible for providing technology systems, administration, and support to Klaviyos around the world. Our main goal is to ensure that Klaviyos everywhere have a strong technology foundation to do great work. The IT Team solves problems using technology and provides Klaviyo’s continued scalability and sustainable employee growth in a rapidly evolving environment.

The IT Systems team is primarily responsible for SaaS systems administration and end-to-end lifecycle management, building automation, and engineering solutions for both other internal teams and the business. The IT Systems team is highly collaborative, working closely with the IT Searchbar team — our end-user support team — as well as with our Security, Risk, and Trust teams and the broader Engineering department. 

About the role:

As a Lead IT Systems Engineer on the IT Systems team, you will lead the design, implementation, and maintenance of our enterprise SaaS systems. You will spearhead projects that range from SSO/SCIM implementations to complex multi-tool integrations and automations, with a focus on scalability and efficiency. You'll collaborate closely with operations, engineering, and the IT Searchbar team to ensure seamless system performance and act as a technical escalation point for system-related issues. 

How you’ll have an impact

• You’ll mentor team members to grow and develop in their careers and help increase their scope and impact throughout their tenure at Klaviyo. 
• Both give and receive meaningful feedback focusing on empathy, curiosity, and investment in growth.
• Establish team standards, implement frameworks for intake and prioritization of projects and tasks, and establish and monitor objectives and key results (OKRs).
• Partner with the stakeholders to build, maintain, and improve tooling/infrastructure and documentation that helps meet the business needs for today and the future.
• Collaborate with IT and internal teams to automate and improve workflows, implement and enhance escalation processes, and drive IT initiatives.
• Implement new processes, and evaluate and improve existing processes.

Must-Haves (Non-Negotiables):

• A minimum of five years' experience in systems engineering within fast-paced and result-driven environments.
• Proven track record of defining problem statements, managing technical projects, collaborating with stakeholders, and delivering impactful results.
• Extensive experience in Identity Access Management (IAM), including IdP configuration, management, and maintenance (Okta or Azure experience is preferred).
• Strong experience working with enterprise-scale networking topics, including routing, DNS, and building and maintaining multiple global office networks and VPNs.
• Demonstrated proficiency in understanding and integrating Large Language Models (LLMs) or other AI technologies into enterprise systems for automation or process improvement.
• Deep technical knowledge in at least one additional domain: corporate security, endpoint management (Jamf, Intune, or equivalent), cloud infrastructure (GCP, AWS, or Azure), or enterprise SaaS administration(Atlassian,Google Workspace,etc).
• Strong experience in automating workflows and repetitive tasks using scripting (Bash, Powershell, or Python). Python is preferred, and AWS Lambda function experience is a plus. Familiarity with infrastructure-as-code tools (Terraform or Ansible) is a bonus.
• Knowledgeable in vendor management and IT budget management.
• Participation in an after-hours on-call rotation with the IT Systems team is required for site specific or business blocking issues.

Nice-to-Haves:

• IAM & Automation: Design and implement automated security, specializing in Okta Workflows (or similar) for user lifecycle and access/auditing.
• Systems Engineering (High-Growth): Experienced in managing/scaling critical infrastructure in agile, fast-paced SaaS/tech environments; champions security and scalability.
• API Integration: Build custom tools and leverage APIs (RESTful, OAuth 2.0/OpenID Connect) for secure, automated integration of corporate systems.
• Cloud Security (AWS/GCP): Deep, hands-on experience securing and managing AWS and GCP core infrastructure, including:
• Networking/Compute: VPC, EC2, Security Groups/Firewalls, ACLs.
• IAM: Defining and managing least-privilege roles (user, group, service).

We use Covey as part of our hiring and / or promotional process. For jobs or candidates in NYC, certain features may qualify it as an AEDT. As part of the evaluation process we provide Covey with job requirements and candidate submitted applications. We began using Covey Scout for Inbound on April 3, 2025.

Please see the independent bias audit report covering our use of Covey here

•  
   

  Job Description -  THIS IS A DEMO ENVIRONMENT - Not a real job

  Protect EMPLOYER’s data and the trust of millions worldwide who rely on it.

  Join EMPLOYER as an application cybersecurity engineer and play a critical role in securing the applications and infrastructure that power data-driven decisions around the world. You’ll be a vital thought leader as you collaborate with developers and architects to embed security into every stage of the software development life cycle.

  In this hands-on role, you will work across teams — from data science to DevSecOps — to build secure systems from the ground up. You’ll use a modern tech stack and work with cloud-native infrastructure, containers, automation tools and CI/CD security integrations. You’ll also have the autonomy to innovate, the support to grow and the opportunity to make a lasting impact on a global scale.

  What You’ll Do

  • Collaborate with software architects and developers to implement secure design principles and to conduct architecture/code reviews
  • Perform penetration testing and vulnerability assessments on applications and APIs
  • Build and deploy automation for vulnerability scanning, compliance and monitoring tasks
  • Integrate security into CI/CD pipelines, and champion secure SDLC practices
  • Participate in incident simulations, threat modeling and strategy discussions
  • Serve as a security adviser across cross-functional application teams

  What You Need

  • Bachelor’s degree in computer science, cybersecurity or a related field OR equivalent experience and a recognized certification (e.g., OSCP, GIAC, CEH) required
  • At least two years of professional experience in application security or secure software engineering required
  • Proficiency in at least one high-level programming language (e.g., Python, Java or .NET) and scripting (e.g., PowerShell, Bash) required
  • Demonstrated experience with penetration testing, vulnerability scanning or secure code review required
  • Hands-on knowledge of DevSecOps, automation and cloud security best practices preferred
  • A commitment to working on-site at our office at least three days a week required

  What You’ll Experience

  • Mission-driven work: Make a meaningful difference for organizations, governments and individuals with your unique contributions, commitment to service and exceptional outcomes.
  • Engaged teams: Join world-class managers, highly productive colleagues and knowledgeable mentors who are enthusiastic about their work.
  • Learning opportunities: Focus on continuous growth by developing your strengths, feeding your curiosity, challenging conventional thinking and experimenting.
  • Brand strength, startup energy: Thrive in an innovative culture backed by a trusted brand.
  • A collaborative environment: Work where your ideas, perspectives and experiences are welcome and valued.
  • A vibrant workplace: Enjoy an on-site cafeteria, fitness center

  Learn more about Example Corp

  Employers offers a robust benefits package that includes medical, dental, vision, life and other insurance options; a fully vested 401(k) retirement savings plan with company matching; an employee stock ownership program; family-building benefits; an employee assistance program; and various reimbursements and activities that enhance our associates’ wellbeing. We also offer an estimated annual salary range of $155,000-$145,000 for this role. Salaries are based on a variety of factors, including an individual’s education, experience and skills.

  EMPLOYER is an equal opportunity/affirmative action employer that celebrates, supports and promotes diversity and inclusion. We will consider all qualified applicants without regard to race, color, religion, sex, national origin, disability, protected veteran status, sexual orientation or gender identity, or any other legally protected basis, in accordance with applicable law.

  #IND2020

  #CB2019

  #LI2019

  #NAUKRI1

Position Overview:

This role is responsible for building and evolving Acadian’s Identity and Configuration Platform. A core team which enables secure, scalable and seamless access to systems, across both cloud and on-prem environments. You will develop APIs, services and tooling to standardize identity, configuration and operational patterns across the firm. The goal is to make secure access simple, consistent and durable for every team at the firm, directly or indirectly.

This is a hands-on platform engineering role that blends software development, architecture and SRE operations. You will be expected to design, build, support and operate critical infrastructure, build in security by default, making it easy to consume patterns and services. This could range from enterprise identity management to production level SSO, DNS, Certificate services and Secrets Management, EKS and more. You will act in a building and advisory capacity with deep technical knowledge.

Acadian supports a hybrid work environment; employees are on-site in the Boston office 3 days a week.

What You’ll Do:

• Build and maintain APIs, services, libraries and patterns to standardize services we own across the stack.
• Develop reusable platform capabilities to reduce duplication and eliminate one-off solutions across teams.
• Improve the daily experience of all users at the firm within our domain.
• Partner with engineering teams to integrate platform services into their applications and workflows.
• Operate and support critical platform services, including participation in an on-call rotation.
• Automate operational workflows to improve reliability, observability and incident response.
• Contribute to architectural direction and continuously improve the firm’s identity and access strategy.
• Mentor peers and help raise the engineering bar across the organization.
• Team operates in pair programming sessions for better than 90% of the working day.

We’re Looking for Teammates With:

• BS in in Computer Science, Computer Engineering, Electronic Engineering, Information Technology, or a directly related field plus 3 years of related software engineering experience. (7 years of experience without BS degree).
• At least 2 years of prior experience, financial services exposure is a plus.
• Strong backend engineering experience in one or more of: Go, Python or TypeScript.
• Comfortable working across Linux-based systems and scripting (e.g., Bash, PowerShell)
• Experience with Infrastructure as Code (Terraform preferred)
• Experience building APIs, services, or shared platform components used by other engineers
• Solid understanding of software design principles, including modularity, testability, and maintainability
• Hands-on experience with AWS and cloud-native architecture.
• Familiarity with Kubernetes (EKS preferred) and containerized systems
• Understanding of authentication and authorization concepts (OAuth2, OIDC, SAML, tokens) (preferred)
• Experience with identity providers (e.g., Okta, Entra ID) (preferred)
• Claude, ChatGPT, Cursor and other AI model experience a plus.

The base salary range for this role is $180,000 – $200,000 per year. Actual compensation will be determined based on a candidate’s skills, qualifications, and relevant experience. In addition to base pay, this position may be eligible for discretionary incentive compensation and includes participation in Acadian’s comprehensive benefits program, which includes health, retirement, and wellness offerings.

InterSystems Cloud Development initiatives enable healthcare organizations to revolutionize their operations through innovative, cloud-based technology solutions. Our team thrives on integrating cutting-edge InterSystems technologies with leading public-cloud services to solve complex, high-impact problems.

In a dynamic environment driven by constant innovation, we excel through creative thinking, exceptional problem-solving, teamwork, and an unwavering commitment to excellence. Every team member plays a critical role in our customers’ success, grounded in mutual trust and accountability. At InterSystems, we embrace change and challenge as catalysts for growth.

As a Principal Cloud Engineer, you combine deep technical expertise with strategic vision and leadership. You will own the architecture, automation, and operational excellence of large-scale, mission-critical healthcare workloads—guiding cross-functional teams and mentoring engineers while collaborating with product, security, and executive stakeholders.

Key Responsibilities

• Architect & Lead
  • Design end-to-end cloud architectures (network, compute, storage, security) for InterSystems IRIS-based solutions, ensuring scalability, resiliency, performance, and compliance.
  • Establish technical roadmaps and standards for infrastructure-as-code, CI/CD, observability, and security across multiple cloud providers (AWS, Azure, GCP).
  • Serve as the technical authority in design reviews, threat modeling, DR planning, and performance tuning.
• Automate & Operate
  • Build, deploy, orchestrate, and automate application and infrastructure packages using Terraform, Ansible, CloudFormation, Azure Resource Manager, and Kubernetes-based tooling.
  • Champion Git-centric workflows and CI/CD pipelines (GitLab preferred) to enable safe, repeatable releases.
  • Drive rigorous monitoring, logging, and incident-response practices leveraging CloudWatch, Prometheus, Coralogix, Lacework, PagerDuty, or equivalent.
• Mentor & Influence
  • Coach and develop senior and junior engineers; foster a culture of continuous improvement, knowledge sharing, and psychological safety.
  • Partner with product owners and customer executives to translate complex requirements into robust cloud solutions.
  • Lead post-incident reviews and capacity-planning sessions, ensuring lessons learned feed directly into architecture and process refinements.
• Innovate & Evangelize
  • Evaluate emerging technologies (serverless, service mesh, confidential computing, AI-for-Ops) and drive adoption where they add measurable value.
  • Represent InterSystems at industry events and customer briefings, articulating the technical vision and ROI of our cloud-first strategy.

Required Qualifications

• 10 + years managing production healthcare or regulated-industry environments, including application support, code deployment, and 24×7 operations.
• Advanced Linux administration (Red Hat or Ubuntu); strong scripting in Python, Bash, or PowerShell.
• Demonstrated success leading architecture and incident-management efforts for high-availability, multi-AZ/region deployments.
• Proven ability to influence executive stakeholders and navigate competing priorities.
• Bachelor’s degree in Computer Science, Engineering, or equivalent experience.

Preferred Qualifications 

• Professional-level cloud certifications (e.g., AWS Solutions Architect – Professional, Azure Solutions Architect Expert, Google Professional Cloud Architect).
• Mastery of configuration-management and IaC (Terraform Enterprise, Ansible Tower, Puppet, Chef).
• Production experience with container orchestration (Kubernetes, EKS, AKS) and service-mesh or serverless architectures.
• Solid understanding of Zero-Trust security principles, DevSecOps pipelines, and compliance frameworks (HIPAA, HITRUST, SOC 2, ISO 27001).
• Expertise in TCP/IP networking, VPN & Direct Connect, load balancing, storage performance, and Linux kernel internals.
• Experience driving large-scale cost-optimization and FinOps initiatives in cloud environments.
• Deep expertise in clinical data integration and interoperability (HL7 V2.x, C-CDA, FHIR, IHE profiles).

We are an equal-opportunity employer and do not discriminate because of race, color, religion, sex, national origin, ancestry, marital status, veteran status, age, disability, sexual orientation or gender identity or expression or any other legally protected category. InterSystems is an E-Verify Employer in the United States.

Quality Engineer Rotational Program – Early Career

About InterSystems

InterSystems powers mission-critical applications in healthcare, financial services, government, and other industries. Our data platform, interoperability solutions, and analytics technologies help organizations solve complex problems and deliver meaningful outcomes. With a focus on innovation and client success, we support systems that make a real-world impact.

The Quality Development Rotational Program is a rotational experience for soon-to-be graduates (BS, MS or PhD) who are interested in the delivery of high-assurance software through advanced testing, validation, and system-level analysis. QDP engineers partner with development teams across the company to implement test automation, build continuous integration (CI) pipelines, and identify root causes of bugs and regressions in complex, distributed systems.

We focus on software quality at scale—from performance profiling to security testing—to ensure our platforms are robust, reliable, and ready for real-world use.

Program Highlights:

• 3-week onboarding and training: Learn core technologies, debugging techniques, and best practices.
• Two 6-week team rotations: Gain hands-on experience with different tools, workflows, and testing strategies across our product teams (HealthShare, IntelliCare, Data Platforms).
• Mentorship and support: Work closely with experienced engineers for guidance and career development.
• Team placement: At the end of the program, participants transition to their long-term team based on interest, fit, and business needs.

Why Join Us?

• Cross-Team Experience: Gain exposure to interoperability platforms, data infrastructure, and clinical systems.
• Supportive Mentorship: Learn from seasoned engineers with insight into best practices and career planning.
• Career Path: Transition into a full-time role with growth opportunities in test automation, performance engineering, or security testing.

What We’re Looking For

Education & Background

• Soon-to-be graduates with a degree in Computer Science, Software Engineering, Mathematics, Physics, or a related STEM field. Graduation dates ranging from December 2025 to August 2026.

Technical Skills

• Proficiency in object-oriented programming (e.g., Java, Python, C++, C#).
• Exposure to scripting languages (e.g., Bash, PowerShell, Batch scripting).
• Familiarity with unit testing frameworks (e.g., JUnit, pytest, NUnit) and test automation tools.
• Understanding of version control (Git preferred) and CI/CD tools (e.g., Jenkins, GitLab CI).
• Interest or experience in debugging, test-driven development, or software diagnostics.

Professional Attributes

• Strong analytical and problem-solving skills.
• Attention to detail and ability to spot edge cases and performance issues.
• Eagerness to learn, adapt, and grow in a technical, fast-paced environment.
• Passion for software quality and building systems that make a real-world impact.

We are an equal-opportunity employer and do not discriminate because of race, color, religion, sex, national origin, ancestry, marital status, veteran status, age, disability, sexual orientation or gender identity or expression or any other legally protected category. InterSystems is an E-Verify Employer in the United States.

• Successfully complete support tickets
• Successfully complete project tickets
• Be responsible for following all processes
• Manage desktop computers, make sure they are compliant with security policies
• Manage the badge access system
• Manage computer inventory and system performance
• Maintaining office printer
• New user onboarding and offboarding
• Manage laptop delivery in remote locations
• Manage the internal Windows App (Intune) Store
• Maintain great co-worker relationships
• Deploy new applications from our deployment tool
• Take care of new responsibilities when needed
• Drive cross-team collaboration and clear communication to proactively identify risks, ensure alignment, and minimize operational and business impact
• Provide stronger autonomy in day-to-day execution and reduce the amount of oversight required on more complex initiatives

• Familiarity with Windows, Intune, G Suite, Office, and Active Directory
• Knowledge of computer security, anti-virus, patch management
• Basic knowledge of cloud services (Azure AD, Office 365, G-Suite, Atlassian etc.)
• Basic knowledge of PowerShell
• Ticketing system and trouble resolution
• VPN and network connectivity troubleshooting (TCP/IP, OSI Model)
• Documenting problem resolution and routine tasks
• Candidates must be within commuting distance to Boston, MA

• Microsoft Azure AD, Intune & Autopilot, Office 365, G Suite, Jira, Confluence
• Windows Endpoints and Windows Server
• Cisco Meraki AP
• Barco ClickShare
• Patch My PC
• Global Protect by Palo Alto
• Absolute Security
• Delinea

What We Are Looking For

• Technical Abilities:
• Familiarity with Windows, Intune, G Suite, Office, and Active Directory
• Knowledge of computer security, anti-virus, patch management 
• Basic knowledge of  cloud services (Azure AD, Office 365, G-Suite, Atlassian etc)
• Ticketing system and trouble resolution
• VPN and network connectivity troubleshooting (TCP/IP, OSI Model)
• Documenting problem resolution and routine tasks
• Candidates must be within commuting distance to Boston, MA

Soft Skills:

• You have a minimum of 4-5 years experience in desktop/ help desk support
• You are a proactive team member and take pride and ownership of your work
• You are dynamic, curious, and eager to learn; always looking to expand your fields of expertise
• You can work under pressure and still deliver excellent service to our customers

As a Senior Quality Development Engineer on the InterSystems IRIS® Data Platforms Cloud team, you will contribute to the development of high quality, robust InterSystems software by uncovering weaknesses and areas for improvement. If you are passionate about software, you will excel in this role by building tools and automation that verify new technologies as well as verifying that these new technologies do not adversely affect existing features. Your strong technical capabilities, curiosity to learn new things, creativity, and resourcefulness are an essential part of InterSystems’ innovation process.

Duties and Responsibilities:

• Develop automated functional, load and stress tests to test InterSystems products functionality in a multi-cloud environment, with focus on configurations and data that fairly represent customer systems
• Develop test scenarios and author and execute test plans
• Collaborate with interdepartmental teams to provide early feedback on new features
• Promote product quality by advocating for the customer's point of view as well as verifying that the product meets the customer’s needs

• Review product source code to inform test design for edge and stress test case development for key areas of the product such as failover and recovery

• Review the documentation and verify that it is clear and concise. Ensure that the documented procedures are clear and easy to follow

Qualifications:

• Ability to read code critically, finding bugs, weak spots, and performance bottlenecks
• Enthusiasm for debugging and learning new technical skills
• Understanding of Software Development Life Cycles (SDLC)
• Experience with application development, relational databases, and object-oriented development
• Experience with cloud technologies such as AWS, Azure, and GCP
• Familiarity with UI (Angular, Typescript, JS) and UI test automation (Selenium)
• Experience with container technologies such as Docker and Kubernetes
• Familiarity with software test tools and automation methodologies
• Experience with Object-Oriented programming (Java, .Net, C#, C++, Python) or C
• Experience with Python modules such as pytest, Kubernetes, boto3
• Effective communication and analytical skills
• Curiosity and aptitude for acquiring new technical skills and knowledge in a dynamic and highly technical environment
• Versatility and flexibility  
• Attention to detail and a passion for breaking things

Desirable:

• Experience with the Go programming language
• Technical knowledge of operating systems
• Experience with Windows batch and PowerShell scripts, unix  sh and bash scripts
• Experience with distributed systems and networking
• Experience with GitLab pipelines and continuous integration
• Familiarity with healthcare specifications such as FHIR, HL7 v2, or CDA
• Familiarity with accessibility tools (SortSite, Deque)
• Familiarity with InterSystems products, such as IRIS, ObjectScript, or HealthShare

Education and Training:

• Bachelor’s Degree in Computer Science or a related field and five years of relevant professional experience or Master’s Degree in Computer Science or a related field and two years relevant professional experience.

We are an equal-opportunity employer and do not discriminate because of race, color, religion, sex, national origin, ancestry, marital status, veteran status, age, disability, sexual orientation or gender identity or expression or any other legally protected category. InterSystems is an E-Verify Employer in the United States.

This post has been generated on behalf of our client:

Job Description: We are seeking a skilled DevOps Engineer to join our team. As a DevOps Engineer, you will be responsible for implementing and maintaining our software development infrastructure, automating processes, and ensuring the smooth deployment and operation of our applications.

Responsibilities:

• Design, configure, and maintain CI/CD pipelines
• Automate software deployment and infrastructure provisioning
• Monitor system performance and troubleshoot issues
• Collaborate with development teams to optimize application performance and scalability
• Implement and manage containerization technologies (Docker, Kubernetes)
• Ensure the security and compliance of our systems and applications

Requirements:

• Bachelor's or master's degree in Computer Science or a related field
• Strong knowledge of Linux operating systems and command-line tools
• Experience with configuration management tools (e.g., Ansible, Chef, Puppet)
• Proficiency in scripting languages (e.g., Bash, Python, PowerShell)
• Familiarity with cloud platforms (e.g., AWS, Azure, GCP)
• Understanding of networking concepts and protocols

Salary Range: $95,000 - $130,000 per year