Senior Security Solutions Engineer

• Lead architecture, design, implementation, migration, and optimization projects for enterprise customers.
• Design modern security solutions spanning identity, network security, SASE/SSE, cloud, endpoint, and security operations.
• Assess customer environments and identify security gaps, architectural risks, and modernization opportunities.
• Lead customer discovery sessions, architecture workshops, technical presentations, demonstrations, and solution reviews.
• Implement and integrate security technologies across complex multi-vendor environments.
• Troubleshoot complex security issues involving multiple technologies, platforms, and protocols.
• Develop HLDs, LLDs, implementation plans, runbooks, and customer-facing technical documentation.
• Support pre-sales activities including technical discovery, solution development, proof-of-concepts, and statements of work.
• Leverage APIs, scripting, automation, and Infrastructure as Code to improve security operations and deployments.
• Remain current with emerging security technologies, threats, AI, and industry trends., * Lead technical discussions with engineers, architects, IT leadership, and security executives.
• Translate business and security requirements into practical technical architectures.
• Communicate complex security concepts to technical and non-technical audiences.
• Understand dependencies across identity, endpoint, network, cloud, and security operations.
• Evaluate technologies based on customer requirements rather than a single-vendor approach.
• Independently lead technical portions of complex customer engagements while balancing security, usability, operational complexity, and business requirements., * Work across leading platforms from Cisco, Microsoft, Palo Alto Networks, Fortinet, CrowdStrike, Splunk, Zscaler, AWS, and other innovative security vendors.
• Solve complex security challenges for enterprise customers while participating in both pre-sales architecture and hands-on professional services delivery.
• Gain exposure to emerging technologies including Identity Security, Zero Trust, AI-assisted security operations, automation, cloud security, and Non-Human Identity.
• Continuous learning, professional certification, innovation, mentorship, and technical growth are core parts of our engineering culture.

Candidates should demonstrate strong technical depth in multiple areas and broad knowledge of modern enterprise cybersecurity.

Identity & Access Security: Microsoft Active Directory and Entra ID, Okta, Cisco Duo, MFA, passwordless authentication, Conditional Access, SAML, OAuth/OIDC, PKI, PAM, IGA, ITDR/ISPM, Non-Human Identity, Cisco ISE/NAC, and Zero Trust identity architectures.

Network Security & SASE: Palo Alto Networks, Cisco Secure Firewall, Fortinet, Zscaler, Cisco Secure Access, Prisma Access, NGFW, IPS, VPN, segmentation, NAC, SASE, SSE, and ZTNA. Strong understanding of TCP/IP, routing, switching, DNS, DHCP, TLS, certificates, proxies, and other networking technologies affecting security.

Cloud & SaaS Security: Microsoft Azure, AWS, Microsoft Defender, cloud IAM, CSPM, CIEM, workload protection, SSPM, cloud-native security monitoring, and hybrid-cloud security architectures.

Endpoint & Security Operations: Microsoft Defender XDR/Endpoint, CrowdStrike, Palo Alto Cortex, SIEM, SOAR, EDR/XDR, threat detection, vulnerability management, incident investigation, threat hunting, security analytics, and security automation. Experience with Microsoft Sentinel, Splunk, Cortex, FortiSIEM, and other enterprise security operations technologies.

Candidates are not expected to be experts in every technology listed. Strong technical depth in two or more major security disciplines combined with the ability to learn and work across adjacent technologies is highly valued., Professional-level certifications are strongly valued but may be substituted with equivalent hands-on engineering and consulting experience.

• Cisco: CCNP Security, CCIE Security, Cisco security specializations
• Palo Alto Networks: Professional or advanced Network Security, SASE, Cortex, or Cloud Security certifications
• Fortinet: FCP, FCSS
• Microsoft: Azure Security Engineer, Identity and Access Administrator, Cybersecurity Architect, Security Operations Analyst
• AWS: Security Specialty, Solutions Architect Professional
• Industry: CISSP, CCSP, GIAC or equivalent advanced security certifications

The pay range for this position is $155,000 - $175,000 per year. This range reflects the annual salary that Continental Resources reasonably and in good faith expects to pay for this position at the time of posting, consistent with the Massachusetts Pay Transparency Law (M.G.L. c. 149, § 105E)., * Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, Engineering, or equivalent professional engineering and consulting experience.

• 5+ years of hands-on enterprise cybersecurity, security engineering, architecture, or consulting experience.
• Demonstrated experience implementing enterprise security technologies in production environments.
• Experience leading customer-facing technical projects and creating architecture and implementation documentation.
• Experience in a VAR, systems integrator, MSP/MSSP, consulting organization, or enterprise architecture environment is highly desirable.
• Strong troubleshooting, analytical, communication, and customer-facing skills.