Staff Information Security Engineer

The Staff Information Security Engineer is expected to understand complex technology systems and tools in both the traditional Information Technology and Service Provider domains. It is essential for this role to maintain awareness of security trends, government regulations and 3rd-party standards (NIST, ISO), as well as to monitor developments in systems, protocols, tools, and other changes in the information security space. Additionally, the staff engineer understands and supports the business environment in which security operates.

This role requires collaboration with architects, senior-level engineers, management, and stakeholders inside and external to the organization, both to ensure awareness of security risks and to ensure appropriate mitigation steps are taken.

• Bachelor’s degree or equivalent combination of education and relevant experience. Advanced Degree preferred., * A minimum 10 years of related industry experience, or equivalent mix of education and related experience.
• Deep knowledge of security and telecommunications protocols and architectures
• Proficient in one or more scripting language (Python, PowerShell, or equivalent)

Preferred Experience:

• Experience with asset discovery and logical asset management
• Solid understanding of authentication and identity technologies (IAM, SSO, RADIUS, TACACS+, AD/LDAP/Kerberos)
• Experience with compliance frameworks, particularly NIST CSF, NIST 800-53, and/or ISO 27001
• Experience with administration of Splunk, Splunk ES or other SIEM platforms
• Familiarity with Infrastructure as Code and automation tools (Terraform, Ansible, git)
• Familiarity with AWS, Microsoft Azure, and Office 365 security controls (e.g., IAM, PIM, Identity Governance, Azure Policies, Entra, Intune, DLP, IaaS)
• Familiarity with EDR/MDR/XDR platforms
• Experience with security incident response
• Strong understanding of operating systems and command line administration at all levels.
• Strong understanding of TCP/IP networking protocols at all layers of the OSI stack
• Understanding of the HTTP protocol, Web Application Firewall (WAF) technologies, BurpSuite testing, and APIs
• Understanding of PKI, SSL/TLS, and cryptographic functions
• Experience working in micro-segmented environments

• Comfortable with regular expressions

• Current relevant industry certifications (SANS/GIAC, etc.), Azure or AWS architecture or security certifications.

Key Competencies:

• Excellent oral and written communication skills
• Excellent critical thinking, analytical, and engineering skills, including the ability to independently analyze and understand both new technologies and legacy solutions.
• Demonstrated commitment to ongoing skills development

Segra offers a very robust benefits package to our full-time employees, some of which include:

• Medical, dental, vision insurance
• Life insurance
• 401(k) match
• Flexible Spending/Health Savings Accounts
• Tuition and gym reimbursements
• Vacation/PTO, paid holidays, floating holidays
• Volunteer days, parental leave
• Legal, accidental, hospital indemnity, identify theft, pet insurance

Our Commitment to Equality:

Segra is an equal opportunity employer and prohibits discrimination of any kind. Segra does not discriminate on the basis of race, color, religion, sex (including pregnancy and gender identity), national origin, political affiliation, sexual orientation, marital status, disability, genetic information, age, membership in an employee organization, retaliation, parental status, military service, or other non-merit factor.

Salary Range: $116,025 - $140,000

Segra owns and operates a wide and dense fiber-optic infrastructure footprint that provides state-of-the-art connectivity, cybersecurity, voice, cloud and colocation solutions, all backed by industry-leading service and reliability. Serving over 30,000 connected customer locations, Segra has been providing customer-focused solutions for over 125 years.

At Segra, we imagine, we engineer and we build a world of opportunities for our customers through fiber-enabled technologies, driven by our customer-first mentality. We invest in the communities we serve by hiring locally, empowering our teams, and continually upgrading our network infrastructure to deliver smarter, stronger technology solutions.