About the Role

iCapital is looking to hire a DevOps Database Engineer to join the Platform Infrastructure team. This role is responsible for owning the performance, reliability, security, and operation of the company’s SQL and NoSQL database platforms.  The role operates within a database team who partners with application engineering, platform, and security teams to ensure databases are scalable, resilient, secure, and observable across all environments.

Responsibilities

• Own end to end performance of SQL and NoSQL databases across environments, including query optimization, indexing strategies, execution plan analysis, and tuning of database runtime parameters (i.e. PostgreSQL query plans, MongoDB indexes, DynamoDB access patterns).
• Prevent performance regressions proactively through representative load testing, performance analysis tooling, and CI or CD validation gates.
• Partner with application teams on schema design, data modeling, and workload driven performance improvements, including relational schemas, document models, and NoSQL access patterns.
• Design, operate, and harden production grade SQL, NoSQL, and document database systems with strong replication, failover, backup or restore, and security controls.
• Define, implement, and validate backup and disaster recovery strategies, including routine restore testing and compliance with RPO and RTO objectives.
• Establish SLIs and SLOs for database health, including latency, error rates, contention, replication lag, storage growth, and cache efficiency across SQL and NoSQL databases.
• Deliver actionable dashboards and alerts and maintain operational runbooks alongside up to date documentation.
• Lead or participate in production incident response and post incident reviews related to database platforms.
• Enforce database security best practices in partnership with InfoSec, including least privilege access, RBAC, auditing, encryption, secure secret handling, access reviews, and secure service to database authentication across SQL and NoSQL data stores.
• Codify database infrastructure and operations using Infrastructure as Code such as Terraform and CI or CD pipelines.
• Standardize baseline configurations, schema migration practices, and operational guardrails across relational, document, and NoSQL databases.

Qualifications

• Hands‑on experience operating production‑scale SQL and NoSQL databases, with strong troubleshooting skills under pressure
• Experience with managed cloud database services, including SQL and NoSQL databases (i.e. AWS RDS and Aurora PostgreSQL, MongoDB Atlas, DocumentDB, DynamoDB)
• Deep expertise across the following areas like performance tuning, indexing, query optimization, vacuum/auto vacuum, bloat management, data modeling, backup/restore, capacity planning, scalability design, and cost and performance tradeoffs
• Experience with observability, alerting, and operational metrics for data platforms
• Automation‑first mindset with hands‑on experience in Infrastructure as Code, Gitlab CI/CD pipelines, and repeatable operational runbooks
• Experience with IAM‑based access controls, KMS and encryption, secrets management, and compliance‑driven governance controls
• Proven experience developing and maintaining Terraform modules
• Strong Linux fundamentals and scripting experience such as Bash or Python
• Experience with Docker and Kubernetes for database‑adjacent workloads

Benefits

The base salary range for this role is $110,000 to $135,000 depending on level.  iCapital offers a compensation package which includes salary, equity for all full-time employees, and an annual performance bonus. Employees also receive a comprehensive benefits package that includes an employer matched retirement plan, generously subsidized healthcare with 100% employer paid dental, vision, telemedicine, and virtual mental health counseling, parental leave, and unlimited paid time off (PTO).

We believe the best ideas and innovation happen when we are together. Employees in this role will work in the office Monday-Thursday, with the flexibility to work remotely on Friday.

For additional information on iCapital, please visit https://www.icapitalnetwork.com/about-us  Twitter: @icapitalnetwork | LinkedIn: https://www.linkedin.com/company/icapital-network-inc | Awards Disclaimer: https://www.icapitalnetwork.com/about-us/recognition/

iCapital is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, gender, sexual orientation, gender identity, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.

THE ROLE

As a Security Operations Engineer in the Global Information Security Office (GISO), you will lead the mission to reduce our global attack surface across cloud, endpoint, and SaaS environments. You will report to the Senior Security Operations Manager and work closely with Cloud Platform, Network Engineering, and DevOps teams to connect Zero Trust connectivity and vulnerability management into a coherent program. This role differentiates itself by moving beyond simple task execution to architecting automated, risk-based outcomes that enable the business to scale safely while protecting our most critical assets.

WHAT YOU’LL DO

• Own the Vulnerability & Asset Lifecycle: Drive risk-based remediation across cloud, container, and endpoint environments. You will shift the needle from volume-based reporting to exploitability-led prioritization (EPSS), utilizing asset intelligence to ensure remediation meets SLAs that tangibly reduce organizational risk.
• Engineer Zero Trust & Connectivity: Lead the operational excellence of Zscaler (ZIA/ZPA). You will manage complex SSL/TLS inspection strategies and policy enforcement to provide seamless, secure access while maintaining deep visibility into encrypted traffic flows.
• Eliminate Credential & Secret Risk: Act as the primary architect for secrets detection within CI/CD pipelines. You will partner with DevOps to automate the identification and remediation of exposed credentials, moving security "left" from code to cloud.
• Architect Detection, Deception, & Automation: Build advanced detection queries in Splunk and deploy enterprise-wide deception strategies aligned with the MITRE ATT&CK framework. You will automate manual triage via Python or SOAR workflows to turn raw security data into high-fidelity alerts.
• Validate & Simulate Defenses: Execute targeted adversary simulations and controls validation (e.g., Atomic Red Team) to verify that detections perform as expected, providing risk-rated findings to technical leaders.
• Translate Risk for Stakeholders: Serve as the technical authority who can pivot from deep-packet inspection troubleshooting to delivering "Fix Impact Reports" for executive leadership, quantifying how remediation efforts have eliminated critical threats.

WHAT YOU BRING

• Security Engineering & Vulnerability Mastery: You possess deep experience in security operations and vulnerability management within enterprise environments, including hands-on experience with asset discovery and secrets detection tools such as runZero, TruffleHog, or GitLeaks.
• Zero Trust & Cloud Specialization: You have technical depth in configuring and operating Zero Trust platforms—specifically Zscaler ZIA/ZPA (including SSL inspection design and policy tuning)—and experience securing major cloud providers like AWS, GCP, or Azure.
• Analytical Automation & DevSecOps: You are proficient in SIEM detection engineering (Splunk) and scripting (Python, PowerShell, or Bash), with a proven ability to integrate secrets scanning and automated remediation workflows directly into CI/CD pipelines.
• Offensive Security & Strategic Communication: You bring practical experience with threat emulation and deception technologies mapped to MITRE ATT&CK, coupled with the ability to partner with engineering teams to prioritize remediation and translate technical risk into business-relevant language.

We are primarily an in-office environment. You will be expected to work from our Santa Clara, CA or Lehi, UT office in compliance with company policies, unless on approved PTO, work travel, or other leave.

We Are Route

When shoppers hit "buy," a great customer experience doesn’t end, it’s just getting started. For too long, everything after checkout has been the weakest link in ecommerce: confusing tracking, lost or damaged packages, clunky returns, and missed opportunities to turn first-time buyers into lifelong fans. That's why we built Route.

Our mission is simple: we create shopper confidence that fuels brand growth. Route is the leading post-purchase platform for modern ecommerce, trusted by thousands of brands and protecting more than $20 billion in gross merchandise value to date. From package protection and industry-leading order tracking to returns and exchanges, cash back loyalty, and engaging product recommendations, Route brings every moment after checkout into one powerful platform, empowering shoppers with visibility and peace of mind while giving merchants loyalty that lasts well beyond the first sale.

Since launching in 2018, Route has raised over $250 million from leading investors including Craft Ventures, Hedosophia, and Hanaco Ventures, and has grown into a complete post-purchase ecosystem loved by millions of shoppers and the brands they buy from. Throughout that growth, we've stayed committed to building innovative products that empower our customers and to fostering a people-first, values-driven culture that makes Route a place where great work and great people thrive.

We're looking for talented people across the ecommerce space to join us on the next chapter of this adventure. Don't just take our word for it, Discover what life at Route has to offer.

The team

The Data Engineering team (DAENGR) is the backbone of Route's data ecosystem. We are primarily responsible for the data infrastructure, quality, standards, frameworks, and architecture that power enterprise data, reporting, and analytics across the entire organization. We solve problems of poor data quality and limited accessibility, simplify reporting for teams outside of data engineering, and monitor the uptime, security, and consistency of the majority of Route's data lifecycle. We collaborate closely with every corner of the business to make data a first-class citizen at Route.

The opportunity

This is a rare chance to shape the data destiny of a young, fast-growing company at an inflection point. As Route moves into the AI era of data infrastructure, you'll have the opportunity to leave a lasting legacy — exploring new systems and designs, and building tools that genuinely change how Route operates day to day. We are actively migrating from legacy Snowflake pipelines into a modern Databricks-first architecture, building out an Enterprise Data Warehouse (EDW) with a normalized 3NF core, and laying the groundwork for AI-ready data systems. You'll be co-authoring the next chapter of data at Route.

The ideal candidate is organized and articulate in their thinking, able to adapt and compromise to keep pace with business needs, but firm enough to push back when security and data integrity are at stake. We aim to help Route improve profitability, cash flow, and return on investment by providing accurate data to make informed decisions and process improvements.

What you’ll do

• Build and maintain ELT pipelines that ingest data from systems.
• Co-own the mapping and migration of source data into the new 3NF EDW, ensuring data integrity, reducing redundancy, and maintaining automated unit and data tests.
• Develop data observability processes and monitoring dashboards to track pipeline health, freshness, and data quality across Databricks.
• Build new data and AI-powered tooling to improve the productivity of the data engineering team and broaden self-service data access for Route employees and external partners.
• Help harden the Integration Pipeline by automating deployment of shared staging and production infrastructure for new pipelines and managing dependency updates for dbt and CI templates.
• Support the full migration from Snowflake to Databricks, targeting completion by end of Q2 2027, including reporting services and ingest/egress jobs.
• Coordinate with engineering, analytics, product, and business teams to define and prioritize data requirements and ensure end-to-end data lifecycle coverage for existing and new products.
• Champion data democratization, help establish a company-wide data retention policy, and expand the foundation for a self-service Silver layer (EDW) that serves as a single source of truth.

What we’re looking for

• 5+ years of formal, professional data engineering experience
• 4+ years of SQL, fluency in complex transformations, window functions, query optimization
• 3+ years of python, data pipeline development, scripting, testing, and package management (Poetry)
• 2+ years of experience with AWS (e.g. - S3, RDS, DMS, DynamoDB) across data-related services
• 1+ years of experience using Databricks, our primary development platform for this role
• Experience using Terraform and GoLang
• PagerDuty / Grafana / Tableau, preferred experience
• Understanding of third normal form (3NF) data modeling and when to apply it
• Knowledge and application of data theory
• Working knowledge of data security practices and least-privilege access standards
• Experience with data access controls in cloud environments (IAM roles, catalog permissions, etc.)

Equal opportunity for all

Route is an Equal Opportunity Employer. We embrace diversity and equal opportunity in a serious way. We are committed to building a team that represents a variety of backgrounds, perspectives, and skills. The more inclusive we are, the better our work will be.

Total Rewards

We know our team works best when everyone feels happy, healthy, and supported. We offer to pay 95% - 100% of your health insurance premiums for you and your family, remote or hybrid work arrangements, unlimited PTO, 401k matching, formalized growth opportunities, learning & development, DEI programs & events, and so much more.

Pay Transparency

Salary for this role: $138,000 - $146,000

The cash compensation above includes base salary, and is not reflective of potential commission for employees in eligible roles, or annual bonus targets under Route’s bonus plan for eligible roles. In addition to cash compensation, all Route employees are eligible to participate in Routes equity incentive plan to receive stock options per the terms of the agreement. Some roles may also be eligible for overtime pay. Individual compensation packages are based on a few different factors unique to each candidate, including their career level, skills, experience, specific geographic location qualifications and other job-related reasons.

Make your impact within a rapidly growing Fintech Company

The Core Infrastructure Engineering Team is responsible for managing all of the infrastructure and databases at BILL. We utilize DataDog (for Logging, Metrics, and APM), Splunk, and CloudWatch (through Datadog integration) for real-time alerts via Slack and PagerDuty. We're big supporters of automating our workflows with Infrastructure as Code, and we love using Terraform to make it happen.

We are seeking a Staff Cloud Network Engineer to lead the design and evolution of our AWS network platform. This role is for a hands-on technical leader with deep expertise in AWS networking and infrastructure as code who will set standards, influence architecture, and drive scalable, secure networking solutions across the BILL application ecosystem. You will act as the go to expert for cloud networking, partnering closely with infrastructure, security, and product engineering teams to ensure our network enables performance, reliability, and growth.

We’d love to chat if you have:

Minimum of 7 years of relevant experience in network engineering, with a significant portion of that experience specifically focused on designing, implementing, and managing network infrastructure in AWS or similar cloud environments.

• Proven experience architecting and operating large-scale AWS network environments, including the design and implementation of hub-and-spoke and multi-region topologies using AWS Transit Gateways and AWS Cloud WAN for high availability, scalability, and cost optimization.
  
  
• Hands-on experience designing inter-VPC and inter-account connectivity patterns (e.g., VPC peering, Transit Gateway attachments, Cloud WAN core networks, and routing domains), including segmentation strategies for production, staging, and non-production workloads.
  
  
• Proficiency in Terraform or similar Infrastructure as Code (IaC) tools for automating network configuration, including reusable modules for VPCs, Transit Gateways, Cloud WAN segments, route tables, and security policies.
  
  
• In-depth knowledge of networking protocols, including TCP/IP, BGP, OSPF, VLANs, VPNs, and DNS, with specialized experience managing Amazon Route 53 hosted zones and Cloudflare DNS/CDN configurations, and the ability to apply these in cloud-based architectures (e.g., dynamic routing over Direct Connect or site-to-site VPN integrated with Transit Gateway / Cloud WAN).
  
  
• Strong understanding of network security principles and best practices, including firewalls, IDS/IPS, encryption, access control, and the application of these controls at the VPC, Transit Gateway, and Cloud WAN layers to enforce least-privilege and zero-trust patterns.
  
  
• Experience with network monitoring and performance optimization tools such as CloudWatch, VPC Flow Logs, and AWS Direct Connect, including baselining, capacity planning, and proactive detection of routing and latency issues in large-scale topologies.
  
  
• Ability to collaborate effectively with cross-functional teams, including Systems Engineers, Developers, Security, and Architects, to translate application and business requirements into resilient AWS network architectures.
  
  
• Excellent troubleshooting and problem-solving skills, with a focus on identifying and resolving complex network issues across on-premises, Direct Connect, VPN, Transit Gateway, Cloud WAN, and VPC boundaries.
  
  
• AWS certification(s) such as AWS Certified Solutions Architect – Associate or AWS Certified Advanced Networking – Specialty is preferred.
  
  
• Proven track record of designing and implementing scalable and resilient network solutions in a production environment, including multi-region failover, disaster recovery connectivity patterns, and change-managed rollouts using IaC.
  
  
• Strong communication skills and the ability to articulate network architecture and design decisions to both technical and non-technical stakeholders, including clear documentation of routing policies, segmentation models, and connectivity patterns.

#LI

Network Engineer III

ABOUT LVT

LVT is redefining how businesses operate in the physical world, moving beyond traditional security solutions to deliver AI-driven, actionable intelligence that makes sites smarter, safer, and more secure. Since pioneering our first mobile, solar-powered units, our commitment to scrappy, hands-on innovation has made us an established leader and one of the fastest-growing companies in intelligent site technology. We are building the next generation of solutions—from our physical units in the field to a powerful Agentic AI platform—that allows our customers to gain unprecedented visibility and control over safety, compliance, and operations. This is your chance to join a cutting-edge team that isn't just watching the world change, but actively building the technology that is changing it.

We’re a team that’s focused on growth and innovation, and we’re proud that our crew, products, and leadership are being recognized for it.

• A Top-Tier Growth Company: Named one of the Financial Times’ Fastest Growing Companies 2025 and #10 on the Inc. 5000 Rocky Mountain Regional list for 2025.

• Innovative Leadership: Our CEO, Ryan Porter, was named an EY Entrepreneur of the Year 2025, and our CTO, Steve Lindsey, was inducted into the Silicon Slopes CTO Hall of Fame in 2024.

• Product & Software Excellence: We were named one of The Software Report’s Top 100 Software Companies of 2023 and are a winner of the Security Today Govies Award for 2025.

ABOUT THIS ROLE

As a Network Engineer III, you will serve as the network security subject matter expert within our IT Infrastructure team. This is a high-impact, hands-on role responsible for the security, integrity, and availability of our core systems, bridging the gap between digital networks and physical facilities. You will not only design and implement robust network security controls but also lead the management of our physical access systems, ensuring they integrate seamlessly with our enterprise IT operations.

This role is based out of our Headquarters in American Fork, Utah.

ROLE RESPONSIBILITIES

• Security Engineering: Design and maintain robust IT security architectures, including firewall policies and complex Access Control Lists (ACLs), to safeguard our global network.

• Systems Management: Configure and monitor mission-critical security tools such as VPN, CASB, Email Security, and DNS solutions to ensure 24/7 operational continuity.

• Physical Security Integration: Administer and modernize company-wide physical access control systems, including badge readers and door controllers, as a core component of IT infrastructure.

• Threat Detection: Manage the IT components of our enterprise logging environment, developing automated scripts and tools to enhance real-time analysis and alerting.

• Incident Response: Lead the technical response to security incidents, managing the full lifecycle from identification and containment to resolution and documentation.

• Internal Governance: Serve as the primary technical liaison between IT Infrastructure, auditors, and Information Security to ensure strict compliance with industry standards.

• Cross-Functional Partnership: Collaborate deeply with Systems and IT Engineers to ensure security-by-design is applied to all infrastructure projects from inception.

• Performance Optimization: Balance rigorous security initiatives with the primary goals of system stability, high performance, and a positive end-user experience.

OUR IDEAL CANDIDATE

• Seasoned Network Professional: 5+ years of hands-on experience in network engineering or a related senior IT role within a fast-paced environment.

• Firewall Expert: Extensive experience deploying and maintaining Palo Alto firewalls in an enterprise setting; you know how to build for both security and scale.

• Log Management Specialist: 2+ years of deep experience with syslog servers and enterprise log management solutions for advanced troubleshooting and auditing.

• Hybrid Security Mindset: 2+ years of experience managing physical access control systems (e.g., LenelS2, Genetec, Brivo) and integrating them with digital networks.

• Automation Minded: Proven ability to develop scripts to automate routine security monitoring and response tasks.

• Strong Communicator: Exceptional verbal and written skills, with the ability to explain complex technical concepts to non-technical stakeholders and executive leadership.

• Collaborative Problem Solver: A track record of thriving in operational environments where you must balance project-based security work with day-to-day administration.

• Certified Expert: While not required, industry certifications such as CISSP or CISM are highly valued.

The Impact You’ll Make

• Define and lead product security strategy across web, mobile, API, cloud, infrastructure, and container security — conducting threat modeling, risk assessments, and security reviews throughout the development lifecycle with a strong shift-left focus.
• Embed secure development practices by designing and implementing secure coding standards, encryption, and security testing methodologies in close collaboration with development and ML teams, ensuring products are secure, resilient, and trustworthy.
• Own Enterprise AI Security end-to-end — from securing LLM integrations, agentic pipelines, and ML model ingestion to defending against AI-specific threats (prompt injection, data poisoning, model extraction, RAG poisoning, ), building AI incident response playbooks, and red-teaming AI systems across Recursion's product surfaces.
• Secure the AI supply chain and MLOps infrastructure by vetting third-party foundation models, open-source weights, and AI APIs before production integration, and partnering with ML engineering to protect training pipelines, feature stores, and model serving endpoints.
• Champion compliance and AI governance by operationalizing frameworks such as OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF, and EU AI Act requirements — collaborating with legal, privacy, and responsible AI teams to support audits and evolving regulatory expectations.
• Scale security as a force multiplier by evaluating and deploying security tooling, detecting policy violations, driving security outcomes, and ensuring security initiatives never become a bottleneck to business objectives.
• Elevate the security culture across the organization by serving as a subject matter expert, mentoring engineering teams, and leading incident response efforts from investigation through mitigation and prevention.
• Maintain the security foundation through thorough documentation — including security requirements, guidelines, and incident response plans — and hands-on penetration testing and code reviews to simulate and get ahead of real-world threats.

The Team You'll Join

• You will join a growing Information Security team at Recursion, focused on enabling Recursion to decode biology by providing world class technology services that are designed and fit for purpose. You'll collaborate with your teammates and across departments to agree on what the most important challenges and capabilities are, then figure out how to get us there.

The Experience You'll Need

• Education & Tenure: Bachelor's or Master's degree in Computer Science, Information Security, or a related field, with 10+ years of experience in product security or application security and a proven track record securing complex products.
• Security Fundamentals: Deep understanding of security principles, threats, and countermeasures as they relate to product design and development, with familiarity across standards and frameworks including OWASP, NIST, ISO/IEC 27001, and CVSS-based vulnerability prioritization.
• Offensive Security & Penetration Testing: Hands-on proficiency with penetration testing frameworks and tools (Metasploit, Burp Suite, Nmap, Wireshark), web application attack techniques (SQL injection, XSS, CSRF, OWASP Top Ten), and the ability to simulate real-world attacks and assess their impact.
• Secure Development & Engineering: Expertise in one or more programming languages (e.g., Python, Java, C++) with strong command of secure coding practices, encryption standards, and integrating security tooling into CI/CD and development workflows.
• Enterprise AI Security: Demonstrated experience securing AI/ML systems and LLM-powered or agentic products in production — including familiarity with AI attack surfaces (prompt injection, data poisoning, model extraction, membership inference, RAG poisoning) and hands-on red-teaming of AI pipelines and agentic workflows.
• AI Frameworks & Supply Chain Risk: Working knowledge of AI security frameworks (OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF, EU AI Act) and experience vetting third-party foundation models, open-source weights, and AI APIs as part of a structured supply chain security program.
• MLOps & Model Security: Familiarity with securing ML infrastructure — including training pipelines, experiment tracking, model registries, and inference endpoints — and designing least-privilege access controls for AI agents with external system or tool access.
• Leadership & Communication: Excellent communication and influencing skills, with the ability to drive security initiatives across engineering, legal, privacy, and executive stakeholders and mentor teams on security best practices.
• Certifications (Highly Desirable): CISSP, OSCP, or GWAPT for core security credentialing, plus AI-focused certifications such as GAISC, Offensive ML (OffSec), or cloud provider AI security tracks (AWS/GCP).

Working Location & Compensation:

Making SLC your home base is ideal, however, we will consider remote work for this position. We ask that remote employees commit to regular on-site visits for routine work and departmental events.

At Recursion, we believe that every employee should be compensated fairly. Based on the skill and level of experience required for this role, the estimated current annual base range for this role is $186,900 to $220,400 (USD). You will also be eligible for an annual bonus and equity compensation, as well as a comprehensive benefits package. 

#LI-BO1

#LI-REMOTE

ABOUT THIS ROLE

LVT is seeking a highly skilled and motivated Systems Engineer III to join our growing technology team. This role will be pivotal in managing and optimizing our identity and access management (IAM) infrastructure, with a primary focus on Okta. The ideal candidate will have deep expertise in Okta administration, configuration, and integration, as well as a strong understanding of SaaS-based applications and their connectivity. Experience with cloud infrastructure platforms is a significant plus. As a Systems Engineer III, you will be responsible for ensuring the security, reliability, and efficiency of our critical systems and contributing to strategic technology initiatives.

ROLE RESPONSIBILITIES

Okta Management & Administration:

• Serve as the primary subject matter expert (SME) for our Okta platform, including user and group management, SSO configuration, MFA policies, lifecycle management, and integrations.
• Design, implement, and maintain Okta workflows and automation to streamline user provisioning, de-provisioning, and access controls.
• Troubleshoot and resolve complex Okta-related issues, providing timely and effective support to end-users and other IT teams.
• Develop and maintain comprehensive documentation for Okta configurations, processes, and best practices.
• Stay up-to-date with the latest Okta features, updates, and security best practices.

SaaS Application Integration & Management:

• Plan, implement, and manage integrations between Okta and various SaaS applications (e.g., Salesforce, Google Workspace, Microsoft 365, etc.).
• Ensure seamless and secure access to SaaS resources for employees.
• Collaborate with application owners to understand their integration requirements and provide technical guidance.
• Monitor the health and performance of SaaS integrations.

Security & Compliance:

• Implement and enforce security policies and best practices within Okta and integrated SaaS applications.
• Participate in security audits and compliance initiatives related to identity and access management.
• Identify and mitigate potential security risks and vulnerabilities within the Okta environment.

Automation & Scripting:

• Develop and maintain scripts (e.g., Okta Workflows, Workato, etc.) to automate routine tasks and improve operational efficiency.

Collaboration & Communication:

• Work closely with other IT teams (e.g., Security, Networking, Applications) to ensure the smooth operation of all systems.
• Communicate effectively with technical and non-technical stakeholders regarding system changes, outages, and project updates.
• Participate in project planning and execution, providing technical expertise and guidance.

Cloud Infrastructure (Nice to Have):

• Experience with cloud platforms such as AWS, Azure, or GCP.
• Familiarity with cloud identity and access management concepts and services.
• Ability to integrate Okta with cloud-based resources and services.
• Understanding of infrastructure-as-code (IaC) principles and tools.

Problem Solving & Troubleshooting:

• Analyze and resolve complex technical issues related to Okta, SaaS applications, and potentially cloud infrastructure.
• Develop and implement effective solutions to prevent recurring problems.

OUR IDEAL CANDIDATE

• Bachelor's degree in Computer Science, Information Technology, or a related field (or equivalent experience).
• Minimum of 5 years of experience in systems engineering or a related IT role.   
• Extensive hands-on experience with Okta administration, configuration, and integration is mandatory.
• Proven experience integrating Okta with various SaaS applications.
• Strong understanding of identity and access management principles (e.g., SAML, OAuth, OpenID Connect).
• Proficiency in scripting languages such as PowerShell or Python, with experience in automating workflows through APIs.
• Excellent problem-solving, analytical, and troubleshooting skills.
• Strong communication, collaboration, and interpersonal skills.
• Ability to work independently and as part of a team.
• Excellent documentation skills.

Awardco is reimagining the workplace to be more rewarding, supportive, and fun for everyone. As one of the fastest-growing companies in the employee experience industry, our mission is to help employees love what they do, love where they work, and get recognized for their efforts—especially our own employees! And as winners of Glassdoor’s Best Places to Work, Best in Brightest in the Nation, and Great Place to Work, we do much more than talk the talk.

We’re looking for an Application Security Engineer joining our IT & Security team to build and mature our application security program as we continue to scale our SaaS platform. In this role, you’ll partner closely with product, engineering, and operations teams to design, build, and ship secure features — without slowing down creativity and innovation. You’ll own the secure software development lifecycle, lead security reviews for new capabilities, and help drive a culture where every engineer treats security as part of quality.

You’ll also play a key role in enabling developers, building the skills and tooling they need to own security in their code through secure coding guidance, training, and a strong Security Champions program. If you enjoy rolling up your sleeves, solving real-world security problems, and making cloud products safer by design, this role is for you.

What you will do:

• Embed security checkpoints into planning, design, development, testing, and release processes.
• Partner with engineering leads to ensure new features ship with security built in, not bolted on.
• Facilitate threat modeling for new services, APIs, and integrations.
• Recommend secure patterns and architectures for multi-tenant SaaS and cloud-native components.
• Perform targeted secure code reviews for high‑risk features and components.
• Configure and tune SAST, DAST, dependency, and container scanning to reduce noise and highlight real risk.
• Integrate and optimize AI-assisted application security tools (e.g., GitHub Advanced Security, Snyk, Wiz, or similar) within developer workflows to improve signal and remediation speed.
• Help define and maintain secure coding standards and patterns used across engineering teams.
• Triage, prioritize, and track remediation of application and API vulnerabilities across the stack.
• Advise on secure use of authentication, authorization, cryptography, and data protection controls.
• Help evaluate and integrate third‑party services and SDKs from a security perspective.
• Provide clear, technical explanations of findings, mitigations, and residual risk.
• Build and deliver pragmatic secure coding training tailored to our tech stack and common issues.
• Create playbooks, checklists, and self‑service guidance for developers to help them ship secure code independently.
• Champion a “secure by default” mindset across product and engineering.
• Grow and enhance the Security Champions program, mentoring developers to act as local security advocates on their teams.
• Assist with investigation and remediation for application‑level security incidents.
• Help improve detection, logging, and alerting for application and API misuse.

What you will bring:

• 6+ years of experience in application security or in software engineering with a strong security focus for web applications or APIs.
• Hands‑on experience securing cloud‑hosted, multi‑tenant SaaS applications on a major public cloud platform.
• Strong understanding of web and API security fundamentals (authentication, authorization, session management, data validation, encryption, multi‑tenant isolation, etc.).
• Deep familiarity with the OWASP Top 10, common vulnerability classes, and practical exploitation/remediation techniques.
• Experience with one or more modern programming languages (for example: JavaScript/TypeScript, Java, C#, Python, or Go) and the ability to read and reason about production code.
• Hands‑on experience with application security tooling, such as Static analysis (SAST), Dynamic analysis (DAST), Dependency and container scanning, and API security testing tools or frameworks.
• Experience working with modern and AI-assisted security tooling (e.g., GitHub Advanced Security, Snyk, Wiz, or similar) and integrating them into CI/CD pipelines to improve developer experience and reduce risk.
• Solid understanding of CI/CD pipelines and how to integrate security testing into automated workflows.
• Ability to translate complex security issues into clear, actionable guidance for engineers and product partners.
• Comfortable balancing risk, user experience, and delivery timelines in a fast‑moving environment.
• Strong ownership mindset and Collaborative, low‑ego approach with a focus on building trust and partnership across teams.
• Demonstrated ability and desire to train and mentor developers in secure coding best practices, enabling them to confidently build and ship secure features over time.

Nice to Have (Bonus Points, Not Requirements)

• Experience helping support or respond to external pen tests, bug bounty reports, or coordinated disclosure.
• Background working with compliance or regulatory frameworks (e.g., SOC 2, ISO 27001, PCI DSS) from the engineering side.
• Relevant security certifications (e.g., OSWE, OSCP, GWAPT, CSSLP) or an equivalent track record of hands-on work.

Why Awardco:

• We have a revolutionary, client-approved product.
• One of the fastest growing companies in the nation: 3x Inc. 500, 2x Deloitte Technology Fast 500, 2x Mountain West Capital Network Fast 100, 3x Fast 50 (Utah Business), and 3x UV50 Fastest Growing Companies (BusinessQ), to name just a few.
• Great Place to Work certified, ranked in Inc. Best Workplaces, one of the Best and Brightest companies to work for, and ranked on the Salt Lake Tribune's Top Workplaces.
• Backed by renowned investors, both local and national.

About us: Midgley-Huber is a leading HVAC manufacturer’s representative serving the commercial and industrial markets across Idaho and Utah. We partner with top manufacturers to deliver engineered HVAC solutions that support efficiency, performance, and long-term value for our customers. As part of the Ambient Enterprises family of brands, Midgley-Huber offers a collaborative, people-first culture with the stability of an established organization and the growth opportunities of a company continuing to expand.

About the role: We are seeking a motivated and results driven Outside Salesperson to generate new business, manage existing accounts, and drive revenue growth within an assigned territory. This role focuses on selling HVAC equipment and systems, to commercial customers, including contractors, engineers, property managers, and building owners

The Outside Sales Engineer is responsible for the following job duties:

• Develop and execute strategic sales plans to meet or exceed sales goals and targets.
• Identify and qualify new business opportunities through cold calling, networking, and field prospecting.
• Build and maintain long-term relationships with customers, contractors, and engineering firms.
• Conduct site visits and HVAC system evaluations to understand client needs.
• Prepare and deliver professional proposals, quotes, and presentations.
• Collaborate with internal engineering, estimating, and service teams to ensure accurate and timely project delivery.
• Stay informed on industry trends, products, competitors, and market conditions.
• Maintain CRM records and submit regular sales reports.

Experience:

• Proven outside sales experience in the commercial HVAC industry (3+ years preferred).
• Strong technical understanding of HVAC systems, controls, and design applications.
• Excellent communication, negotiation, and interpersonal skills.
• Self-motivated and able to work independently in a commission-based environment.
• Proficiency with CRM tools and Microsoft Office Suite.
• Valid driver’s license and reliable transportation.
• Bachelor’s degree in business, Engineering, or a related field is a plus.

Critical Skill Set:

• Must be extremely detailed oriented and self-motivated
• Customer service and sales driven
• Solid interpersonal communication skills, both verbal and written
• Successful negotiator
• Thrives in a fast paced, multi-task environment

Compensation:

• 100% Commission-Based Compensation with uncapped earning potential
• Mileage reimbursement or company vehicle (as applicable)
• Performance incentives and bonuses
• Training and professional development opportunities
• Additional benefits such as phone reimbursement, vehicle reimbursement, health insurance, 401(k), etc.

Compensation: 100% Commission-Based Compensation with uncapped earning potential

Midgley-Huiber is a part of Ambient. Ambient is a collective of HVAC design and implementation experts,
each entity esteemed in their respective regions, with decades 
of experience. Our experts merge craft with care, delivering safety, 
comfort, and highly efficient, sustainable solutions for spaces that 
matter most: healthcare, commercial, and residential. We have over 1k employees across the US and Canada. Midgley-Huber provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.