Director, Solutions Engineering

What are we looking for?

SentinelOne is looking for a Principal Security Architect.  The Principal Security Architect reviews the company's security posture across the enterprise and designs solutions for all business units.  The successful candidate will use their skills to advise business units on SW acquisitions and SW deployments to improve the infrastructure and products. This role works with cloud security architects to help secure all of SentinelOne’s cloud-provided SaaS services and infrastructure across the globe. The person in this role works with SentinelOne’s R&D team, Cloud Ops, and DevOps to reduce risk and to “shift left”.  Additionally, this role advises and works with Finance, Purchasing, and other business units to ensure the secure operation of critical corporate infrastructure.  A strong belief in working to processes, encouraging others to follow the process, and continuous improvement of processes is a key requirement.

The successful candidate should have experience in performing security reviews and working with the VP and C-Level in acquiring and deploying applications to support corporate strategies. This includes planning for and designing multi-cloud architectures and working at a high level to set the entire company's security policies, plans, and procedures. A successful candidate for this position will have the ability to think outside the box and work on complex problems that span many different information security domains. They will be able to be self-motivated and comfortable working in a very high-paced and evolving environment. This pace will require them to understand what problems will be real, continued issues, and which problems will evolve out of the system to prioritize work.

What will you do?

• Leads SentinelOne security design efforts, reviewing security technologies, tools, and services for integration into SentinelOne across corporate, production, and government systems.
• Liaises with CISO team, security practitioners, and technology solution architects to share best practices and insights.
• Participates in SentinelOne product design reviews as the primary security advocate.
• Oversees the security aspects of product design and participates in the implementation of cloud and on-prem security architectures for all of SentinelOne’s services and offerings.
• Drives the development of general security patterns and guidelines to enable applications to stay compliant
• Incentivizes greater adoption of the shift-left paradigm by championing IaC with internal and external teams.
• Champions security by design.
• Reviews and approves all architecture designs, diagrams, and other artifacts, from a security perspective, responsible for ensuringthe work product quality of security artifacts.

What skills and knowledge will you bring?

• 10+ years of working with at least two of AWS, GCP, or Azure clouds as a senior security engineer or security architect.
• 3+ years working in a global context in a security architect position
• Strong familiarity with Compute, IAM, KMS, VPC, and other core cloud concepts.
• Experience designing cloud networks that are highly scalable, highly available over many regions using VPCs, Gateways, Peering, and VPNs.
• Proven experience and desire to operate as a self-starter and be comfortable working in a sometimes ambiguous, yet fast-paced, environment.
• Strong technical understanding to be able to validate that an environment meets all security and compliance controls.
• Experience with GRC and Audits—SOC2, SOX, and others, where you are responsible for providing evidence, creating diagrams for auditors, and assisting in the GRC processes.
• Experience with SOA Architecture, Application Security Firewalls, XML Firewalls, and IDS technologies.
• Experience with containers and microservices such as Docker, Kubernetes, and Lambdas.
• Experience with SCA tooling (Veracode, Checkmarx), etc.
• Experience with IaC (Terraform, Ansible, Pulumi).
• Some high-level exposure to GCP.
• Proven certifications (past or present) such as AWS Certified Solutions Architect, AWS Security Specialty,  Azure AZ-500, GCP Professional Cloud Security Engineer, CISSP.
• FedRAMP experience, SOC2 experience, or other familiarity working in regulated environments and passing certification audits (CNCF CKA, CNCF CKS).