Silverfort is on a mission to bring identity security everywhere – to every human, machine, and AI agent, both on-prem and in the cloud. Our unique technology secures identities & access at runtime, in ways that weren’t possible before. With the broadest identity security platform in the market, trusted by more than 1,000 customers, including many Fortune 100 companies, Silverfort is uniquely positioned to lead the fast-growing identity security category.
Joining Silverfort means becoming part of a fast-moving team with a culture of innovation and collaboration, that goes above and beyond to help our customers and each other, on a journey to reshape the future of identity security.
We are looking for a Senior Security Engineer to join us. In this role, you will own, operate, and evolve our security engineering stack across email, network, identity, and emerging domains. You will be the day-to-day owner and administrator of our security tools - running, tuning, and hardening the controls already in place, leading new initiatives across ZTNA, secure browsing, and AI security, and partnering closely with IT, DevOps, and R&D to embed security into every layer of how Silverfort operates.
What you'll do
Own, administer, and operate the security controls and platforms across email security, network security, ZTNA, secure browsing, and emerging domains such as AI security
Run the day-to-day administration of the security toolset: deployment, configuration, and policy management, upgrades and patching, health and availability monitoring, licensing, and integrations
Drive identity & access security initiatives end-to-end: Zero Trust posture, Conditional Access, RBAC, identity lifecycle, access reviews, and governance
Lead refinement and improvement of existing stack components, from configuration tuning and policy hardening to architecture-level changes
Design and roll out new security initiatives end-to-end
Build automation across the security stack: integrations, enrichment, response actions, etc.
Partner with R&D and DevOps to embed security into design, deployment pipelines, and infrastructure as code
Conduct threat modeling, secure design reviews, and risk assessments for new and changing systems
Maintain clear operational documentation, runbooks, and architecture decisions to make your work repeatable and reviewable
Requirements
5+ years of experience in security engineering or equivalent hands-on security roles
Strong hands-on experience across multiple security domains, with end-to-end ownership of at least one (e.g., identity & access, network, email, web, or endpoint security)
Solid understanding of identity & access management: Zero Trust principles, Conditional Access, SSO, MFA, RBAC, identity lifecycle, and access governance
Strong networking fundamentals: TCP/IP, DNS, segmentation, ZTNA, and modern remote access architectures
Experience designing, deploying, administering, and operating security tools end-to-end
Hands-on cloud security experience with at least one major provider (AWS or Azure), including IAM, network controls, and secure architecture patterns
Programming and scripting skills (Python, Bash, or similar)
Self-motivated and autodidactic, with a "do it yourself" mindset and the ability to deliver solutions end-to-end
Strong collaboration and communication skills
Nice to have
Background in AI security, LLM security, or securing AI-powered systems and workflows - an