Senior Security Engineer

Description

Silverfort is on a mission to bring identity security everywhere – to every human, machine, and AI agent, both on-prem and in the cloud. Our unique technology secures identities & access at runtime, in ways that weren’t possible before. With the broadest identity security platform in the market, trusted by more than 1,000 customers, including many Fortune 100 companies, Silverfort is uniquely positioned to lead the fast-growing identity security category.

Joining Silverfort means becoming part of a fast-moving team with a culture of innovation and collaboration, that goes above and beyond to help our customers and each other, on a journey to reshape the future of identity security.

We are looking for a Senior Security Engineer to join us. In this role, you will own, operate, and evolve our security engineering stack across email, network, identity, and emerging domains. You will be the day-to-day owner and administrator of our security tools - running, tuning, and hardening the controls already in place, leading new initiatives across ZTNA, secure browsing, and AI security, and partnering closely with IT, DevOps, and R&D to embed security into every layer of how Silverfort operates.

Responsibilities

• Own, administer, and operate the security controls and platforms across email security, network security, ZTNA, secure browsing, and emerging domains such as AI security

• Run the day-to-day administration of the security toolset: deployment, configuration, and policy management, upgrades and patching, health and availability monitoring, licensing, and integrations

• Drive identity & access security initiatives end-to-end: Zero Trust posture, Conditional Access, RBAC, identity lifecycle, access reviews, and governance

• Lead refinement and improvement of existing stack components, from configuration tuning and policy hardening to architecture-level changes

• Design and roll out new security initiatives end-to-end

• Build automation across the security stack: integrations, enrichment, response actions, etc.

• Partner with R&D and DevOps to embed security into design, deployment pipelines, and infrastructure as code

• Conduct threat modeling, secure design reviews, and risk assessments for new and changing systems

• Maintain clear operational documentation, runbooks, and architecture decisions to make your work repeatable and reviewable

Requirements

• 5+ years of experience in security engineering or equivalent hands-on security roles

• Strong hands-on experience across multiple security domains, with end-to-end ownership of at least one (e.g., identity & access, network, email, web, or endpoint security)

• Solid understanding of identity & access management: Zero Trust principles, Conditional Access, SSO, MFA, RBAC, identity lifecycle, and access governance

• Strong networking fundamentals: TCP/IP, DNS, segmentation, ZTNA, and modern remote access architectures

• Experience designing, deploying, administering, and operating security tools end-to-end

• Hands-on cloud security experience with at least one major provider (AWS or Azure), including IAM, network controls, and secure architecture patterns

• Programming and scripting skills (Python, Bash, or similar)

• Self-motivated and autodidactic, with a "do it yourself" mindset and the ability to deliver solutions end-to-end

• Strong collaboration and communication skills

• Background in AI security, LLM security, or securing AI-powered systems and workflows - an advantage