{"id":2266822,"url":"https://alion.io/job/verizon-principal-security-engineer","title":"Principal Security Engineer","company":{"id":96912,"name":"Verizon","domain":"verizon.com","url":"https://alion.io/company/verizon-about","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Irving, United States","United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":74000,"max_usd":152000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":373},"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon EC2","optional":false},{"name":"Apache HTTP Server","optional":false},{"name":"Apache Tomcat","optional":false},{"name":"AWS","optional":false},{"name":"Bash","optional":false},{"name":"Confluence","optional":false},{"name":"IAM","optional":false},{"name":"ITIL","optional":false},{"name":"Java","optional":false},{"name":"Jira","optional":false},{"name":"LDAP","optional":false},{"name":"Linux","optional":false},{"name":"LLM","optional":false},{"name":"Nagios","optional":false},{"name":"Nginx","optional":false},{"name":"Oracle","optional":false},{"name":"PHP","optional":false},{"name":"PKI","optional":false},{"name":"PostgreSQL","optional":false},{"name":"Prometheus","optional":false},{"name":"Python","optional":false},{"name":"Red Hat","optional":false},{"name":"ServiceNow","optional":false},{"name":"SQL","optional":false},{"name":"Windows Server","optional":false},{"name":"Zabbix","optional":false}],"status":"live","first_seen_at":"2026-10-06T00:00:00Z","employer_posted_date":"2026-10-06","last_verified_at":"2026-10-15T05:29:58Z","board_verified":true,"closed_at":null,"days_open":9,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":9},"description":"When you join Verizon\nYou want more out of a career. A place to share your ideas freely - even if they’re daring or different. Where the true you can learn, grow, and thrive. At Verizon, we power and empower how people live, work and play by connecting them to what brings them joy. We do what we love - driving innovation, creativity, and impact in the world. Our V Team is a community of people who anticipate, lead, and believe that listening is where learning begins. In crisis and in celebration, we come together - lifting our communities and building trust in how we show up, everywhere & always. Want in? Join the #VTeamLife.\nWhat you'll be doing...\nAs a member of the Security Engineering & Operations team, you will be responsible for the end-to-end administration, maintenance, and day-to-day operation of Verizon’s enterprise Public/Private Key Infrastructure (PKI) and Identity & Access Management (IAM) systems. In this role, you will act as a primary operational subject matter expert, interfacing directly with enterprise customer teams to integrate, support, and maintain fully functional, highly available PKI services while driving key forward-looking security initiatives.\nYou will handle all operational duties necessary to keep our PKI infrastructure operating smoothly-including certificate lifecycle automation, key management, system upgrades, and platform health monitoring-while acting as a customer-oriented operations engineer who excels at bridging technical infrastructure with client integration needs. You bring strong technical knowledge of PKI protocols, solid Red Hat Enterprise Linux (RHEL) administration skills, and a practical approach to troubleshooting end-to-end service workflows. You will thrive in this role by combining direct customer technical support with modern engineering tools, RHEL systems administration, Python scripting, and operational AI tools/agents to develop solutions for PKI and Post-Quantum Cryptography (PQC), automate routine maintenance, streamline incident response, proactively manage vulnerabilities, and deliver seamless security operations.\nResponsibilities include, but are not limited to the following:\nPKI Vendor Platform Migration & Customer Support\nLeading operational execution and defining end-to-end test plans for the PKI Vendor Platform Migration.\nServing as a primary technical point of contact for enterprise customer teams, guiding them through application cutovers, front-end customization, and back-end integration with the new vendor platform.\nSupporting the full client communication lifecycle: logging, tracking, and prioritizing technical queries through ticketing platforms (e.g., Jira), troubleshooting customer integration issues, conducting root-cause analysis, and delivering patches/hotfixes to meet customer needs.\nFacilitating software delivery and interoperability testing for clients PKI-enabling their custom applications to ensure compliance with specifications and security policies.\nMaintaining customer-facing SLAs and operational KPIs for service delivery while leveraging customer query databases to build knowledge books and improve service readiness.\nReplicating customer-reported issues in a test lab environment to validate bug fixes and execute corrective operational actions.\nAI & Post-Quantum Cryptography (PQC) Tooling Development\nDeveloping AI-driven tools, custom algorithms, and intelligent agents to automate diagnostic workflows, customer query triage, log analysis, and certificate management for PKI and PQC systems.\nBuilding and deploying automated software solutions to prepare enterprise security platforms for Post-Quantum Cryptography (PQC) readiness and migration.\nAdministering and supporting RESTful APIs used by customers for automated certificate enrollment and infrastructure integration.\nAuthoring, updating, and maintaining operational runbooks, systems engineering documentation, and customer integration guides to ensure service consistency.\nFull-Lifecycle PKI Infrastructure & Systems Engineering\nOverseeing end-to-end operational readiness for all PKI environments, ensuring all core Certificate Authorities (CAs), Registration Authorities (RAs), and Key Management systems remain fully functional.\nInstalling, configuring, maintaining, and supporting enterprise Hardware Security Modules (HSMs).\nManaging complete certificate lifecycles-including automated issuance, discovery, renewal, revocation, and deployment across client applications, APIs, cloud environments (AWS), servers, and network devices.\nExecuting routine system patching, OS maintenance, capacity planning, and proactive vulnerability remediation across PKI host servers.\nParticipating in an on-call rotation to provide rapid tier-3 operational support, incident triage, and escalation resolution for critical service disruptions.\nWhat we're looking for...\nYou are a customer-oriented operations engineer who excels at bridging technical infrastructure with client integration needs. You bring strong technical knowledge of PKI protocols, solid RHEL administration skills, and a practical approach to troubleshooting end-to-end service workflows. You thrive in environments where you can combine direct customer technical support with smart automation, scripting, ticketing workflows, and AI tools to deliver seamless security operations and advance PQC readiness.\nYou'll need to have:\nBachelor’s degree or four or more years of work experience.\nSix or more years of relevant experience required, demonstrated through one or a combination of work and/or military experience, or specialized training.\nExperience developing AI tools, scripts, or agents (e.g., Python AI/ML libraries, LLM APIs, automated diagnostic agents) to build custom solutions and tools for PKI or security operations.\nExperience with RESTful API integration, management, and troubleshooting for client environments.\nWillingness to travel up to 25% or less of the time.\nEven better if you have one or more of the following:\nStrong background in customer-facing technical support, troubleshooting custom application integrations, managing tickets (e.g., Jira), and maintaining service SLAs/KPIs.\nHands-on operational experience with core PKI protocols and standards: X.509, PKCS, OCSP, TLS/SSL, S/MIME, IPsec, and LDAP.\nDemonstrated experience administering Red Hat Enterprise Linux (RHEL) environments in a production setting.\nProficiency in writing and modifying operational scripts for task automation using Python, Shell/Bash, Java, or PHP.\nAbility to participate in scheduled on-call coverage (including evenings/weekends during assigned rotation).\nMaster’s degree in Cybersecurity, Computer Science, Systems Engineering, or a related technical field.\nFamiliarity or experience with Post-Quantum Cryptography (PQC) standards, algorithms, and transition strategies.\nBackground or experience in Systems Engineering principles (e.g., infrastructure design, reliability, capacity planning, system architecture).\nHands-on experience or familiarity with cloud security and infrastructure platforms, specifically Amazon Web Services (AWS) (e.g., Cloud HSMs, AWS Private CA, KMS, IAM, EC2).\nFamiliarity with enterprise ticketing, incident tracking, and project management tools such as Jira, ServiceNow, or Confluence.\nKnowledge of or hands-on experience with modern PKI platform engines and certificate management platforms such as EJBCA, Keyfactor, DigiCert, RSA, OpenXPKI, or Microsoft CA.\nPractical experience deploying, managing, and supporting Hardware Security Modules (HSMs) such as Entrust (nShield), Thales/Luna, or Utimaco.\nExperience with system monitoring, performance metrics, and alerting tools such as Nagios, Zabbix, or Prometheus.\nExperience with web servers/containers (Apache, Tomcat, Nginx) and Windows Server administration.\nWorking knowledge of database management for operational triage (Oracle, SQL, PostgreSQL).\nRelevant industry certifications such as Red Hat Certified System Administrator (RHCSA), AWS Certified Security / SysOps, CISSP, CISA, or ITIL v3/v4.\nIf Verizon and this role sound like a fit for you, we encourage you to apply even if you don’t meet every “even better” qualification listed above.\nWhere you’ll be working\nIn this hybrid role, you'll have a defined work location that includes working from home and a minimum of three days per week in the office, which will be set by your manager. Employees are responsible for maintaining compliance with hybrid work policies.Scheduled Weekly Hours\n40Equal Employment Opportunity \nVerizon is an equal opportunity employer. We evaluate qualified applicants without regard to veteran status, disability or other legally protected characteristics.\nBenefits and Compensation\nOur benefits are designed to help you move forward in your career, and in areas of your life outside of Verizon. From health and wellness benefit options including: medical, dental, vision, short and long term disability, basic life insurance, supplemental life insurance, AD&D insurance, identity theft protection, pet insurance and group home & auto insurance. We also offer a matched 401(k) savings plan, up to 8 company paid holidays per year and up to 6 personal days per year, paid parental leave, adoption assistance and tuition assistance, plus other incentives, we’ve got you covered with our award-winning total rewards package. Depending on the role, employees have the opportunity to receive compensation in the form of premium pay such as overtime, shift differential, holiday pay, allowances, etc. Newly hired employees receive up to 15 days of vacation per year, which grows with additional service. For part-timers, your coverage will vary as you may be eligible for some of these benefits depending on your individual circumstances.\nThe salary will vary depending on your location and confirmed job-related skills and experience. This is an incentive based position with the potential to earn more. For part-time roles, your compensation will be adjusted to reflect your hours.The salary range for the location(s) listed on this job requisition based on a full-time schedule is: $120,500.00 - $231,000.00.","description_format":"text","description_chars":10158,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Hybrid work","Life insurance","Parental leave"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Mobile Networks","Broadband","Smartphones"],"lifecycle":[{"event":"open","at":"2026-10-11T06:48:58Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 3","filings_12m":3,"filings_prev_12m":8,"green_card_filings_12m":0,"median_offered_wage_usd":167500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":40,"band":"fade","label":"Fading","p_open":1,"p_active":0.725,"p_room":0.55,"age_days":9,"expected_fill_days":8,"reasons":["conf:0","velocity","win:tail","comp:brand"],"computed_at":"2026-10-15T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/verizon-principal-security-engineer","json_url":"https://alion.io/job/verizon-principal-security-engineer.json","meta":{"generated_at":"2026-10-15T22:53:42Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":34779,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":96912},"rest":"https://alion.io/mcp/rest/get_company?id=96912"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fverizon-principal-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fverizon-principal-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fverizon-principal-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/verizon-principal-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fverizon-principal-security-engineer"}]}