Principal Information Security Engineer

Transforming the healthcare industry isn’t easy. But when you build a team like the one we have, that goal can become a reality. Our accomplishments can’t happen without our extraordinary people – the men and women across the country who make up our diverse Zotec family and help make this company a best place to work.

Over 25 years ago, we started Zotec with a clear vision, to partner with physicians to simplify the business of healthcare. Today we are more than 900 employees strong and we continue to use our incredible talent and energy to bring that vision to life.  We are a team of Innovators, Collaborators and Doers.

We are seeking a Principal Information Security Engineer to join us.

The Principal Information Security Engineer serves as the primary technical leader and subject matter expert within our Information Security organization. This hands-on technical expert implements and executes complex security solutions while driving technical innovation across multiple security domains. Working closely with the Director of Information Security and the Principal Security Architect, this role provides deep technical expertise with particular emphasis on privileged access management, identity security, and security automation. This position acts as the final escalation point for critical security matters, leads implementation of security initiatives, and provides mentorship to the broader security team while advancing our security maturity through technical excellence.

What you'll do:

Technical Leadership & Implementation

• Serve as the primary technical subject matter expert for the Information Security organization, providing hands-on implementation support across multiple security domains
• Function as the final technical escalation point for complex security challenges, providing authoritative guidance and practical solutions
• Drive technical innovation by researching and evaluating emerging security technologies that enhance security effectiveness
• Lead technical implementation of security platforms that align with architectural standards while optimizing operational efficiency
• Proactively identify opportunities to enhance security maturity through improved technical implementations and process optimization

Privileged Access Management & Identity Security Expertise

• Lead the technical implementation and operational management of CyberArk enterprise privileged access management, including platform configuration, technical standards, and integration with existing systems
• Spearhead the Netwrix Policy Pak workstation privilege management program, including technical implementation, policy enforcement, and endpoint security integration
• Implement and support identity security integrations between PAM solutions and other security platforms to ensure effective risk mitigation
• Develop technical documentation and standards for PAM and identity security operations

Security Engineering & Solution Implementation

• Implement and optimize security technologies across endpoint protection, network security, and identity management domains
• Develop scripts, tools, and automation to enhance security operations and detection capabilities
• Configure and maintain security monitoring solutions, including SIEM, EDR/XDR, and SOAR platforms
• Lead technical implementation of major security initiatives in close collaboration with the Principal Security Architect
• Partner with the Security Detection Engineer to implement and optimize detection and monitoring capabilities

Cloud Security Implementation & Governance

• Work directly with cloud teams to implement security controls and standards across AWS, Azure, and other cloud environments
• Implement security guardrails and technical controls for cloud infrastructure, including Infrastructure-as-Code security reviews
• Configure cloud security posture management (CSPM) practices and tooling for continual assessment of cloud configurations
• Coordinate with Application Security on DevSecOps practices, providing technical expertise on security tool integration
• Implement zero trust architecture principles at a technical level across cloud environments

Emerging Security Technologies & Innovation

• Research, evaluate, and implement emerging security technologies to address evolving threats
• Develop expertise in API security implementation and monitoring, integrating with existing security platforms
• Implement and optimize AI/ML security controls to protect against emerging threats
• Champion security innovation through proof-of-concepts that improve security effectiveness or operational efficiency
• Provide technical guidance on security implications of emerging technologies adopted by the organization

Security Platform Subject Matter Expertise

• Serve as the designated Subject Matter Expert (SME) for:
  • CyberArk PAM solution
  • Netwrix Policy Pak
  • Netskope CASB implementation and operations
• Maintain strong technical knowledge and provide guidance for SIEM platforms, EDR/XDR solutions, SOAR platforms, and cloud security tools

Required Qualifications:

• 10+ years of information security experience with at least 5 years in senior technical hands-on roles
• Deep technical expertise in multiple security domains including:
  • Privileged access management (particularly CyberArk)
  • Identity and access management
  • Cloud security (AWS, Azure, GCP)
  • Security automation and orchestration
  • SIEM implementation and security analytics
  • Endpoint security and EDR/XDR deployment
• Strong programming/scripting capabilities in Python, PowerShell, or similar languages for automating security workflows and developing custom tools
• Hands-on experience implementing major security initiatives and technical projects at scale
• Excellent problem-solving abilities for complex technical challenges in production environments
• Strong communication skills with ability to explain technical concepts to diverse audiences
• Demonstrated intellectual curiosity and drive to explore new security technologies
• Track record of technical innovation and improvement in security operations

Preferred Qualifications:

• Advanced security certifications such as CISSP, CyberArk certifications, GSEC, OSCP, or cloud security certifications
• Experience mentoring and developing technical team members
• Practical experience implementing security solutions in regulated environments (e.g., HIPAA, HiTrust, PCI DSS)
• Understanding of DevSecOps principles and modern development practices
• Background in systems engineering or technical operations
• Experience with API security implementation and monitoring
• Knowledge of AI/ML security considerations and emerging best practices
• Familiarity with security program maturity frameworks and assessment methodologies

At Zotec, you will enjoy a network of highly experienced professionals in an environment where you can operate with autonomy yet have the resources and backing of other professionals in a similar role. Entrepreneurial and enterprising is the spirit of our team. If you are an original thinker and opportunity seeker, we'd like to talk to you!

Learn more about our organization, by visiting us at www.zotecpartners.com

E-Verify and Equal Opportunity Employer