[Hiring] Principal Information Security Engineer @Florida Crystals / ASR Group

Role Description

The Principal IT Security Engineer reports to the Sr. Manager of Information Security and serves as the technical lead for securing the company's enterprise IT environment across data centers, cloud platforms, corporate networks, endpoints, and business applications. The role emphasizes enterprise security engineering, network and identity architecture, and the protection of the systems and data that run the business, with awareness of how corporate IT interfaces with plant and OT environments where those boundaries intersect.

The primary focus is to design, implement, and operate security controls for complex, hybrid, and cloud-first environments, with a strong emphasis on Zero Trust, microsegmentation, secure connectivity, identity, and defense-in-depth. This role partners closely with infrastructure, cloud, application, and operations teams to advance the security architecture and drive execution of the 1-3 year enterprise security and segmentation roadmap.

Qualifications

• Eight (8) or more years of hands-on experience as an Information Security Engineer or Network Security Engineer in enterprise environments.
• Significant experience designing and operating enterprise security controls such as firewalls, segmentation, VPN/ZTNA, NAC, EDR, and SIEM platforms at scale.
• Proven experience planning and executing network segmentation or microsegmentation programs, including firewall-based segmentation, SDN, or identity-based segmentation.
• Broad security experience in heterogeneous environments spanning diverse applications, systems, databases, SaaS solutions, and hybrid cloud and on-premises platforms.
• Working familiarity with manufacturing or plant environments and the IT/OT boundary is a plus.
• Demonstrated experience implementing and configuring application allowlisting / default-deny Zero Trust endpoint tooling (e.g., ThreatLocker, AppLocker, Airlock, or equivalent) in enterprise environments.

Requirements

• Bachelor's degree in Information Systems, Computer Science, Engineering, or a related field, or equivalent experience.
• In lieu of a Bachelor's degree, eight (8) or more years of relevant professional experience will be considered.
• Relevant certifications preferred, including CISSP, CCNP Security, CCSP, or comparable enterprise security and network-focused certifications.

Benefits

• Strong expertise in network security, routing and switching fundamentals, firewalls, secure remote access, and segmentation or microsegmentation technologies.
• Experience designing and implementing Zero Trust-aligned architectures, including identity-aware access controls and least-privilege network policies.
• Expert understanding of cloud and on-premises security, identity and access management, multi-factor authentication, SSO federation, and related security protocols.
• Strong expertise with cloud security and firewall technologies, and a working understanding of security architecture models and application security.
• Demonstrated knowledge of common adversary tactics, techniques, and procedures (TTPs) and relevant network defense and intelligence frameworks.
• Ability to collect, analyze, and interpret technical data from multiple tools, including firewalls, SIEM platforms, EDR solutions, and vulnerability scanners, and produce clear, actionable recommendations.
• Awareness of how corporate IT environments interface with plant and OT systems, sufficient to design safe connectivity and segmentation at that boundary.
• Ability to create clear, concise documentation for IT leadership, business stakeholders, and technical teams, including architecture and design documents for new and pre-existing solutions.
• Strong communication, collaboration, and leadership skills, with the ability to influence cross-functional teams and drive alignment on critical security decisions and policies.

Location of Role

USA Remote or West Palm Beach, FL