Security Engineer - Network & Identity; Contractor

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Professional Houston, TX, US

30+ days ago Requisition

Salary Range: $90,000.00 To $ Annually

About the Company
:
Sungrow North America is a leading provider of renewable energy solutions, specializing in the development and manufacturing of photovoltaic inverters and energy storage systems. The company offers a comprehensive range of products and services designed to optimize the performance and efficiency of solar power installations. Sungrow North America aims to provide sustainable and reliable energy solutions to meet the growing demand for clean power and is known for its commitment to innovation, high-quality standards, and exceptional customer service.

Security Engineer – Network & Identity:

The Security Engineer (Network & Identity) is a hands‑on engineering role within the IT team responsible for designing, implementing, securing, and automating Sungrow USA's network security, PKI and certificate management, and identity & access infrastructure across on‑premises, cloud, and SaaS environments. This role serves as the technical owner for network security architecture, cryptographic services, certificate lifecycle management, authentication, and access controls.

The position focuses on Zero Trust security, network segmentation, certificate‑based authentication, and identity protection to reduce organizational risk and enable secure business operations and platform ownership rather than SOC operations, threat monitoring, or incident response.

Essential Duties and Responsibilities:

Network Security

• Design, implement, and maintain secure enterprise network architectures across corporate offices, data centers, cloud platforms, and remote workforce environments.
• Architect network segmentation, Zero Trust access controls, and secure connectivity standards using Fortinet and Zscaler security solutions.
• Develop and maintain Zero Trust architectures across network, identity, endpoint, application, and cloud environments.
• Design and administer secure remote access using Zscaler Private Access, VPN technologies, and identity‑aware access controls.
• Manage firewall policies, network security controls, routing security, DNS security, and hybrid‑cloud connectivity.
• Design and support Network Access Control architectures using IEEE 802.1X, RADIUS, and certificate‑based authentication.
• Assess network security posture, develop remediation plans, and drive continuous security improvements.

Cryptography, PKI & Certificate Management

• Own the enterprise PKI, cryptography, and certificate lifecycle management architecture, standards, and governance program.
• Design and manage certificate‑based authentication and machine identity solutions for users, devices, servers, applications, cloud workloads, and network infrastructure across Azure, AWS, and hybrid environments.
• Implement and maintain certificate lifecycle automation using Microsoft Cloud PKI, Keyfactor, Cyber Ark Certificate Manager, EJBCA, Digi Cert, AppViewX, or comparable platforms.
• Manage certificate issuance, enrollment, discovery, deployment, monitoring, renewal, revocation, auditing, and compliance across the enterprise.
• Design and support cryptographic services and certificate‑based security controls, including TLS/mTLS, code signing, PKI trust hierarchies, certificate‑based authentication, SCEP, PKCS, and machine identities.
• Establish PKI and cryptographic standards, key management practices, and security controls to support Zero Trust, regulatory compliance, and enterprise security requirements.
• Troubleshoot and resolve complex certificate,…