Principal Information Security Engineer

Select how often (in days) to receive an alert:

Florida Crystals Corporation is a fully integrated cane sugar company. Florida Crystals regeneratively farms sugarcane and rice in South Florida, where it owns two sugar mills, a sugar refinery, a packaging and distribution center, Florida's only rice mill, a compost facility, and one of the largest renewable power plants of its kind in the U.S., which uses sugarcane fiber to generate eco-friendly energy that powers its sugar operations.

Florida Crystals owns one of the largest Regenerative Organic Certified® farms in the U.S. and its Florida Crystals® products are the only ROC™ sugar grown and milled sugar in the country. Florida Crystals owns ASR Group International, Inc., a holding company that conducts operations through its subsidiaries. The ASR Group® family of companies make up the world’s largest refiner and marketer of cane sugar.

Florida Crystals is headquartered in West Palm Beach, Florida. Learn more at  .

The Principal IT Security Engineer reports to the Sr. Manager of Information Security and serves as the technical lead for securing the company's enterprise IT environment across data centers, cloud platforms, corporate networks, endpoints, and business applications. The role emphasizes enterprise security engineering, network and identity architecture, and the protection of the systems and data that run the business, with awareness of how corporate IT interfaces with plant and OT environments where those boundaries intersect.

The primary focus is to design, implement, and operate security controls for complex, hybrid, and cloud-first environments, with a strong emphasis on Zero Trust, microsegmentation, secure connectivity, identity, and defense-in-depth. This role partners closely with infrastructure, cloud, application, and operations teams to advance the security architecture and drive execution of the 1-3 year enterprise security and segmentation roadmap.

• Design, implement, and operate enterprise security controls across endpoints, servers, business applications, data, cloud and on-prem infrastructure, mobile, and networking, including firewalls, IDS/IPS, secure remote access, VPN, ZTNA, and network access control.
• Lead the design and rollout of network microsegmentation and zone-based architectures using technologies such as identity-based segmentation, VLANs, next-generation firewalls, and policy-based controls across on-premises and cloud environments.
• Function as a Subject Matter Expert (SME) for security integrations and authentication elements, including firewall and network security, conditional access, VPN, Zero Trust network architecture, SSO federation, MFA, and email security solutions.
• Engineer and maintain secure connectivity between corporate IT and plant networks where those environments interconnect, applying least-privilege and defense-in-depth principles at the IT/OT boundary.
• Collaborate with network, infrastructure, cloud, and application teams to design and review security architectures for new and existing business systems, SaaS platforms, and infrastructure services.
• Implement and administer security tools and platforms across endpoints, servers, network, identity, and cloud environments, including EDR, SIEM/SOC integrations, vulnerability management, and secure remote access solutions.
• Perform security engineering and threat modeling for enterprise systems and integrations, identifying and mitigating risks introduced by new connectivity, vendors, and technologies.
• Develop, test, and maintain incident detection and response playbooks for enterprise security events, supporting the SOC and IT operations teams during investigations and recovery efforts.
• Drive…