Principal Enterprise Security Engineer

Roles Description

The Principal Enterprise Security Engineer serves as the senior technical authority and strategic thought leader across corporate architecture, SaaS platforms, and workforce technologies. This individual will drive the long-term vision, design controls and paved paths that safeguard corporate assets while enabling business agility and innovation at scale.

This is a hands-on principal individual contributor role. You will combine enterprise security strategy and architecture with direct software engineering: personally designing, writing, reviewing, testing, and deploying code that secures our corporate environment.

Key Responsibilities:

• Strategic Leadership:

  • Define and maintain the end to end enterprise security architecture blueprint, covering endpoint, identity, network, and data.

  • Lead the architectural reviews of major enterprise technology initiatives ( e.g., AI adoption, zero trust modernization, vendor onboarding).

  • Establish architectural controls, paved paths and perform periodic maturity assessments.

• Hands-on Engineering and Delivery:

  • Design, build, and operate security services, internal tools, API integrations, and automation across identity, endpoint, SaaS, network, and data security.

  • Personally implement critical components and reference implementations, then partner with engineering teams to extend and adopt them.

  • Own the delivery lifecycle for key capabilities, including technical design, implementation, testing, deployment, monitoring, troubleshooting, and ongoing maintenance.

• Technical Subject Matter Expertise (SME):

  • Provide expert guidance on security best practices, technologies, and methodologies to engineering teams, and diagnose complex failures across code, APIs, identity flows, endpoints, networks, and cloud services. 

• Architecture & Design:

  • Review and influence the design of platform and service architectures, ensuring security is integrated from the outset. 

  • Provide risk-based architectural recommendations, influencing executive stakeholders and investment decisions.

• Improve org-wide productivity and safety

  • Develop reusable infrastructure, configuration, and policy as code to automate control deployment, drift detection, and remediation; reduce exception volume and shorten time-to-adoption through shared security capabilities.

  • Enable safe, rapid change through peer review, automated tests, and CI/CD for software, integrations, policies, and configuration, with staged rollouts and recovery plans.

• Collaboration:

  • Work closely with security teams, engineering partners, product leaders, and other principal architects to drive large-scale security initiatives. 

  • Serve as the architecture liaison between Corporate Security and Product Security, ensuring a unified security strategy across enterprise and customer-facing environments.

  • Serve as a role model for engineers and mentor security practitioners across multiple seniority levels. 

  • Lead code and design reviews, and mentor security engineers across corporate domains through implementation, debugging, and secure software development.

Preferred Requirements:

• 10+ years in cybersecurity or related engineering disciplines, including substantial experience leading complex technical initiatives at principal, staff, lead, or equivalent scope, with continued hands-on engineering contributions.

• Required Programming Proficiency: Demonstrated proficiency in at least one general-purpose programming language, such as Python, Go, or TypeScript, with recent experience writing, testing, debugging, and maintaining software used in production.

• Security Tooling and Integrations: Experience building security tools and integrations using APIs, SDKs, and event-driven workflows, including authentication, authorization, secrets management, error handling, and safe failure behavior.

• Engineering Delivery: A demonstrated record of personally shipping and operating security capabilities that measurably reduce risk or manual effort.

• Cloud Security Expertise: In-depth knowledge of cloud security architecture (AWS, GCP) and SaaS ecosystems ( Google workspace, Slack, Okta, etc).

• Deep implementation and troubleshooting expertise in one or more enterprise security domains, with working knowledge across identity and access management, endpoint security, data protection, network segmentation, and zero trust architecture.

• Excellent communication skills with the ability to simplify complex security concepts for executives and engineers.

How you’ll measure success (first 6–12 months)

• Strategy and alignment: Published enterprise security architecture vision and reference patterns; clear OKRs and metrics adopted by partner teams.

• Risk reduction: Measurable improvements in key risks (e.g., privileged access, SaaS misconfigurations, device posture, data exfiltration).

• Operational excellence: Defined SLOs for critical controls; improved MTTR/MTTD; reduction in control exceptions and manual toil.

• Adoption and productivity: Paved-road solutions adopted by multiple teams; faster time-to-implement with fewer escalations.