IT & Security Engineer

My name is Archana. I am a Talent Acquisition Manager at Ultimate Staffing, a part of leading Talent Solutions company Roth Staffing. We have an excellent opportunity for you with an Electronics Manufacturing company. Please Let me know what you think about the below JD and I am looking forward to having a brief conversation with you. Please find the JD below and share a copy of you updated resume.

I will call you to discuss further. We are currently seeking a IT and Security Engineer to join a client in Salt Lake City UT and SFO CA. This is a full‑time, direct hire position.

Scope of Ownership:
Owns the full lifecycle of IT hardware and software across Linux, Windows, and macOS (including the asset inventory and the employee onboarding and offboarding process) together with Company's security operations stack: vulnerability management, HIDS/SIEM, secrets and PKI, cloud and network security controls, and identity administration. Accountable for the reliability of these systems and for the state of the controls they enforce.

Decision Authority:
Final call on endpoint, network, and access configuration standards, on remediation priority and timelines for identified vulnerabilities, and on tooling choices within the IT and security estate. Recommends and escalates on risk acceptance, budget, and policy decisions.

Autonomy:
Operates independently as the hands‑on owner of a broad, mixed workload. Sets priorities across incident response, project delivery, and support commitments, and reprioritizes without waiting for direction when a security event or business need demands it.

Cross‑Functional Influence:
Works across Engineering, Platform, Legal & Compliance, People Operations, and Finance – partnering with engineering teams on Kubernetes and cloud security reviews, with People Operations on onboarding and offboarding, and with Finance on SaaS procurement and renewals. Drives security awareness across the whole company through training and phishing simulation.

External Representation:
Serves as the escalation point for complex IT and security issues across global teams, is the primary technical contact for the Hacker One VDP and its researchers, and represents Company's controls to auditors and to vendors.

5+ years in IT system administration and/or security engineering across Windows, Linux, and macOS.

• Infrastructure & Endpoints:
  Manage the full lifecycle of IT hardware and software across Linux, Windows, and macOS. Own VPNs, backups, disaster recovery, MDM, and endpoint security, and serve as the escalation point for complex issues across global teams.
• Security Operations:
  Drive Company's security posture in alignment with ISO 27001 and NIST CSF 2.0. Own vulnerability management, the Hacker One vulnerability disclosure program, and security incident response. Administer Wazuh HIDS/SIEM and Hashi Corp Vault (secrets and PKI), and run phishing simulations and security awareness training.
• Cloud & Network Security:
  Own GCP IAM and Security Command Center. Manage Cloudflare Access (Zero Trust) and WAF rules, and own Kubernetes security (including RBAC, pod security standards, and workload reviews).
• Identity & Compliance:
  Administer Okta for SSO, MFA, and provisioning. Enforce least privilege across all systems and support ISO 27001 and NIST CSF 2.0 audit activities.
• Asset Management:
  Own the IT asset inventory end to end. Tracking hardware, software, and licence assignments from procurement through deployment, reassignment, and secure decommissioning or disposal. Keep asset records accurate and reconciled against purchasing and licence data, and use them to drive refresh cycles, spend decisions, and audit evidence.
• Onboarding & Offboarding:
  Own the IT side of employee onboarding and offboarding in partnership with Human Resources. Provision devices, accounts, and role‑appropriate access for new hires, and on exit revoke access promptly across all systems, recover and wipe company hardware, and handle data retention and transfer correctly. Keeps the process documented, repeatable, and auditable.
• Platforms & Vendors:
  Own SaaS procurement, licence…