Senior Security Solutions Engineer

We are seeking a customer-facing Senior Security Solutions Engineer to design, implement, and modernize enterprise security environments across identity, network, cloud, endpoint, and security operations. This role is intended for experienced engineers with strong security fundamentals who are equally passionate about Zero Trust, automation, cloud security, AI-assisted operations, and multi-vendor engineering.

The successful candidate will work directly with customers, account teams, architects, and technology partners throughout the complete project lifecycle from technical discovery and solution design through implementation, migration, optimization, documentation, and knowledge transfer.

Essential Responsibilities

• Lead architecture, design, implementation, migration, and optimization projects for enterprise customers.
• Design modern security solutions spanning identity, network security, SASE/SSE, cloud, endpoint, and security operations.
• Assess customer environments and identify security gaps, architectural risks, and modernization opportunities.
• Lead customer discovery sessions, architecture workshops, technical presentations, demonstrations, and solution reviews.
• Implement and integrate security technologies across complex multi-vendor environments.
• Troubleshoot complex security issues involving multiple technologies, platforms, and protocols.
• Develop HLDs, LLDs, implementation plans, runbooks, and customer-facing technical documentation.
• Support pre-sales activities including technical discovery, solution development, proof-of-concepts, and statements of work.
• Leverage APIs, scripting, automation, and Infrastructure as Code to improve security operations and deployments.
• Remain current with emerging security technologies, threats, AI, and industry trends.

Technical Experience

Candidates should demonstrate strong technical depth in multiple areas and broad knowledge of modern enterprise cybersecurity.

Identity & Access Security: Microsoft Active Directory and Entra ID, Okta, Cisco Duo, MFA, passwordless authentication, Conditional Access, SAML, OAuth/OIDC, PKI, PAM, IGA, ITDR/ISPM, Non-Human Identity, Cisco ISE/NAC, and Zero Trust identity architectures.

Network Security & SASE: Palo Alto Networks, Cisco Secure Firewall, Fortinet, Zscaler, Cisco Secure Access, Prisma Access, NGFW, IPS, VPN, segmentation, NAC, SASE, SSE, and ZTNA. Strong understanding of TCP/IP, routing, switching, DNS, DHCP, TLS, certificates, proxies, and other networking technologies affecting security.

Cloud & SaaS Security: Microsoft Azure, AWS, Microsoft Defender, cloud IAM, CSPM, CIEM, workload protection, SSPM, cloud-native security monitoring, and hybrid-cloud security architectures.

Endpoint & Security Operations: Microsoft Defender XDR/Endpoint, CrowdStrike, Palo Alto Cortex, SIEM, SOAR, EDR/XDR, threat detection, vulnerability management, incident investigation, threat hunting, security analytics, and security automation. Experience with Microsoft Sentinel, Splunk, Cortex, FortiSIEM, and other enterprise security operations technologies.

Candidates are not expected to be experts in every technology listed. Strong technical depth in two or more major security disciplines combined with the ability to learn and work across adjacent technologies is highly valued.

Architecture & Consulting Skills

• Lead technical discussions with engineers, architects, IT leadership, and security executives.
• Translate business and security requirements into practical technical architectures.
• Communicate complex security concepts to technical and non-technical audiences.
• Understand dependencies across identity, endpoint, network, cloud, and security operations.
• Evaluate technologies based on customer requirements rather than a single-vendor approach.
• Independently lead technical portions of complex customer engagements while balancing security, usability, operational complexity, and business requirements.

Professional Certifications We Value

Professional-level certifications are strongly valued but may be substituted with equivalent hands-on engineering and consulting experience.

• Cisco: CCNP Security, CCIE Security, Cisco security specializations
• Palo Alto Networks: Professional or advanced Network Security, SASE, Cortex, or Cloud Security certifications
• Fortinet: FCP, FCSS
• Microsoft: Azure Security Engineer, Identity and Access Administrator, Cybersecurity Architect, Security Operations Analyst
• AWS: Security Specialty, Solutions Architect Professional
• Industry: CISSP, CCSP, GIAC or equivalent advanced security certifications

The pay range for this position is $155,000 – $175,000 per year.
This range reflects the annual salary that Continental Resources reasonably and in good faith expects to pay for this position at the time of posting, consistent with the Massachusetts Pay Transparency Law (M.G.L. c. 149, § 105E).

#ConRes