[Hiring] Principal Security Engineer Cloud and Infrastructure Security @Quest

Role Description

The architecture set in this role decides which certifications One Identity can hold and which markets we can sell into. That is unusual commercial weight for an engineering seat, and it comes with a mandate from leadership to build the program behind it.

We sell on-premises and hosted solutions. Some products run as hosted services we operate in Azure and AWS. Others ship as software customers deploy in their own datacenters. Infrastructure security here has two audiences: the environments we run, and the base images, container definitions, and deployment defaults we publish, which become part of every customer's environment. A hardening decision made once is inherited by everyone who deploys it.

We're separating from Quest Software and building an independent security function. The team is lean and globally distributed, and this role is its senior technical voice. Scope comes from what you design and automate, and from what engineering chooses to adopt.

What you'll do

• Shape the architecture
• Own security architecture across Azure and AWS: tenant, subscription and account design, network segmentation and traffic control, private connectivity, egress policy, workload isolation.
• Run our own products against real security requirements and tell us what you find.
• Bring engineering into architectural decisions early.
• Raise the engineering bar
• Teams already build with infrastructure as code across both clouds.
• Extend policy as code across the pipeline and the platform.
• Own the hardened image pipeline for virtual machines and containers.
• Secure the container orchestration layer.
• Set the security architecture for AI workloads.
• Reduce exposure and prove it
• Own infrastructure vulnerability and exposure management end to end.
• Elevate cloud posture and workload protection into a single practice.
• Drive the decisions on where agentic workflows belong in security engineering.
• Build so control evidence can be produced by query.

Qualifications

• Ten or more years in security engineering or infrastructure engineering, with substantial time in cloud architecture.
• Deep cloud security architecture experience across Azure and AWS.
• Hands-on work securing AI workloads or AI-enabled tooling within the last six months.
• Something you built that engineering teams adopted and kept using.

Requirements

• Enough seniority in infrastructure as code to improve on what strong teams already do.
• Network security fundamentals applied to cloud.
• Container and Kubernetes security, image hardening, supply chain integrity, and secrets management.
• Policy-as-code frameworks and a view on where enforcement belongs in the lifecycle.
• Controls you designed that held up under an audit you were personally accountable for.
• Judgment about which risks to carry and which to escalate.

Benefits

• Collaborate with dedicated professionals with a passion for technology.
• Opportunity to build and develop products at a scale few others can provide.
• Enhanced career opportunities for team members to learn and grow.
• Health and wellness priority for team members.
• Programs that enable team members to pursue fulfilling careers.

Company Description

One Identity enables organizations of all sizes to better secure, manage, monitor, protect, and analyse information and infrastructure to help fuel innovation and drive their businesses forward.

With team members around the globe, we intend to continue to grow revenues and add value to customers.

When you join our team, you will have the opportunity to build and develop products at a scale few others can provide.

Our product portfolio serves a large base of customers and we are addressing the strategic imperatives for enterprise businesses.

Working with some of the most talented employees the industry has to offer, we provide enhanced career opportunities for team members to learn and grow in a rapidly changing environment.