RemoteLeaf Logo
Log in Sign up

Staff Security Engineer (Top Secret Clearance Required)

4 hours, 5 minutes ago
United States, Middle East
Full-time
Lead
Security Engineer
Cybersecurity
Go gRPC HashiCorp Vault OpenID Connect OWASP Penetration Testing SAML TLS
Apply Now
Orbis

Orbis

Orbis specializes in providing comprehensive analysis and insights into the digital domain through its Digital Landscape Discovery service, which systematically collects, processes, and interprets digital information to support national security initia...

Professional Services
11-50
Founded 2008
View All Jobs 11

Description

  • Define authentication and authorization architecture, including OIDC, OAuth2, SAML, RBAC, and ABAC patterns.
  • Set reliability and security strategy for the trust layer, including SLOs/SLAs, safe credential revocation, and access-control incident response.
  • Participate in on-call operations, incident triage and mitigation, and post-incident reviews for the data platform.
  • Build secure-by-default developer patterns, credential lifecycle automation, and hardened mTLS service-to-service communication.
  • Own security-layer QA strategy, threat modeling, adversarial testing, and deployment quality gates such as SCA, SAST, and container scanning.
  • Implement and review session, token, and authentication systems for security, testability, and operational readiness.
  • Architect encryption at rest and in transit, key hierarchies, and HSM/KMS integrations.
  • Partner with security and IT teams on identity, networking, observability, service mesh configuration, and industry-standard compliance.
  • Lead vulnerability discovery efforts, including penetration tests, red-team exercises, and security assessments.
  • Mentor senior engineers and establish security standards, documentation, and technical direction.

Requirements

  • Active Top Secret security clearance.
  • 7+ years of experience shaping platform-wide or infrastructure security architecture.
  • Ability to travel internationally to the Middle East and geopolitical hot zones up to 25% per calendar year.
  • Hands-on experience with mTLS/TLS trust systems, certificate issuance, x.509 validation, CA bundle management, and key rotation.
  • Experience building authorization engines and policy models, including interfaces used by other engineers.
  • Strong knowledge of JWTs, token issuance and verification, credential grants, session semantics, and revocation in federated or multi-tenant environments.
  • Fluency in Go and protobuf/gRPC service design, including securing gRPC and service-mesh communications.
  • Threat-modeling experience across host and plugin boundaries, enrollment flows, and tenant-isolation risks.
  • Ability to communicate security trade-offs and align customers, product leaders, and engineering teams.
  • Experience with secure multi-tenant APIs, Cedar or OPA, secure node enrollment flows, or national security, intelligence, or defense environments (preferred).

Benefits

  • Competitive retirement matching.
  • PTO policy that encourages meaningful time off.
  • Comprehensive benefits package for employees and their families.
  • Work arrangements may include customer-site, office-based, hybrid, or fully remote work depending on mission needs.
  • Tools and access provided to support work across locations.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Swapcard

Security Engineer - SecOps & Cloud

Swapcard 201-500 Professional Services

Swapcard is hiring a Security Engineer to strengthen cloud, endpoint, and application security for its remote-first AI-powered event platform.

Spain India Europe Austria Belgium Greece Hungary Ireland Poland Portugal Romania Turkey Full-time Mid Level Security Engineer
AWS CI/CD Helm Kubernetes Terraform
3 hours, 35 minutes ago
Spektrum Group

Cloud / M365 Security Engineer

Spektrum Group 1-10 Professional Services

Spektrum is seeking a Cloud / M365 Security Engineer to secure, monitor, and strengthen Microsoft 365 and cloud environments supporting NATO mission-critical digital capabilities.

Slovakia Spain Bulgaria Czech Republic Greece Hungary Italy Poland Portugal Romania Contract Lead Security Engineer
AWS SIEM
4 hours, 5 minutes ago
Kyivstar

Security Engineer

Kyivstar 1001-5000 Wireless Telecommunication Services

Kyivstar.Tech is seeking a Cyber Security specialist to design and implement cloud infrastructure and corporate data protection solutions.

Anywhere Full-time Mid Level Security Engineer
AWS Azure Cybersecurity GCP PowerShell Python Secrets Management
4 hours, 5 minutes ago
Coupa Software

Sr Security Engineer - 11924

Coupa Software 1001-5000 Internet Software & Services

Coupa is seeking a Senior Security Engineer to build and automate cloud security controls that protect its enterprise, platform, products, and customer data across a multi-cloud environment.

India Full-time Senior Security Engineer
AWS Azure Bash CI/CD GCP JavaScript Kubernetes Python
4 hours, 5 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers