Sr. IT/Security Engineer

Role: Sr. IT/Security Engineer
Location: Palo Alto, CA (Must be on site)
Type: Contract or CTH

About the role:
Seeking a highly technical Senior IT / Security Engineer to execute IT and Security projects. Reporting to the Associate Director, IT, you will take prioritized initiatives from the business and IT & Security roadmap(s) and deliver them end-to-end: planning, coordinating stakeholders and vendors, implementing, validating, documenting, and handing off to steady-state operations. This is a high-capacity, high-output role. Your job is to turn business decisions and objectives into shipped, well-documented outcomes, often several at a time. Project management and communication skills are weighed equally with technical skills.

Key Responsibilities:

Project Management & Delivery

• Run multiple concurrent IT and security projects end-to-end: define scope and success criteria with the Associate Director, build the plan, track dependencies and risks, and drive to completion on schedule.
• Maintain a transparent project portfolio in Jira/Confluence with clear owners, dates, and status; publish concise weekly status updates and escalate blockers early with recommended options.
• Coordinate vendors, MSP/MSSP partners, and consultants on assigned projects; track deliverables against statements of work and hold partners accountable.
• Produce clean, reusable project artifacts: requirements, designs, test evidence, runbooks, and handoff documentation.

• Implement and configure identity and access controls on AWS, Microsoft Entra ID, and other technical systems: SSO/MFA rollouts, SCIM provisioning, conditional access policies, and access-review cycles.
• Deploy and maintain endpoint management and security for macOS, Linux, and Windows: MDM enrollment, EDR (e.g. Microsoft Defender Suite, OSQuery, etc.), hardening baselines, and patch/vulnerability remediation.
• Execute cloud and SaaS workstreams in Microsoft 365, Azure/AWS, and Google Workspace: security configuration, DLP/information protection, backup, and integrations.
• Support network and site infrastructure projects (LAN/WLAN, firewalls, VPN/ZTNA) for the Palo Alto, Switzerland, and future campuses.
• Automate repetitive work with scripting (PowerShell, Python), AI workflows, and APIs; document what you build.

• Triage and investigate security alerts from the SIEM/EDR; execute incident response procedures and document findings; coordinate with the MSSP as directed.
• Develop an automated triaging and escalation system around current and future security tools.
• Run the vulnerability remediation cycle: track findings, drive owners to closure, and report progress.
• Complete vendor security assessments and customer/partner security questionnaires.

• Communicate clearly and proactively with stakeholders across the business including Quality, Digital Health, R&D, Clinical, Finance, and HR; translate technical details into plain language for non-technical audiences.
• Present project status and results to leadership when required, including executive and C-level audiences.
• Provide escalated (Tier 3) support and mentor IT support staff and contractors.

• 7+ years of hands-on IT infrastructure and/or information security engineering experience, with a demonstrated record of delivering multiple projects concurrently and on time.
• Hands-on experience in at least two of: identity (Okta/Entra ID), endpoint management/EDR, Microsoft 365/Azure or AWS administration and security, network security, SIEM/alert triage.
• Working knowledge of IAM concepts (SSO, MFA, SAML/OIDC, SCIM, conditional access).
• Scripting ability (PowerShell, Python, or similar) for automation and integration tasks.
• Strong project management fundamentals: planning, task tracking, vendor coordination, risk/issue management, and structured status reporting (Jira/Confluence or equivalent).
• Exceptional written and verbal English communication skills; comfortable presenting to executive and C-level leadership.
• Organized, detail-oriented, and comfortable with ambiguity; strong bias for action and follow-through.
• Ability to work on-site in Palo Alto, CA, 40 hours per week, with occasional after-hours availability for maintenance windows and incidents.

• Bachelor's degree in Computer Science, Information Systems, or a related field.
• Experience at a clinical-stage or emerging biotech with a lean IT team.
• Computerized System Validation experience in a GxP-regulated biotech, pharmaceutical, or medical device environment (21 CFR Part 11, EU Annex 11, GAMP 5).
• Certifications such as CompTIA Security+, CISSP, Microsoft SC-300/AZ-104, PMP/CAPM, AWS Technical certifications, ISPE GAMP training or other relevant certifications.
• Familiarity with security frameworks (NIST CSF, SOC 2, CIS Controls) and with SASE/ZTNA platforms (Zscaler, Cloudflare).
• Experience with DocuSign, Veeva, or other common GxP SaaS platforms and with e-signature/Part 11 configurations.

The salary range provided for this contract role represents our good faith estimate for this position. Within the range, individual offers will vary based on the selected candidate's experience, industry knowledge, technical and communication skills, location and other factors that may prove relevant during the interview process (W2 or C2C). In addition to compensation, the company provides eligible W2 employees with a comprehensive and highly competitive benefits package.

I.T. Solutions, Inc. provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.