Note: The job is a remote job and is open to candidates in USA. Florida Crystals is a fully integrated cane sugar company seeking a Principal Information Security Engineer to serve as the technical lead for securing its enterprise IT environment. The role designs, implements, and operates security controls across hybrid and cloud-first environments, leads Zero Trust and microsegmentation initiatives, and partners with infrastructure, cloud, application, and operations teams on enterprise security architecture and execution.
Responsibilities
- Design, implement, and operate enterprise security controls across endpoints, servers, business applications, data, cloud and on-prem infrastructure, mobile, and networking, including firewalls, IDS/IPS, secure remote access, VPN, ZTNA, and network access control
- Lead the design and rollout of network microsegmentation and zone-based architectures using technologies such as identity-based segmentation, VLANs, next-generation firewalls, and policy-based controls across on-premises and cloud environments
- Function as a Subject Matter Expert (SME) for security integrations and authentication elements, including firewall and network security, conditional access, VPN, Zero Trust network architecture, SSO federation, MFA, and email security solutions
- Engineer and maintain secure connectivity between corporate IT and plant networks where those environments interconnect, applying least-privilege and defense-in-depth principles at the IT/OT boundary
- Collaborate with network, infrastructure, cloud, and application teams to design and review security architectures for new and existing business systems, SaaS platforms, and infrastructure services
- Implement and administer security tools and platforms across endpoints, servers, network, identity, and cloud environments, including EDR, SIEM/SOC integrations, vulnerability management, and secure remote access solutions
- Perform security engineering and threat modeling for enterprise systems and integrations, identifying and mitigating risks introduced by new connectivity, vendors, and technologies
- Develop, test, and maintain incident detection and response playbooks for enterprise security events, supporting the SOC and IT operations teams during investigations and recovery efforts
- Drive vulnerability management for network, infrastructure, and platform components and coordinate safe remediation activities across production business systems
- Contribute to and maintain security standards, reference architectures, and configuration baselines for data centers, cloud environments, corporate networks, and identity platforms
- Create, manage, and update Standard Operating Procedures, and coordinate cross-team communications and activities that improve and sustain operational security functions
- Provide mentorship and technical guidance to infrastructure, operations, and security team members on security best practices and secure design principles
- Stay current on threats and trends affecting enterprise IT environments and evaluate new solutions that support segmentation, identity, visibility, and protection objectives
- Implement, configure, and operate application allowlisting / default-deny Zero Trust endpoint tooling (e.g., ThreatLocker, AppLocker, Airlock, or equivalent), including policy design, ringfencing, exception governance, and integration with EDR and SIEM
Skills
- • Eight (8) or more years of hands-on experience as an Information Security Engineer or Network Security Engineer in enterprise environments
- • Significant experience designing and operating enterprise security controls such as firewalls, segmentation, VPN/ZTNA, NAC, EDR, and SIEM platforms at scale
- • Proven experience planning and executing network segmentation or microsegmentation programs, including firewall-based segmentation, SDN, or identity-based segmentation
- • Broad security experience in heterogeneous environments spanning diverse applications, systems, databases, SaaS solutions, and hybrid cloud and on-premises platforms
- • Demonstrated experience implementing and configuring application allowlisting / default-deny Zero Trust endpoint tooling (e.g., ThreatLocker, AppLocker, Airlock, or equivalent) in enterprise environments
- • Bachelor's degree in Information Systems, Computer Science, Engineering, or a related field, or equivalent experience
- • In lieu of a Bachelor's degree, eight (8) or more years of relevant professional experience will be considered
- • Strong expertise in network security, routing and switching fundamentals, firewalls, secure remote access, and segmentation or microsegmentation technologies
- • Experience designing and implementing Zero Trust-aligned architectures, including identity-aware access controls and least-privilege network policies
- • Expert understanding of cloud and on-premises security, identity and access management, multi-factor authentication, SSO federation, and related security protocols
- • Strong expertise with cloud security and firewall technologies, and a working understanding of security architecture models and application security
- • Demonstrated knowledge of common adversary tactics, techniques, and procedures (TTPs) and relevant network defense and intelligence frameworks
- • Ability to collect, analyze, and interpret technical data from multiple tools, including firewalls, SIEM platforms, EDR solutions, and vulnerability scanners, and produce clear, actionable recommendations
- • Awareness of how corporate IT environments interface with plant and OT systems, sufficient to design safe connectivity and segmentation at that boundary
- • Ability to create clear, concise documentation for IT leadership, business stakeholders, and technical teams, including architecture and design documents for new and pre-existing solutions
- • Strong communication, collaboration, and leadership skills, with the ability to influence cross-functional teams and drive alignment on critical security decisions and policies
- • Relevant certifications preferred, including CISSP, CCNP Security, CCSP, or comparable enterprise security and network-focused certifications
- • Working familiarity with manufacturing or plant environments and the IT/OT boundary is a plus
Benefits
- USA Remote or West Palm Beach, FL
Company Overview
Company H1B Sponsorship