Legend Biotech is seeking a Junior Associate Facility Engineer as part of the Facilities & Engineering team based in Raritan, NJ.

Role Overview

The Associate Facility Engineer will support the operation, maintenance, and qualification of equipment and systems that enable a Cell Therapy manufacturing facility. This person will assist in equipment monitoring, documentation, and troubleshooting activities under the guidance of more senior engineers. The role requires technical curiosity, attention to detail, and the ability to work in a collaborative team environment. This individual will be part of the CAR-T Equipment team in support of clinical and commercial manufacturing as well as facility improvement initiatives.

Key Responsibilities

• Provide day-to-day technical support for equipment and process support installations. 
• Assist in maintaining reliability and compliance through preventive maintenance programs and equipment monitoring.
• Learn to recognize performance trends, document observations, and propose basic improvements that enhance reliability, safety, and quality.
• Support the development of maintenance and calibration records, work instructions, and SOPs within the Quality Management System.
• Participate in root cause investigations, CAPAs, and change controls by gathering data, preparing documentation, and collaborating with cross-functional teams including QA, Operations, and Validation.
• Work with technical equipment data and documentation to support analyses of the maintenance process and provide input to the Maintenance Manager.
• Help ensure that preventive maintenance and calibration activities are completed and recorded on time.
• Assist with equipment tracking, asset management system updates, and vendor communication under supervision.
• Contribute to improvement projects or new equipment introductions by supporting data collection, documentation, and basic technical evaluations.
• Interact with external service providers and support internal teams to ensure timely execution of service activities.
• Have the authority to make decisions related to technical direction, methodologies, approaches and product development processes. You can also make decisions related to project execution, including timelines, milestones and resource allocation approved by the engineering manager. Higher-level approvals are required for those related to significant batch impact, or elevated resource allocation as directed by engineering manager.

Requirements

• Bachelor’s Degree – Preferably in Engineering or Life Sciences.
• 0–2 years of experience in Facility, Engineering, or Operations (internship or co-op experience in a GMP setting preferred).
• Proficiency of Microsoft office.
• Experience with quality management systems.
• Maximo or SAP.

#Li-RN1

#Li-Onsite

Legend Biotech is seeking a Facility Engineer as part of the Technical Operations team based in Raritan, NJ.

Role Overview

This position will be responsible for facilities engineering support, design, and implementation for mechanical systems and equipment, and work order management for cGMP Clinical and Commercial Cell Therapy Manufacturing. This individual will partner with various Technical Operation functions in support of personalized cell therapy production through safe and compliant manufacturing operations according to cGMP requirements. This individual will support the organization in maintaining commercial production at a state-of-the-art cell therapy facility. The role will require proven leadership and expertise that drives effective communication, coordination and collaboration across relevant cross functional groups to enable robust production, testing and release of product to patients.

Key Responsibilities

• Demonstrates professional execution of the planning, development, and implementation of construction and/or repair programs for engineering driven initiatives.
• Serves as SME on engineering design projects; sets project requirements, evaluates compliance with project and engineering standards, and approves final designs and installations.
• Identifies, investigates, and analyzes a wide range of complex facilities, utilities, systems, equipment or manufacturing issues and develops a robust solution for remediation.
• Oversees, reviews, and approves the work of external engineering design and planning consultants; ensures that engineering designs are consistent with contract specifications and all relevant regulations and engineering standards.
• Supports the review of equipment, building, and other job plans within the CMMS for effectiveness, applicability, and compliance. Ensure all equipment is operated and maintained within a validated/qualified/certified state.
• Gathers and analyzes data, blueprints, and reports.
• Supports tracking and achievement of annual maintenance goals and objectives including metric improvement targets. Support continuous improvement activities such as preventive maintenance optimization, risked based asset management programs, and analyze equipment for proper balance of preventive to corrective work order ratio.
• Supports maintenance driven quality events including but not limited to Deviations/Investigations, Out of Tolerances (OOTs), Change Controls, Root Cause Analysis and FMEA’s.
• Ensures regulatory and job training remains current by promptly completing required training.
• Complies with all company and/or site policies and procedures.
• Demonstrates willingness to learn new skills as required.
• Available for other duties as required.
• Ensures site compliance with all local, state and federal regulations including and equivalent to Federal Drug Administration (FDA), Environmental Protection Agency (EPA), Occupational Safety and Health Administration (OSHA), and Drug Enforcement Agency (DEA) as applicable (TSA) Transportation Security Administration.
• Ability to work independently and with minimal guidance/oversight.
• Job duties performed routinely require exposure to and handling of biological materials and hazardous chemicals. 

Requirements

• B.Sc./M Sc. in chemical, mechanical, electrical, industrial engineering or similar field is required
• Minimally 5+ years of experience as a facility engineer or working within an industrial manufacturing or regulated environment is required, ideally has cGMP cleanroom manufacturing experience under aseptic conditions
• Experience with HVAC and building management systems is required
• Experience with SAP and MS Office is required
• Proficiency in English (verbal and written) and strong communication skills
• Experience with a CMMS or similar maintenance management system is preferred
• cGMP manufacturing familiarity is preferred
• Ability to apply engineering principles and techniques to the solution of equipment, buildings, and infrastructure.
• Construction/project management principles. 

Robots & Pencils is seeking a seasoned AWS AI Solutions Architect to lead the design and delivery of complex, enterprise-grade generative and agentic AI systems built on Amazon Web Services. You will architect scalable, secure, and production-ready AI platforms leveraging Amazon Bedrock, Amazon Bedrock AgentCore, AWS Strands Agents, AWS AgentCore Gateway, Nova Forge, Nova 2 Sonic, and related AWS AI/ML services. 
 
As an AWS AI Solutions Architect, you will serve as a strategic technical advisor—translating ambiguity into structured AWS-native architectures, validating designs through hands-on prototyping, and ensuring every solution aligns with the AWS Well-Architected Framework (including ML Lens) while delivering measurable business value. 

Key Responsibilities 

Client Engagement & AWS Solutions Architecture 

• Serve as the primary AWS AI architecture partner for strategic clients, driving generative and agentic AI system design from discovery through production. 

• Lead architecture design using Amazon Bedrock (including foundation models and custom models), Bedrock AgentCore, AWS Strands Agents, and AWS AgentCore Gateway. 

• Design advanced RAG, Agentic RAG, and multi-agent orchestration architectures leveraging AWS-native services such as Lambda, Step Functions, API Gateway, DynamoDB, Aurora (pgvector), and OpenSearch. 

• Produce AWS reference architectures, architecture decision records (ADRs), and implementation roadmaps aligned to business objectives. 

• Validate feasibility through hands-on prototyping in Python using Bedrock SDKs, SageMaker, and serverless services. 

• Ensure architectures follow AWS security best practices (IAM, KMS, VPC, PrivateLink) and cost optimization principles. 

Outcome Ownership & Business Impact 

• Own architectural integrity from concept through production deployment on AWS. 

• Align solutions with AWS Well-Architected Framework pillars: Operational Excellence, Security, Reliability, Performance Efficiency, Cost Optimization, and Sustainability. 

• Guide clients through tradeoff decisions across model selection (Bedrock FMs vs custom SageMaker models), latency, cost, governance, and compliance. 
  Accelerate time-to-value through reusable AWS accelerators, Infrastructure as Code (CloudFormation/Terraform/CDK), and CI/CD automation. 

• Continuously evaluate emerging AWS AI capabilities (Nova Forge, Nova 2 Sonic, Bedrock updates, and new AgentCore capabilities). 

Engineering Leadership & Delivery Excellence 

• • Provide architectural oversight to Forward Deployed Engineers and AWS delivery teams. 

• Establish best practices for MLOps on AWS including model lifecycle management, monitoring, and observability using SageMaker, CloudWatch, CloudTrail, and AWS Config. 

• Define governance, responsible AI guardrails, Bedrock Guardrails configuration, and security controls for enterprise environments. 

• Mentor engineers on AWS AI service integration, distributed systems design, and secure multi-account strategies. 

• Make principled tradeoffs under constraints related to privacy, compliance (SOC2, HIPAA, GDPR), cost, and operational complexity. 

Cross-Functional Collaboration 

• Partner with internal product, engineering, research, and customer success teams to evolve AWS-based AI offerings. 

• Contribute AWS reference architectures and reusable infrastructure modules to internal accelerators. 

• Support pre-sales engagements including architecture workshops, AWS migration strategy, and solution scoping. 

• Collaborate across distributed teams and client stakeholders across North America. 

Required Skills & Qualifications 

• Bachelor’s degree in Computer Science, Engineering, or equivalent experience.
  • 7–10+ years of experience in software engineering or cloud architecture with deep AWS ownership. 
  • Deep expertise in Amazon Bedrock, Bedrock AgentCore, AWS Strands Agents, AgentCore Gateway, and related AWS AI services. 
  • Strong familiarity with SageMaker (training, deployment, pipelines), deep learning fundamentals, and model fine-tuning strategies. 
  • Experience architecting RAG, multi-agent, and orchestration systems using AWS-native services. 
  • Strong knowledge of distributed systems, event-driven architectures, and serverless patterns. 
  • Proficiency with Infrastructure as Code (AWS CDK, CloudFormation, Terraform). 
  • Hands-on development capability in Python and AWS SDKs. 
  • Experience implementing observability and monitoring strategies in AWS environments. 
  • Proven success leading enterprise-scale AWS transformations. 
  • Exceptional communication skills for both technical and executive audiences. 
  • AWS Professional Certifications highly preferred (AWS Solutions Architect – Professional, AWS DevOps Engineer – Professional). 

Nice to Have 

• AWS Specialty certifications (Machine Learning – Specialty, Security – Specialty).
  • Experience with advanced agentic reasoning patterns (ReAct,CoT, Tree-of-Thoughts) implemented on Bedrock. 
  • Experience building secure multi-account AWS organizations using Control Tower. 
  • Exposure to data engineering services such as Glue, Redshift, Lake Formation. 
  • Consulting or professional services background. 

Personal Competencies 

• Accountability – Owns AWS architectural direction and client outcomes with rigor.
  • Adaptability – Rapidly adopts new AWS AI releases and evolving generative AI capabilities.
  • Collaboration – Builds trust across engineering and executive stakeholders. 
  • Execution-Focused – Balances innovation with production-ready AWS delivery. 
  • Innovation-Minded – Experiments responsibly with emerging AWS AI services. 
  • Craftsmanship – Designs secure, scalable, and well-documented AWS systems. 
  • Leadership with Courage – Drives architectural alignment in complex environments. 
  • Comfort in Ambiguity – Translates unclear AI requirements into AWS-native solution architectures. 

Why Join Robots & Pencils? 

We build smart systems for a human world — blending creativity, engineering, and AWS-powered AI to help organizations reimagine how they work. As an AWS AI Solutions Architect, you will shape enterprise-scale generative and agentic AI platforms using the most advanced AWS services available. You will define architectures that deliver measurable business value, mentor teams, and directly influence the evolution of our AWS AI practice. 

Who We Are

Cross River builds the infrastructure behind the world’s most innovative financial products. Our technology and capital solutions power payments, cards, lending, and digital asset capabilities that move money safely, instantly, and inclusively — trusted by leading fintechs, enterprises, and disruptors across the globe.

Our mission is simple: to build the financial infrastructure that expands access and opportunity for all. Guided by a culture of collaboration, curiosity, and purpose, Cross River has been named one of American Banker’s Best Places to Work in Fintech year after year. Whether you’re designing code, solving regulatory puzzles, or developing strategy, you’ll join a team where innovation and integrity drive everything we do — and where your work helps shape the future of finance.

What We're Looking For

We are looking for an Information Security Analyst to help ensure demonstrable adherence to applicable IT governance requirements across multiple ITSM and information security processes. You will work effectively and efficiently with cybersecurity, engineering, product, and IT operations teams at various levels of the organization. The ideal candidate is self-motivated, solutions-oriented, detail-focused, and an independent thinker. You possess a strong understanding of the software development lifecycle (SDLC), change management, and IT risk management. You can quickly grasp complex technical concepts and can make them easily understandable in discussions, presentations, and high-quality documentation.

Responsibilities:

• Act as a subject matter expert on information security and ITSM industry best practices, standards, frameworks, and regulatory guidance
• Collaborate with cross-functional teams to help maintain standards, procedures, and evidence documentation
• Facilitate the change management process and production deployment evidence reviews
• Monitor, report, and assess the effectiveness of performance and conformance controls
• Facilitate information security training and awareness campaigns
• Coordinate the collection of evidence to support IT audits and examinations
• Maintain control mappings and perform gap analyses to drive continuous program improvement
• Identify, propose, and implement process improvement for information security processes

Qualifications:

Must Have:

• Exceptional written and verbal communication skills, with the ability to present complex information in a clear and concise manner to diverse audiences
• 3+ years of relevant experience in roles such as cybersecurity analyst, IT auditor, software engineer, IT business analyst, IT systems analyst, IT product owner, technical product manager, or IT project manager
• Strong understanding of the software development lifecycle (SDLC), change management, and/or IT risk management

Preferred:

• Undergraduate or graduate degree in computer science, cybersecurity, information assurance, business administration, or a closely related field
• Professional certificates or certifications such as ITIL 4 Foundation, ISO/IEC 27001 Foundation, CompTIA Security+, ISC2 CC, ISC2 CGRC, or ISACA CRISC
• Familiarity with regulatory guidance, standards, and frameworks such as the FFIEC IT Handbook, SOC 1/2, PCI DSS, COBIT 2019, and ITIL
• Experience working in a highly regulated environment such as financial services, military, or healthcare

#LI-AC1 #LI-Hybrid

Salary Range: $70,000.00 - $90,000.00

Who We Are

Cross River builds the infrastructure behind the world’s most innovative financial products. Our technology and capital solutions power payments, cards, lending, and digital asset capabilities that move money safely, instantly, and inclusively — trusted by leading fintechs, enterprises, and disruptors across the globe.

Our mission is simple: to build the financial infrastructure that expands access and opportunity for all. Guided by a culture of collaboration, curiosity, and purpose, Cross River has been named one of American Banker’s Best Places to Work in Fintech year after year. Whether you’re designing code, solving regulatory puzzles, or developing strategy, you’ll join a team where innovation and integrity drive everything we do — and where your work helps shape the future of finance.

What We're Looking For

Cross River Bank is seeking an experienced AVP, Enterprise Applications Administrator to lead the administration, optimization, and evolution of our enterprise SaaS application ecosystem. In this role, you'll serve as the technical backbone for platforms that support Legal, Compliance, Risk, and Governance functions — ensuring our systems are secure, scalable, and aligned with business objectives. You'll partner across departments to translate complex business requirements into reliable, well-governed technical solutions.

Responsibilities

• Platform Administration: Architect, administer, and maintain enterprise SaaS platforms surrounding document management across the organization
• Access & Security Management: Manage user provisioning, roles, permissions, and access controls in alignment with security and compliance standards, including RBAC, IAM, SSO, and provisioning automation
• Workflow & Configuration Management: Configure and optimize workflows, templates, metadata schemas, dashboards, reporting, and automation within SaaS platforms to drive operational efficiency
• System Health & Performance Monitoring: Monitor system performance, health metrics, and usage analytics to ensure platform reliability and identify opportunities for improvement
• Vendor & Release Coordination: Coordinate vendor support engagements, system upgrades, patch management, and release management across all administered platforms
• Platform Implementation & Enhancement: Lead platform implementations, enhancements, and system configuration changes from requirements through deployment
• Integration & Data Management: Support SaaS integrations using APIs and middleware, including data migration and system integration projects across enterprise platforms
• Governance & Compliance Assurance: Ensure audit readiness, enforce data retention policies, and contribute to business continuity planning in alignment with data governance and compliance frameworks
• Stakeholder Engagement & Training: Facilitate stakeholder workshops, requirements gathering sessions, and user training programs to drive adoption and maximize platform value
• Documentation & Change Management: Maintain comprehensive documentation including scripts, procedures, and checklists; lead change management and process optimization initiatives

Qualifications:

Required:

• 5+ years of experience administering enterprise SaaS or DMS applications
• Hands-on experience with document management systems such as LogicGate (GRC / Risk Management), Icertis Contract Lifecycle Management (CLM), DocuSign, and Box.com platforms
• Experience managing user provisioning, roles, permissions, and access controls aligned with security and compliance standards
• Demonstrated ability to configure workflows, templates, metadata, dashboards, reporting, and automation within SaaS platforms
• Experience coordinating vendor support, system upgrades, and release management
• Experience leading platform implementations, enhancements, and system configuration changes
• Ability to translate business requirements into scalable technical solutions
• Familiarity with SaaS integrations using APIs and middleware, including data migration and system integration projects
• Strong knowledge of role-based access control (RBAC), data governance, and compliance frameworks
• Experience supporting Legal, Compliance, Risk, or Governance teams
• Familiarity with Identity & Access Management (IAM), SSO, and provisioning automation
• Ability to ensure audit readiness, data retention policies, and business continuity planning
• Experience facilitating stakeholder workshops, requirements gathering, and user training
• Strong skills in documentation, change management, and process optimization
• Excellent analytical, communication, and stakeholder management skills
• Strong troubleshooting skills, a methodical approach to problems, and a willingness to document what you do (scripts, procedures, checklists)

Preferred:

• Exposure to REST APIs or application integrations (e.g., supporting interfaces between DMS, finance, and other enterprise systems)
• Practical experience with application installations, updates, or upgrades — ideally including work on server-side applications, not just desktop clients
• Prior experience as an Applications Support Engineer, Application Analyst, or Enterprise Applications Support in a law firm, financial services, or other professional services environment

#LI-AC1 #LI-Hybrid

Salary Range: $180,000.00 - $210,000.00

About the team:

The Fleet Operations Team drives uptime and operational performance across Formic’s growing fleet of deployed robotic systems. Working inside live manufacturing environments, the team diagnoses issues, restores production, and continuously improves system reliability at scale. Fleet Operations operates at the intersection of robotics, controls, and real-world factory execution, ensuring Formic’s automation delivers consistent, measurable performance across diverse industrial applications.

About the role:

As a Robotics Field Service Engineer, you are the front line of technical ownership across Formic’s deployed robotic cells. You will diagnose failures, restore systems to production, perform preventative and corrective maintenance, and represent Formic directly within customer facilities.

This is a hands-on, high-accountability role in uptime-critical environments. Success requires strong troubleshooting discipline, calm execution during production interruptions, and structured documentation. Your work directly impacts fleet performance, customer satisfaction, and long-term system reliability.

In this role you will:

• Perform preventative, corrective, and predictive maintenance on robotic manufacturing cells
• Respond to remote and on-site escalations, diagnose root causes, and restore systems quickly
• Provide hands-on technical support to customer operators and maintenance teams
• Log service activity, asset updates, and spare part requirements in CMMS systems
• Coordinate field scheduling and support with customers, vendors, and internal stakeholders
• Monitor system performance remotely using Formic dashboards and fleet tools
• Document service work, root cause analysis, and follow-up actions with clarity and precision
• Identify recurring failure patterns and escalate systemic risks for broader improvement
• Build professional, trusted relationships with plant managers and site personnel
• Operate with strict adherence to safety standards, including LOTO and industrial compliance
• Participate in RCA sessions, audits, and continuous improvement initiatives
• Continuously expand technical depth across robotics, controls, networking, and industrial systems

What makes you a great fit:

• 3+ years of hands-on field service experience supporting robotic or industrial automation systems
• Strong troubleshooting skills across electrical, mechanical, PLC, or robotic control systems
• Ability to read electrical schematics, wiring diagrams, and pneumatic drawings
• Experience using CMMS platforms to track and report maintenance activity
• Comfortable with local travel up to 80% and overnight travel up to 50%
• Clear written and verbal communicator capable of producing structured service documentation
• Demonstrated commitment to safety and disciplined field execution

Bonus points if you have:

• Experience with 6-axis robot brands such as Fanuc, KUKA, Yaskawa, ABB, or Universal Robots
• Familiarity with palletizing, case packing, pick-and-place, or conveyor systems
• Experience in food, beverage, packaging, CPG, or other high-speed manufacturing environments
• Prior customer-facing field experience
• Spanish language proficiency

About ProBio:

ProBio, a subsidiary of GenScript, has a one stop biopharmaceutical R&D and production platform, mainly dedicated to cell and gene therapy (CGT) drugs, vaccine and biopharmaceutical discovery, antibody protein Provides end-to-end CDMO services from target development to commercial production. GenScript has established companies in the United States, the Netherlands, South Korea, Shanghai, Hong Kong, Nanjing and other places to serve global customers. Since October 2017, it has assisted customers in the United States, Europe, Asia Pacific and other regions to obtain more than 50 IND approvals.

Job Scope:

The Automation Engineer is responsible for administration and management of the site’s automation systems, including Supervisory Control and Data Acquisition (SCADA) system, PLCs, notification systems and computerized QC Lab instruments. The scope of the responsibilities includes the initial installation, ongoing maintenance, periodic back-up, change control, validation, and retirement of systems.

The incumbent works cross-functionally with internal departments including Information Technology, Manufacturing, Facilities & Engineering, Quality Control, and Quality Assurance, as well as external resources/vendors to maintain the site’s automation systems. The incumbent supports adherence to relevant regulatory requirements and company Standard Operating Procedures (SOPs) as appropriate.

Responsibilities:

•    Work closely with stakeholders to understand and fulfill system requirements and improve the quality of automated processes.
•    Collaborate with stakeholders, including Area Managers, System Owners, and System Users to ensure successful onboarding, use and retirement of automation systems.
•    Develop appropriate Validation Protocols, Reports, and Lifecycle documents.
•    Execute Validation Protocols and collecting test evidence. 
•    Create and improve Administration SOPs of automation systems
•    Monitor integrity, availability, performance and operability of automation systems.
•    Identify, investigate and correct technical issues, including performing root cause analysis for production errors.
•    Make adjustments, enhancements and applying patches or upgrades as required for automation systems, while adhering to the Change Control process.
•    Understand network operations, system operations, and Cloud-based systems.
•    Administer user access management.
•    Ensure compliance with applicable regulatory standards.
•    Maintain up-to-date knowledge of current technology trends, programming languages, and automation best practices for bioprocess equipment including single-use bioreactors, chromatography controllers, ultrafiltration skids, and QC instruments.
•    Author appropriate Change Controls and Test Scripts and serve as the Subject Matter Expert for applicable technical changes in automation systems.
•    Recommend and integrate new bioprocess equipment and Process Analytical Technologies (PAT).
•    Liaison with Business, Quality Assurance, Managed Services, and IT to coordinate the Change Request processes
•    Training:

• • cGxP
  • Applicable Corporate and Departmental Directives, Policies, and Procedures
  • Good Manufacturing Practices and Good Documentation Practices
  • Automation Control and Data Acquisition
  • EHS
  • Lab/Biological Safety
  • Gowning

Qualifications: 

• Expertise in IT Networking and industrial automation systems, such as Rockwell Automation (Allen Bradley RS Logix), Wonderware Archestra platform, TopView, Vaisala ViewLinc, Unicorn software, DeltaV, various Repligen and Thermo Scientific instruments is a plus.
• Bachelor of Science in Electrical Engineering, Computer Science, IT, Engineering, or related field of study with at least 5-7 years of related experience that provides direct scientific knowledge of automation systems operation and validation principles for computerized biologics production systems.
• Proven experience as an IT Automation Engineer or similar role.
• Direct knowledge of the biologics process equipment, SCADA/control systems, and supporting IT networking infrastructure.
• Expertise in scientific / technical subject areas – Equipment Qualification, Computer System Validation, SCADA system architecture, Biotech Process Equipment/Systems.
• Proficient in use of electronic systems, such as Microsoft Office, various specialized software including process documentation Veeva Vault, Material Management (SAP), Computerized Maintenance Management System (Maximo), Building Automation System (BAS).
• Knowledge of domestic / international regulatory guidelines / compendia and industry standards (FDA, ICH, USP and EMEA guidelines) for validation of computerized equipment and automation systems, including but not limited to 21 CFR Part 11, EU Eudralex Annex 11 and GAMP 5.
• Analytical thinker with excellent problem-solving skills and the ability to adapt to changing priorities and deadlines.
• Comfort with collaboration, open communication, reaching across functional borders and being proactive.
• A strong focus on business outcomes.
• Ability to prioritize and juggle multiple concurrent projects and day-to-day requests

Please note that this role is based fully onsite in Pennington, New Jersey. The estimated salary range is $90,000 - $120,000 annually.

#PB

#LW

We are looking for a Cybersecurity Engineer to join our Corporate IT Team in NYC!

ROLE AND RESPONSIBILITIES:

The Cybersecurity Engineer is a hands-on technical role responsible for implementing, maintaining, and optimizing security controls across our hybrid infrastructure environment serves as a subject matter expert in designing, implementing, and administering our comprehensive security technology stack. This role combines deep technical expertise in cybersecurity tools with hands-on system administration skills to support our self-hosted, on-premises security infrastructure. The ideal candidate combines infrastructure knowledge with a strong understanding of security operations, compliance requirements, technical implementation and testing and assessing risk.  They will be capable of supporting our security toolset including CyberArk, Splunk, OKTA, Tenable, SOAR platforms, and other security analytics solutions.

Responsibilities:

Vulnerability & Threat Management

• Conduct vulnerability assessments across containerized and traditional infrastructure
• Perform ethical hacking and penetration testing to identify security weaknesses on our applications periodically and at times of new releases.
  • Candidates should have a CEH and be familiar with Nmap, Wireshark, Metasploit, Hydra and Burp to name a few.
• Lead remediation efforts and track vulnerability lifecycle management
• Analyze security alerts and incidents, performing root cause analysis
• Contribute to threat hunting activities and security monitoring

Security Platform Architecture support and administration

• Administer and optimize enterprise security tools including SIEM, EDR, vulnerability scanners, and container security platforms
• Manage security aspects of VMware infrastructure, storage systems, and network segmentation
• Configure and maintain authentication systems (SAML, RADIUS) and identity management platforms such as OKTA.

Security Tools Administration & Management

CyberArk Privileged Access Management

• Administer CyberArk PAS (Privileged Access Security) including Vault, CPM, PSM, and PVWA components
• Configure privileged account onboarding, password management policies, and access workflows
• Implement CyberArk integrations with Active Directory, applications, and infrastructure systems
• Manage CyberArk clustering, disaster recovery, and high availability configurations
• Troubleshoot CyberArk performance issues and optimize system configurations

Splunk Enterprise & Security Operations

• Administer Splunk Enterprise infrastructure including indexers, search heads, and forwarders
• Configure and maintain Splunk Enterprise Security (ES) for security monitoring and incident detection
• Develop custom Splunk searches, dashboards, and alerts for security use cases
• Manage Splunk data models, knowledge objects, and correlation rules
• Optimize Splunk performance, storage management, and cluster operations

Vulnerability Management & Security Testing

• Administer Tenable Security Center and Nessus scanning infrastructure
• Configure vulnerability scanning policies, schedules, and remediation workflows
• Integrate vulnerability data with other security tools and ticketing systems
• Develop custom vulnerability reporting and metrics dashboards
• Coordinate vulnerability assessment activities and penetration testing support

Security Orchestration & Response (SOAR)

• Implement and maintain SOAR platforms for security automation
• Develop automated playbooks for incident response, threat hunting, and remediation activities
• Create custom integrations between the SOAR platform and existing security tools
• Design automated workflows for security alert triage and response coordination
• Maintain SOAR platform performance and troubleshoot automation issues

System Administration & Infrastructure

• Test disaster recovery, and business continuity procedures for security systems

Security Operations Support

• Provide Level 2/3 technical support for security incidents and tool-related issues
• Participate in incident response activities and forensic investigations
• Develop and maintain security procedures and troubleshooting guides
• Support 24/7 security operations center (SOC) activities and on-call rotation
• Collaborate with security analysts to optimize detection rules and reduce false positives

Compliance & Governance

• Support compliance initiatives including SOC 2, PCI DSS, NIST SP 800-53 and regulatory audits
• Maintain security tool documentation, configurations, and change management procedures
• Implement logging and audit trail requirements for compliance frameworks
• Develop security metrics and KPI reporting for management and auditors
• Ensure security tools meet data retention and privacy requirements

Cross-functional Collaboration

• • Partner with IT infrastructure teams on security tool deployment and maintenance
  • Collaborate with application development teams on security tool integrations
  • Work with network teams to implement security monitoring and traffic analysis
  • Support risk management activities with technical security assessments
  • Provide security expertise for project planning and technology implementations

Desired Qualifications:

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or equivalent experience
• Relevant certifications preferred: CCSP, CISSP, GCIH, GCFA, Security+, CySA+, GSEC, or equivalent
• Vendor-specific certifications: CyberArk Defender/Sentry, Splunk Certified Admin/Architect, Tenable Certified Security Practitioner

Technical Skills - Core Platform:

Security Tools Proficiency (3+ years each)

• CyberArk: Deep experience with PAS components, policy configuration, and enterprise deployment
• Splunk: Advanced administration of Splunk Enterprise and Enterprise Security, including clustering and performance optimization
• Tenable: Comprehensive vulnerability management experience with Security Center, Nessus, and enterprise scanning
• SOAR Platforms: Hands-on experience with security orchestration tools (Phantom, Demisto, IBM Resilient, or similar)

System Administration (5+ years combined)

• Advanced Linux administration (RHEL, CentOS, Ubuntu) including shell scripting and automation
• Windows Server administration including PowerShell scripting and Active Directory integration
• Network security concepts and implementation (firewalls, IDS/IPS, network segmentation)

Security Specializations

• Enterprise PKI and certificate management
• Log aggregation, analysis, and correlation techniques
• Incident response procedures and forensic analysis
• Threat intelligence integration and threat hunting methodologies
• Security automation and orchestration best practices

Professional Experience

• 4+ years of cybersecurity experience with focus on enterprise security tools
• 4+ years of hands-on system administration in enterprise environments
• Experience with self-hosted, on-premises security infrastructure
• Proven track record of security tool implementations and migrations
• Experience participating in and supporting compliance audits and regulatory requirements

Additional Skills

• Strong scripting abilities (Python, Bash, PowerShell) for automation and integration
• Experience with API integration and custom security tool development
• Knowledge of cloud security platforms (AWS Security Hub, Azure Security Center) preferred
• Understanding of DevSecOps practices and CI/CD pipeline security
• Excellent troubleshooting and analytical problem-solving skills
• Strong documentation and technical writing capabilities

Key Competencies

• Technical Leadership: Ability to serve as subject matter expert across various Security tool sets.
• Problem-Solving: Advanced analytical skills for complex security tool issues and integrations
• Communication: Ability to explain technical concepts to both technical and non-technical stakeholders
• Project Management: Experience leading security tool implementations and upgrades
• Continuous Learning: Commitment to staying current with emerging security technologies and threats

Preferred Qualifications

• Degree in Cybersecurity or related field
• Experience in regulated industries (government)
• Advanced certifications: CISSP, SABSA, TOGAF, or specialized vendor certifications
• Experience with additional security tools: QRadar, Rapid7, Carbon Black, CrowdStrike
• Background in security architecture and enterprise security frameworks

*The salary reflected is a good faith estimate of base pay for the primary location of the position. Our compensation reflects the cost of labor across several U.S. geographic markets, and we pay differently based on those defined markets. The U.S. pay for this position is up to $155,000 annually. Pay will vary by work location and may also depend on job -related knowledge, skills, experience and abilities of the successful candidate. Your recruiter can share more about the specific salary range for the job location during the hiring process.

Keywords: #NYC #NewYorkCity #Manhatten, #Cybersecurity, Cybersecurity, CISSP, #CISSP, SecurityTools ,#SecurityTools, SIEM, #SIEM, #InfrastructureEnvirnonments, #CyberArk, CyberArk, #Splunk, Splunk, OKTA, #OKTA, Tenable, #Tenable, #SOARPlatforms, SOARPlatforms, #Telecom, Telecom, #Troubleshoot, #Engineering

We are seeking a Principal Controls & Hardware Engineer to serve as a technical authority for the architecture, design, and delivery of embedded control hardware used in advanced semiconductor manufacturing equipment. This role owns control system hardware strategy, drives complex design decisions, and partners across disciplines to deliver reliable, high‑performance systems deployed in production environments.

This position is suited for a deeply experienced engineer with demonstrated leadership in embedded controls, microprocessor‑based systems, and complex control hardware, capable of influencing design direction across multiple programs.

Key Responsibilities

• Lead the architecture and design of embedded control hardware for semiconductor manufacturing equipment
• Define and implement control system hardware strategies, standards, and best practices across programs
• Design complex electronic systems incorporating microprocessors, microcontrollers, ADCs, DACs, and mixed‑signal circuitry
• Own schematic capture, design integrity, and review using OrCAD Capture or equivalent EDA tools
• Perform and review analog, digital, and mixed‑signal circuit simulation using OrCAD PSpice or similar tools
• Lead hardware bring‑up, validation, and root‑cause analysis using oscilloscopes, logic analyzers, and advanced lab instrumentation
• Troubleshoot complex system‑level issues at the hardware and controls interface, including analog, digital, and mixed‑signal domains
• Partner closely with software, embedded firmware, mechanical, and systems engineers to ensure cohesive control system integration
• Provide technical leadership through design reviews, mentoring, and cross‑functional collaboration
• Guide prototype development, risk mitigation, and design trade‑offs across the full product lifecycle
• Author and review high‑quality technical documentation, specifications, and design rationale
• Occasional travel to support development, integration, or escalated technical investigations

Required Qualifications

Education & Experience

• Master’s degree or higher in Electrical Engineering, Computer Engineering, or a related engineering discipline
• 10+ years of progressive experience designing embedded controls and hardware systems, with demonstrated technical leadership

Core Technical Expertise

• Recognized expertise in embedded controls and control system design
• Extensive experience with microprocessors and microcontroller‑based architectures
• Advanced proficiency in analog, digital, and mixed‑signal circuit design and simulation
• Strong hands‑on experience with electrical circuit simulation using OrCAD PSpice or similar tools
• Proven ability to debug and resolve complex hardware‑level issues across analog, digital, and mixed‑signal systems
• Deep experience designing electronic boards incorporating microcontrollers, ADCs, DACs, and supporting circuitry
• Solid understanding of embedded systems environments and hardware/firmware interfaces
• Expert use of oscilloscopes, logic analyzers, and electronic test equipment
• Exceptional attention to detail, technical judgment, and documentation rigor
• Proficiency with Microsoft Office applications

Preferred Qualifications

• Experience writing embedded firmware or a strong working knowledge of embedded firmware development and debugging
• Experience in the semiconductor manufacturing equipment industry (preferred, not required)
• Control hardware experience for auto RF matching networks and/or RF generators
• Experience with Texas Instruments Sitara processors
• Experience with Analog Devices Blackfin processors
• Experience with Xilinx Spartan FPGAs
• Background in Electrical Engineering or Computer Engineering applied to complex, real‑time control systems

Role Overview

We are seeking a Principal Firmware Engineer for Controls & Hardware Design to serve as a technical authority for the architecture, design, and delivery of embedded control hardware and hardware/firmware interfaces used in advanced semiconductor manufacturing equipment. This role owns control system hardware strategy, drives complex design decisions, and partners closely with embedded firmware teams to deliver reliable, high‑performance control platforms deployed in production environments.

This position is suited for a deeply experienced engineer with demonstrated leadership in embedded control systems, microprocessor‑based platforms, and hardware/firmware integration, capable of influencing architecture and design direction across multiple programs.

Key Responsibilities

• Lead the architecture and design of embedded firmware for control hardware platforms
• Define and implement embedded firmware strategies, standards, and best practices that enable robust firmware development and long‑term platform scalability
• Familiar with complex electronic systems incorporating microprocessors, microcontrollers, ADCs, DACs, and mixed‑signal circuitry optimized for embedded firmware execution
• Familiarity with reading schematics
• Lead firmware bring‑up, validation, and integration, including early firmware execution, board support validation, and interface verification
• Troubleshoot complex system‑level issues at the hardware, firmware, and controls interface, spanning analog, digital, and mixed‑signal domains
• Partner closely with embedded hardware, software, mechanical, and systems engineers to ensure cohesive and predictable control system behavior
• Provide technical leadership through design reviews, mentoring, and cross‑functional collaboration with firmware and controls teams
• Guide prototype development, risk mitigation, and design trade‑offs across the full product lifecycle, with emphasis on firmware enablement and maintainability
• Author and review high‑quality technical documentation, including hardware/firmware interface definitions, design rationale, and system specifications
• Occasional travel to support development, system integration, or escalated technical investigations

Required Qualifications

Education & Experience

• Master’s degree or higher in Electrical Engineering, Computer Engineering, or a related engineering discipline
• 10+ years of progressive experience designing embedded control and hardware systems, with demonstrated technical leadership

Core Technical Expertise

• Embedded firmware development in C
• Experience with Linux
• Recognized expertise in embedded firmwareand control system design
• Familiarity with microprocessor‑ and microcontroller‑based architectures supporting embedded firmware
• Proven ability to debug and resolve complex firmware‑level and hardware/firmware interaction issues
• Deep experience designing electronic boards incorporating microcontrollers, ADCs, DACs, and supporting circuitry
• Solid understanding of embedded systems environments, real‑time behavior, and hardware/firmware interfaces
• Expert use of oscilloscopes, logic analyzers, and electronic test equipment
• Exceptional attention to detail, technical judgment, and documentation rigor
• Proficiency with Microsoft Office applications

Preferred Qualifications

• Experience with embedded hardware or a strong working knowledge of embedded hardware development, bring‑up, and debugging
• Experience in the semiconductor manufacturing equipment industry (preferred, not required)
• Control hardware experience for auto RF matching networks and/or RF generators
• Experience with Texas Instruments Sitara processors
• Experience with Analog Devices Blackfin processors
• Experience with Xilinx Spartan FPGAs
• Background in Electrical Engineering or Computer Engineering applied to complex, real‑time embedded control systems