Senior IT Security Engineer

About the Company

The Solana Foundation is a non-profit based in Zug, Switzerland, dedicated to the adoption, decentralization, and security of the Solana network. Solana is a high performance blockchain that can deliver a fast and friendly user experience, without sacrificing security.

Responsibilities

• Own deployment, configuration, and ongoing management of the centralized identity and access management platform
• Configure and manage EDR (endpoint detection and response) solutions across the fleet
• Configure and manage MDM (mobile device management) solutions and enforce secure baseline configurations
• Manage secure configuration and governance across the SaaS application fleet
• Collaborate with operations to ensure security is integrated across the full lifecycle of a global endpoint fleet
• Implement access control systems and internal data security practices per security standards
• Operate vulnerability management solutions, including scanning, triage, and remediation tracking
• Audit and secure the configuration of modern enterprise tech stacks including GitHub, AWS, and GCP
• Execute backup testing processes and participate in incident response efforts
• Maintain and improve compliance with security frameworks such as ISO 27001 and SOC 2

Requirements

• Strong infrastructure and enterprise security experience
• Hands-on experience deploying and managing SSO, EDR, and MDM tooling
• Experience securing and managing a SaaS application fleet at scale
• Experience managing a global fleet of endpoints across its entire lifecycle
• Experience owning secure configuration of GitHub, AWS, and GCP
• Proficiency in scripting (Python, Go, or Bash) for automation
• Experience building backup processes and leading incident response
• Experience working within security frameworks such as ISO 27001 or SOC 2
• Strong communication skills and ability to operate autonomously

Preferred Qualifications

• Experience working across both traditional web2 and crypto/web3 environments
• Experience securing custody, key management, or other crypto-specific infrastructure