Senior Cyber Security Architect - Automation, Data Center & Networking Security

Latitude AI ( lat.ai ) develops automated driving technologies, including L3, for Ford vehicles at scale. We’re driven by the opportunity to reimagine what it’s like to drive and make travel safer, less stressful, and more enjoyable for everyone. When you join the Latitude team, you’ll work alongside leading experts across machine learning and robotics, cloud platforms, mapping, sensors and compute systems, test operations, systems and safety engineering – all dedicated to making a real, positive impact on the driving experience for millions of people. As a Ford Motor Company subsidiary, we operate independently to develop automated driving technology at the speed of a technology startup. Latitude is headquartered in Pittsburgh with engineering centers in Dearborn, Mich., and Palo Alto, Calif. Meet the team: The Enterprise Cyber Security team is focused on ensuring the resilience of our corporate environment with focus on protection of our corporate systems, IP, and employee data. We are a close-knit team with strong cross-functional roles in the company. As a Cyber Security Architect, you will be the hands-on technical lead securing our High Performance Computing (HPC)/Virtualization environments. Your job is to have a deep understanding of this infrastructure, network architecture, and the operations depending on it, including our software/hardware/network engineering, fleet operations requirements, and administrative functions. You will use your knowledge and experience to design, implement, automate, and continuously improve our security posture. What you’ll do: Plan for, execute, and follow through on projects and engagements independently Apply best practices in software, network, and infrastructure engineering Deliver projects on time, on budget, with excellent quality and security configurations Review the existing and new deployments and architecture designs looking for design flaws, security improvements, and advocate for stronger security controls that meet functional and operational needs Work hand-in-hand with the Cloud Platform, IT, and Product teams to research, design and develop security solutions and deployments and strategies tailored to Latitude’s business needs Engage actively in Data Center and Network Security initiatives to assess existing security and implementations of supplemental technical solutions to improve security Document findings, conduct comparisons, perform threat and risk assessments, and Proof of Concepts aiding the team in making informed decisions about the impact of various design options Develop, Review, and Design the automation and orchestration for security aspects of cloud and virtualized deployments Provide inputs into dashboards and report metrics on the status of the Cyber Security posture Hands on deployment of solutions, working independently and as part of a team Provide mentoring and skill set knowledge transfer to team members and engineering staff Moderate and contribute to Supercomputing System Administration that contributes to: Proactive monitoring, analysis, and correcting system security issues Development of scripts to automate, perform security checks, and develop tools to enhance support of the Cloud/Virtualized systems and development environments Developing playbooks/runbooks, operational and troubleshooting documentation Evaluate and contribute to designs for Network and Infrastructure Solutions with Security and Functionality as pillars of implementation Consult and advocate security best practices for DMZ architectures, NAC/NAP, lateral isolation, and multi-site data movement in Network management tooling (like Palo Alto, Fortinet, F5) What you'll need to succeed: At a minimum, a Bachelor's degree in Computer Engineering, Computer Science, Cyber Security or a related field and 4+ years of relevant experience (or Master's degree and 2+ years of relevant experience) Strongly prefer 8+ years related experience or 6 years with a Master’s degree; as a Data Center/Virtualization and/or Network Security Architect/Engineer 2+ years of related experience in vulnerability management and adjusting the risk rating/severity dependent on internal factors for cloud and other infra High proficiency and Hands-on experience in cloud/virtualization technologies (AWS/HPC/MAAS) Experience with Lustre, Kerberos, and Linux Administration Proficiency in scripting languages, including Bash, Python, Go, or Java to create production level services and automation tools that incorporate into CI/CD Proficiency and hands-on experience using Infrastructure as Code (IaC) to automate the creation of cloud resources, virtualized systems, and review infrastructure deployments. E.g. Terraform, Cloud Formation, Ansible, or others Ability to grasp new technologies quickly and prioritize and multitask on multiple responsibilities Hands-on Experience with patching and hardening Linux, MacOS, and Windows Systems (clients and servers), images, and containers Proficient in Network Protocols and Firewall Management, with hands-on experience in configuration and optimization to ensure network security internally and at perimeters Critical thinking and a holistic view of Cyber Security with ability to balance security requirements with mission needs and collaboration across teams Exceptional organizational and time management skills demonstrated through adept autonomy, independent work, collaborative teamwork, and a professional demeanor Strong experience with architecting/deploying scalable security services and workloads in cloud native and virtualized environments Strong experience with securing distributed applications and clustered compute workloads running on CPUs, GPUs, and TPUs Understand engineering design limitations and provide guidance for teams to secure their deployments to achieve desired performance in budget and on time An Independent take-charge attitude while being open-minded, creatively thinking, willing to take calculated risks, and make informed decisions Strong understanding of Cyber Security Standards (ISO27001, NIST 800-53) Experience with Jenkins a plus Experience with Zero Trust Architecture (ZTA) principles and implementations Exposure to data governance, secure data movement, and storage lifecycle management Must have demonstrated proficiency and strength in verbal, written, presentation, and communications skills, including technical diagramming A sense of camaraderie, compassion, and unparalleled passion/energy What we offer you: Competitive compensation packages High-quality individual and family medical, dental, and vision insurance Health savings account with available employer match Employer-matched 401(k) retirement plan with immediate vesting Employer-paid group term life insurance and the option to elect voluntary life insurance Paid parental leave Paid medical leave Unlimited vacation 15 paid holidays Daily lunches, snacks, and beverages available in all office locations Pre-tax spending accounts for healthcare and dependent care expenses Pre-tax commuter benefits Monthly wellness stipend Adoption/Surrogacy support program Backup child and elder care program Professional development reimbursement Employee assistance program Discounted programs that include legal services, identity theft protection, pet insurance, and more Company and team bonding outlets: employee resource groups, quarterly team activity stipend, and wellness initiatives Learn more about Latitude’s team, mission and career opportunities at lat.ai ! The expected base salary range for this full-time position in California is $160,000 - $240,000 USD. Actual starting pay will be based on job-related factors, including exact work location, experience, relevant training and education, and skill level. Latitude employees are also eligible to participate in Latitude’s annual bonus programs, equity compensation, and generous Company benefits program, subject to eligibility requirements. Candidates for positions with Latitude AI must be legally authorized to work in the United States on a permanent basis. Verification of employment eligibility will be required at the time of hire. We are an Equal Opportunity Employer committed to a culturally diverse workforce. All qualified applicants will receive consideration for employment without regard to race, religion, color, age, sex, national origin, sexual orientation, gender identity, disability status or protected veteran status.