THE ROLE

As a Security Operations Engineer in the Global Information Security Office (GISO), you will lead the mission to reduce our global attack surface across cloud, endpoint, and SaaS environments. You will report to the Senior Security Operations Manager and work closely with Cloud Platform, Network Engineering, and DevOps teams to connect Zero Trust connectivity and vulnerability management into a coherent program. This role differentiates itself by moving beyond simple task execution to architecting automated, risk-based outcomes that enable the business to scale safely while protecting our most critical assets.

WHAT YOU’LL DO

• Own the Vulnerability & Asset Lifecycle: Drive risk-based remediation across cloud, container, and endpoint environments. You will shift the needle from volume-based reporting to exploitability-led prioritization (EPSS), utilizing asset intelligence to ensure remediation meets SLAs that tangibly reduce organizational risk.
• Engineer Zero Trust & Connectivity: Lead the operational excellence of Zscaler (ZIA/ZPA). You will manage complex SSL/TLS inspection strategies and policy enforcement to provide seamless, secure access while maintaining deep visibility into encrypted traffic flows.
• Eliminate Credential & Secret Risk: Act as the primary architect for secrets detection within CI/CD pipelines. You will partner with DevOps to automate the identification and remediation of exposed credentials, moving security "left" from code to cloud.
• Architect Detection, Deception, & Automation: Build advanced detection queries in Splunk and deploy enterprise-wide deception strategies aligned with the MITRE ATT&CK framework. You will automate manual triage via Python or SOAR workflows to turn raw security data into high-fidelity alerts.
• Validate & Simulate Defenses: Execute targeted adversary simulations and controls validation (e.g., Atomic Red Team) to verify that detections perform as expected, providing risk-rated findings to technical leaders.
• Translate Risk for Stakeholders: Serve as the technical authority who can pivot from deep-packet inspection troubleshooting to delivering "Fix Impact Reports" for executive leadership, quantifying how remediation efforts have eliminated critical threats.

WHAT YOU BRING

• Security Engineering & Vulnerability Mastery: You possess deep experience in security operations and vulnerability management within enterprise environments, including hands-on experience with asset discovery and secrets detection tools such as runZero, TruffleHog, or GitLeaks.
• Zero Trust & Cloud Specialization: You have technical depth in configuring and operating Zero Trust platforms—specifically Zscaler ZIA/ZPA (including SSL inspection design and policy tuning)—and experience securing major cloud providers like AWS, GCP, or Azure.
• Analytical Automation & DevSecOps: You are proficient in SIEM detection engineering (Splunk) and scripting (Python, PowerShell, or Bash), with a proven ability to integrate secrets scanning and automated remediation workflows directly into CI/CD pipelines.
• Offensive Security & Strategic Communication: You bring practical experience with threat emulation and deception technologies mapped to MITRE ATT&CK, coupled with the ability to partner with engineering teams to prioritize remediation and translate technical risk into business-relevant language.

We are primarily an in-office environment. You will be expected to work from our Santa Clara, CA or Lehi, UT office in compliance with company policies, unless on approved PTO, work travel, or other leave.

What You’ll Do 

As a Staff Cloud Engineer, you will be responsible for managing and optimizing our AWS infrastructure, ensuring high availability, security, and performance. Your responsibilities will encompass managing Virtual Private Clouds (VPCs), handling infrastructure components such as Route53, CDN, Firewall, WAF, load balancers, etc. You will work to Write and maintain IaC and automation systems. You will be instrumental in building and implementing Disaster Recovery (DR) and resiliency automation strategies across Availability Zones (AZs).      

This role reports to the Senior Manager, Cloud Engineering. 

You will: 

AWS Infrastructure Management: 

• Operate and optimize AWS Virtual Private Clouds (VPCs), Route53, Content Delivery Networks (CDNs), load balancers, and EC2 instances. 
• Ensure the infrastructure is configured and maintained to meet high availability, security, and performance requirements. 
• Monitor and troubleshoot infrastructure issues, proactively identifying and resolving potential bottlenecks or vulnerabilities. 

Disaster Recovery and Resiliency: 

• Design and implement robust disaster recovery and resiliency automation solutions spanning across AWS Availability Zones. 
• Conduct regular testing and validation of the disaster recovery plan to ensure its effectiveness and reliability. 
• Collaborate with cross-functional teams to identify and mitigate risks, ensuring business continuity in the event of a disaster. 

Incident Response: 

• Collaborate with the team to provide operational support during incidents, utilizing your deep understanding of AWS infrastructure. 
• Participate in incident response activities, including troubleshooting, root cause analysis, and implementing corrective actions. 
• Contribute to the development and improvement of incident response processes and procedures. 

Infrastructure Monitoring: 

• Implement and maintain effective monitoring solutions, including log management, metrics, collection, and alerting 
• Analyze monitoring data to identify performance trends, capacity needs, and potential areas for optimization 
• Use Observability best practices with AWS CloudWatch and DataDog 

Infrastructure Optimization: 

• Continuously evaluate and optimize the AWS infrastructure to improve performance, scalability, and cost efficiency. 
• Implement automation and orchestration tools to streamline infrastructure provisioning, configuration, and management processes. 
• Stay updated with the latest AWS services, features, and best practices, incorporating them into the infrastructure architecture as appropriate. 

Documentation and Collaboration: 

• Maintain accurate and up-to-date documentation of the infrastructure architecture, configurations, and operational procedures. 
• Collaborate with cross-functional teams, including developers, system administrators, and security teams, to ensure effective communication and alignment of infrastructure requirements. 

Infrastructure Automation and DevOps: 

• Develop and maintain infrastructure-as-code (IaC) using tools like Terraform or CloudFormation. 
• Implement and enhance CI/CD pipelines for efficient and automated application deployments. Experience with Harness, ADO Pipelines, or GitHub Actions. 
• Drive the adoption of DevOps practices, including configuration management, continuous integration, and automated testing.  
• Deep knowledge and proficiency in automation scripting best practices using tools like Python, and/or PowerShell   

What You’ll Need to be Successful 

• Bachelor’s degree in computer science, Engineering, or a related field, or equivalent practical experience.  
• 10+ years with hands-on experience in AWS. 
• AWS Certification required. 
• Advanced AWS Certifications are a plus.  
• Ability to independently deliver features following story descriptions and acceptance criteria.  
• Proficiency in engaging in technical discussions with senior engineers and architects, requiring minimal supervision for individual tasks.  
• Proficiency in automation tools such as Terraform, GitHub Actions; and scripting in Python, Bash or PowerShell. 
• Ability to offer guidance to other Cloud Engineers and work collaboratively within the team. 

What You’ll Love About NetDocuments  

• The People!  
• 90% healthcare premiums company covered  
• HSA company contribution  
• 401K match at 4%  
• Flexible PTO (typically 3 to 4 weeks a year)  
• 10 paid holidays  
• Monthly contributions for life activities & wellness  
• Access to LinkedIn learning with monthly dedicated time to explore 

Compensation Transparency 

The compensation range for this position is: $160,000 - $180,000

The posted cash compensation for this position includes on target earnings. Some roles may qualify for overtime pay. Individual compensation packages are determined based on various factors specific to each candidate, such as career level, skills, experience, geographic location, qualifications, and other job-related considerations. 

ABOUT THIS ROLE

LVT is seeking a highly skilled and motivated Systems Engineer III to join our growing technology team. This role will be pivotal in managing and optimizing our identity and access management (IAM) infrastructure, with a primary focus on Okta. The ideal candidate will have deep expertise in Okta administration, configuration, and integration, as well as a strong understanding of SaaS-based applications and their connectivity. Experience with cloud infrastructure platforms is a significant plus. As a Systems Engineer III, you will be responsible for ensuring the security, reliability, and efficiency of our critical systems and contributing to strategic technology initiatives.

ROLE RESPONSIBILITIES

Okta Management & Administration:

• Serve as the primary subject matter expert (SME) for our Okta platform, including user and group management, SSO configuration, MFA policies, lifecycle management, and integrations.
• Design, implement, and maintain Okta workflows and automation to streamline user provisioning, de-provisioning, and access controls.
• Troubleshoot and resolve complex Okta-related issues, providing timely and effective support to end-users and other IT teams.
• Develop and maintain comprehensive documentation for Okta configurations, processes, and best practices.
• Stay up-to-date with the latest Okta features, updates, and security best practices.

SaaS Application Integration & Management:

• Plan, implement, and manage integrations between Okta and various SaaS applications (e.g., Salesforce, Google Workspace, Microsoft 365, etc.).
• Ensure seamless and secure access to SaaS resources for employees.
• Collaborate with application owners to understand their integration requirements and provide technical guidance.
• Monitor the health and performance of SaaS integrations.

Security & Compliance:

• Implement and enforce security policies and best practices within Okta and integrated SaaS applications.
• Participate in security audits and compliance initiatives related to identity and access management.
• Identify and mitigate potential security risks and vulnerabilities within the Okta environment.

Automation & Scripting:

• Develop and maintain scripts (e.g., Okta Workflows, Workato, etc.) to automate routine tasks and improve operational efficiency.

Collaboration & Communication:

• Work closely with other IT teams (e.g., Security, Networking, Applications) to ensure the smooth operation of all systems.
• Communicate effectively with technical and non-technical stakeholders regarding system changes, outages, and project updates.
• Participate in project planning and execution, providing technical expertise and guidance.

Cloud Infrastructure (Nice to Have):

• Experience with cloud platforms such as AWS, Azure, or GCP.
• Familiarity with cloud identity and access management concepts and services.
• Ability to integrate Okta with cloud-based resources and services.
• Understanding of infrastructure-as-code (IaC) principles and tools.

Problem Solving & Troubleshooting:

• Analyze and resolve complex technical issues related to Okta, SaaS applications, and potentially cloud infrastructure.
• Develop and implement effective solutions to prevent recurring problems.

OUR IDEAL CANDIDATE

• Bachelor's degree in Computer Science, Information Technology, or a related field (or equivalent experience).
• Minimum of 5 years of experience in systems engineering or a related IT role.   
• Extensive hands-on experience with Okta administration, configuration, and integration is mandatory.
• Proven experience integrating Okta with various SaaS applications.
• Strong understanding of identity and access management principles (e.g., SAML, OAuth, OpenID Connect).
• Proficiency in scripting languages such as PowerShell or Python, with experience in automating workflows through APIs.
• Excellent problem-solving, analytical, and troubleshooting skills.
• Strong communication, collaboration, and interpersonal skills.
• Ability to work independently and as part of a team.
• Excellent documentation skills.

The application window will be open until at least April 17, 2026. This opportunity will remain online based on business needs which may be before or after the specified date.

This role is not eligible for immigration sponsorship.

At GFiber, our Information Systems and Technology team plays a crucial role in enhancing employee productivity and efficiency across all departments. We are dedicated to delivering quality support while fostering a strong business partnership and ensuring seamless project deliverables. Together,  we focus on delivering innovative solutions that empower our colleagues and drive the organization forward.

Role Description

As a Senior IT Systems Engineer, you will architect and maintain the digital workspace our employees rely on daily. This role oversees the entire lifecycle of corporate applications, from end-to-end deployment and configuration to automated patching and long-term administration. You will manage our Google Workspace environment and support critical office technology, including multi-vendor networking, conferencing, and advanced printing solutions. While possessing deep expertise in software application engineering, you will maintain a robust foundation in full device management to ensure secure and seamless delivery across macOS, Windows, and ChromeOS platforms.

In this role, you'll:

• Manage the enrollment, security posture, and compliance of macOS, Windows, and ChromeOS devices using Microsoft Intune, Google Workspace, and Kandji/Iru to provide a stable platform for application delivery.
• Architect the end-to-end deployment, configuration, and proactive patching strategies for the corporate productivity suite. This includes leading the rollout of new enterprise solutions from initial environment setup through to ongoing maintenance and optimization.
• Deploy and provide advanced support for office technology, including LAN/Wi-Fi networking, Google Meet conferencing/AV systems, and enterprise printing hardware and software.
• Perform administration, strategy, and security hardening for Google Workspace, including advanced mobile device management for Android/iOS and Google Meet integrations.
• Utilize advanced scripting (Python, PowerShell, or GAM) to automate software packaging, agent rollouts (e.g., CrowdStrike, CatchPoint), and system-wide compliance remediation.
• Collaborate with cross-functional stakeholders and vendors to understand business needs and implement scalable software and hardware solutions that streamline corporate operations.

At a minimum we'd like you to have:

• Bachelor's degree in Computer Science, Information Technology, or a related field; or equivalent practical experience.
• 8 years of experience as a Systems Engineer in an Enterprise Corporate IT environment.
• 5 years of experience managing Google Workspace at an enterprise level, overseeing Application Lifecycle Management (packaging, deployment, patching), and supporting office networking (Wi-Fi, LAN).
• Experience managing macOS/Apple MDM tools (e.g., Kandji/Iru) and Microsoft Intune.
• Experience deploying applications on premise or software as a service (SaaS). 

It's preferred if you have:

• Professional Google Workspace, Apple, or Microsoft Endpoint related certifications.
• Experience configuring Okta or Entra ID for SAML federation, SSO, and automated user provisioning.
• Experience working with Python, PowerShell, and GCP Cloud CLI for advanced systems automation and API-driven integrations.
• Experience delivering complex technical projects within an Agile environment (e.g., Scrum).
• Ability to use written and verbal communication to explain complex architectural fixes and technical concepts to both technical and non-technical audiences.

The US base salary range for this full-time position is between $136,000 - $169,000 + bonus + cash award + benefits. As pay varies by location, your recruiter will share more about the specific salary range for your targeted location during the hiring process.

#LI-DNI