Jobs in the United States

25+ jobs

Save this search

Added 1 min ago
Sr Cyber Engineer
HealthEquity
United States
This role builds HealthEquity's defenses for these use cases on two of our core security platforms, Cloudflare and Palo Alto Networks. It also owns core engineering for both platforms,…
Added 2 mins ago
A
Software Engineer II
Aspirion
Columbus, GA
- $100,000 to $138,000 USD / year
We are seeking a Software Development Engineer (SDE II) to play a key role in designing, developing, and delivering high-quality software solutions to drive innovation and operational…
Added 4 mins ago
PowerShell Automation Engineer
Stefanini Group
Richmond, VA
Stefanini is looking for PowerShell Automation Engineer-Remote
Added 5 mins ago
Senior Financial Planning & Analysis Manager
cyberu
United States
Support software capitalization analysis with Accounting and track engineering efficiency metrics (e.g., R&D as a percent of revenue, cost per engineer)
Added 7 mins ago
Senior Presales Systems Engineer - HPE Networking
HPE
San Diego, CA
We are seeking a Senior Presales Systems Engineer with deep expertise in networking, security, cloud architecture, and automation to support enterprise and federal customers across complex…
Added 7 mins ago
Systems Analyst (Site Reliability Engineer) On-Sire, Oak Ridge, TN
HPE
All, TN
We are seeking a skilled Systems Analyst Site Reliability Engineer at HPE to support Oak Ridge National Labs in a security area that that requires a DOE Q clearance for access. This is a…
Added 7 mins ago
Systems Analyst (Site Reliability Engineer) On-Site, Oakridge, TN
HPE
All, TN
We are seeking a skilled Systems Analyst Site Reliability Engineer at HPE to support Oak Ridge National Labs in a security area that that requires a DOE Q clearance for access. This is a…
Added 7 mins ago
Presales Consultants
HPE
Sunnyvale, CA
The Presales Systems Engineer plays an important role in supporting the sale and adoption of advanced networking and security solutions. This position combines technical networking…
Added 9 mins ago
FS
Senior Software Engineer- DevOps
Four Sea Group, Inc.
Aurora, CO
- $140,000 to $232,000 USD / year
…containerization, monitoring, configuration management, and embedded security. The engineer will develop reusable automation and technical standards while solving difficult problems that…
Added 13 mins ago
Physical Security Systems Integration Engineer
Kastle Systems
Falls Church, VA · New York, NY
…run. That includes Kastle's APIs, such as event delivery to security and operations platforms; identity provisioning through SCIM with providers like Okta and Microsoft Entra; and…
Added 14 mins ago
TB
Data & Platform Engineer
Truist Bank
Richmond, VA · Atlanta, GA · Charlotte, NC
- $105,040 to $130,030 USD / year
The engineer combines strong expertise in SQL Server, Oracle, database performance tuning, data modeling, ETL/ELT development, API integration, and AWS data services to build and support…
Added 14 mins ago
TI
Software Engineer
Trimble Inc.
Westminster, CO
- $144,600 to $198,800 USD / year
Partner with cross-functional product, platform, and security teams to uncover high-impact automation opportunities and turn them into scalable products.
Added 18 mins ago
PowerShell Automation Engineer
Stefanini Group
Richmond, VA
Stefanini is looking for PowerShell Automation Engineer-Remote
Added 22 mins ago
Senior Presales Systems Engineer - HPE Networking
Hewlett Packard Enterprise
San Diego, CA
We are seeking a Senior Presales Systems Engineer with deep expertise in networking, security, cloud architecture, and automation to support enterprise and federal customers across complex…
Added 22 mins ago
Systems Analyst (Site Reliability Engineer) On-Sire, Oak Ridge, TN
Hewlett Packard Enterprise
All, TN
We are seeking a skilled Systems Analyst Site Reliability Engineer at HPE to support Oak Ridge National Labs in a security area that that requires a DOE Q clearance for access. This is a…
Added 22 mins ago
Systems Analyst (Site Reliability Engineer) On-Site, Oakridge, TN
Hewlett Packard Enterprise
All, TN
We are seeking a skilled Systems Analyst Site Reliability Engineer at HPE to support Oak Ridge National Labs in a security area that that requires a DOE Q clearance for access. This is a…
Added 22 mins ago
Presales Consultants
Hewlett Packard Enterprise
Sunnyvale, CA
The Presales Systems Engineer plays an important role in supporting the sale and adoption of advanced networking and security solutions. This position combines technical networking…
Added 25 mins ago
Developer Experience Engineer-AI Infrastructure Operations
Nscale
NY
…You'll take real surface area: the CI/CD, GitOps, and change automation that Nscale's engineers use every day to ship. Internal developers are your customers, and you'll be expected to make…
Added 28 mins ago
H
Security Engineer (Detection & Response)
Headway
Remote, United States
- $182,750 to $215,000 USD / year
- AI security tooling and automation: Implement automation and AI where it's the right tool for the job - and push back when it isn't. You'll help define what "AI-forward" detection and…
Added 29 mins ago
PowerShell Automation Engineer
Stefanini Group
Richmond, VA
Stefanini is looking for PowerShell Automation Engineer-Remote
Added 30 mins ago
Application Operations Analyst
VIATEQ Corporation
Washington, DC
…detail, excellent customer service skills, and a commitment to security and compliance in all application support activities. While escalating complex issues to the Senior Application…
Added 30 mins ago
Zscaler Integration Engineer - Mid
VIATEQ Corporation
Washington, DC
VIATEQ Corporation is looking for a Zscaler Integration Engineer (Mid) to support enterprise network security operations and IT administrative and operational support services for a federal…
Added 30 mins ago
DevOps Cloud Engineer - EviCore - Remote
eviCore healthcare MSI, LLC
Remote, United States
…DevOps and SecOps practices while accelerating the adoption of automation, cloud technologies, security, operational excellence, and AI…
Added 30 mins ago
Systems Engineer - Atmospheric Systems
Brooks Automation US LLC
Fremont, CA
Brooks Automation participates in E-Verify® to confirm eligibility for employment in the United States. For more details, visit www.dhs.gov/E-Verify. E-Verify® is a registered trademark of…
Added 30 mins ago
IG
Hybrid (NYC) - Campus Network Engineer
Insight Global
San Jose, CA
- $150,000 to $160,000 USD / year
We are seeking an experienced Senior Campus Network Engineer with significant automation experience to design, deploy, migrate, and operate enterprise campus networks, with a strong focus…

Calix North America

Staff Security Engineer - Calix Cloud

Remote, United States

Apply About employer

Applications open in a new tab.

Job details

Posting language: English
Posted: Nov 3, 2026

Original job description

The Calix platform enables Communication Service Providers (CSPs) of all sizes to transform and future-proof their businesses. Through real-time data, automation, and actionable insights delivered via Calix One - our cloud-first, AI-powered platform - CSPs can simplify operations, collapse cost, and accelerate innovation. Calix One brings together the automation of everything and the experience of one, empowering customers to deliver differentiated subscriber experiences while driving acquisition, loyalty, and revenue growth. This is the Calix mission: to enable CSPs of all sizes to simplify, innovate, and grow, strengthening both their businesses and the communities they serve.

We’re at the forefront of a once in a generational change in the broadband industry. Join us as we innovate, help our customers reach their potential, and connect underserved communities with unrivaled digital experiences.

Calix is where passionate innovators come together with a shared mission: to reimagine broadband experiences and empower communities like never before. As a true pioneer in broadband technology, we ignite transformation by equipping service providers of all sizes with an unrivaled platform, state-of-the-art cloud technologies, and AI-driven solutions that redefine what’s possible. Every tool and breakthrough we offer is designed to simplify operations and unlock extraordinary subscriber experiences through innovation.

We’re looking for a Staff Security Engineer to define and strengthen the trust architecture connecting our devices, customers, and cloud platform. In this highly influential, hands-on role, you’ll serve as a senior technical authority across device identity, PKI, cloud and workload identity, secure device-to-cloud communications, and embedded security. You’ll partner across device, network, mobile, and cloud engineering teams to design resilient security architecture, pressure-test it through threat modeling and offensive testing, and drive solutions from design through production.

What you'll do

Design and run our PKI on GCP: offline root, HSM-backed issuing CAs in Certificate Authority Service, certificate profiles, and key ceremonies.
Define device identity: unique keys in a secure element or TPM, factory provisioning, field enrollment (for example EST), rotation, revocation, and a tested plan for CA key compromise.
Architect workforce, workload and customer identity: SSO and Workforce Identity Federation, Workload Identity Federation instead of service account keys, and OAuth 2.0 and OIDC flows for apps and devices.
Secure the path from device to cloud: mutual TLS, per-device authorization, and protection against replay, cloned devices and fleet-wide denial of service.
Own security of the ingestion layer on GCP (self-operated MQTT brokers and gateways on GKE feeding Pub/Sub, Dataflow and BigQuery), since Cloud IoT Core was retired in 2023.
Secure remote commands and over-the-air updates so a compromised cloud account cannot push malicious firmware to the fleet.
Set on-device requirements: secure boot, signed and rollback-protected firmware, encrypted storage, locked debug ports, and a hardened OS image.
Test devices hands-on: firmware analysis, hardware and local-interface attacks (Bluetooth, Wi-Fi, USB, serial), and protocol fuzzing; secure the companion mobile apps.
Govern the firmware supply chain: SBOMs, vulnerability management, signing-key custody, and manufacturer and silicon-vendor assessments.
Build threat models for the full device, app, gateway and cloud system (STRIDE, attack trees, MITRE ATT&CK), and run pentests, red-team and purple-team exercises.
Set GCP guardrails: organization policy, VPC Service Controls, IAM, Cloud KMS, GKE hardening, Binary Authorization, and secure CI/CD and data pipelines (BigQuery, Dataflow, Datastream, Kafka).
Map controls to ISO 27001, SOC 2, NIST CSF, CIS Controls, ETSI EN 303 645, NIST IR 8259, GSMA baseline controls and FCC CPNI rules.
Be the escalation point for hard security decisions and incidents, mentor senior engineers, and brief executives.

Required qualifications

BS or MS in computer science, information security or cryptography, or equivalent experience.
10+ years in security engineering, with deep ownership of at least two of: PKI, identity and access, device security, or cloud security architecture.
PKI depth: X.509 profiles, CA hierarchy design, HSM and key management, certificate lifecycle automation, revocation at scale, and protocols such as EST, SCEP and ACME. Experience with GCP Certificate Authority Service or a comparable managed CA.
Identity depth: OAuth 2.0, OIDC, SAML, SSO and federation; running or integrating an enterprise IdP; designing token and session security for apps and devices.
Strong GCP security experience: IAM, Workload Identity Federation, Cloud KMS, VPC Service Controls, GKE and container security, Security Command Center, and securing data pipelines (BigQuery, Dataflow, Datastream, Kafka).
Applied knowledge of secure device-to-cloud communication: mutual TLS, MQTT and gRPC security, broker and gateway hardening, and OTA update integrity.
Hands-on device and embedded security skills: secure boot, TPM or secure element use, firmware analysis, hardware debug interfaces, and mobile app security on Android and iOS.
Hands-on offensive skills and the ability to threat-model a full device-to-cloud system; you write tooling in Python, Go or similar.
Experience with CI/CD and DevSecOps security, and with ISO 27001, SOC 2, NIST CSF and CIS Controls.
A record of influencing architecture across multiple teams, with clear writing and briefing skills.

Why Join Us?

Be part of a team driving AI innovation in telecom and cloud solutions.
Opportunity to work on cutting-edge projects impacting millions of users.
Collaborative culture with continuous learning and growth.
Competitive Benefits and Vacation package.

The base pay range for this position varies based on the geographic location. More information about the pay range specific to candidate location and other factors will be shared during the recruitment process. Individual pay is determined based on location of residence and multiple factors, including job-related knowledge, skills and experience.

San Francisco Bay Area:

156,400 - 265,700 USD AnnualAll Other US Locations:

136,000 - 231,000 USD Annual As a part of the total compensation package, this role may be eligible for a bonus. For information on our benefits click here.

Apply About employer

More about this job

Skills

Google Cloud
BigQuery
Firmware
Supply chain management
MITRE ATT&CK
Identity and access management
CI/CD
Apache Kafka
Computer science
Cybersecurity
SAML
Communication skills
Python
Go

Report this job