Senior Security Engineer - Security Automation

About the role:

The Senior Security Engineer - Enterprise Security Automation engineer is responsible for building, operating, and maintaining Samsara’s core security infrastructure and the automations that power it. You will collaborate with and mentor a global team of engineers to help build a world-class security engineering program utilizing modern principles across corporate infrastructure. Your deep expertise in both low-code automation platforms and cloud automation techniques will act as a multiplier for the team.

You take security seriously and strive to build low-friction solutions developed in close partnership with others. You are passionate about building automated workflows and helping to drive insights around potentially malicious activity within corporate environments. You enjoy building tools and workflows from scratch, maintaining ongoing programs, and threading security into company processes to meet business needs. You will use your familiarity with a diverse set of technologies and practices to build a leading program in our industry. You enjoy teaching and supporting team members, and helping junior engineers develop their skills and security instincts.
This is a remote position open to candidates residing in Canada.

You should apply if:

• You want to impact the industries that run our world: Your efforts will result in real-world impact – helping to keep the lights on, get food into grocery stores, reduce emissions, and most importantly, ensure workers return home safely.
• You are the architect of your own career: If you put in the work, this role won’t be your last at Samsara. We set up our employees for success and have built a culture that encourages rapid career development, countless opportunities to experiment and master your craft in a hyper growth environment.
• You’re energized by our opportunity: The vision we have to digitize large sectors of the global economy requires your full focus and best efforts to bring forth creative, ambitious ideas for our customers.
• You want to be with the best: At Samsara, we win together, celebrate together and support each other. You will be surrounded by a high-calibre team that will encourage you to do your best. 

In this role, you will: 

• Provide significant influence and leadership over Samsara’s security automation roadmap and priorities, balancing both near-term and long-term business impact with technical considerations.
• Develop Security Automation integrations using tools such as Tines, AWS Lambda, and other platforms.
• Drive efforts to incorporate infrastructure-as-code across the enterprise, focusing on using Terraform to manage configuration in common enterprise applications such as GitHub, Crowdstrike, Splunk, and MDM platforms.
• Build custom Terraform providers for platforms without existing integrations.
• Collaborate with other engineers to execute projects, maintain key security systems, and respond to escalations from cross-functional teams.
• Mentor engineers in the Security team to grow their domain knowledge, automation skills, and communication abilities.
• Champion, role model, and embed Samsara’s cultural principles (Focus on Customer Success, Build for the Long Term, Adopt a Growth Mindset, Be Inclusive, Win as a Team) as we scale globally and across new offices.

Minimum requirements for the role:

• 4+ years of relevant experience with demonstrated impact across an organization, with 2+ years in an Enterprise Security role.
• Deep expertise in enterprise security engineering best practices.
• Demonstrated experience with security automation platforms such as Tines and serverless frameworks such as AWS Lambda.
• Extensive experience operating and managing Terraform in an enterprise environment.
• Excellent development background with experience in Python or Go.

An ideal candidate also has:

• Experience writing custom Terraform providers and integrating with third party APIs.
• Advanced knowledge and certification with Tines and AWS Lambda.
• Experience driving efforts around zero trust, least privilege, just-in-time access management, identity lifecycle management, and data loss prevention.