Security Engineer

Senior Security Engineer - Endpoint & Zero Trust

Location: Onsite/Hybrid in Sacramento, CA
Type: W2 Only through Ledgent Technology
Engagement: Contract-to-Hire
Experience: Highly Regulated Environments Required

No C2C. Must be able to work onsite in Sacramento.

Overview

Ledgent Technology is hiring a Senior Security Engineer for a leading Sacramento organization operating in a highly regulated industry. This is a hands-on engineering role focused on CrowdStrike, Zero Trust, Okta, and vulnerability management. Candidates must have enterprise security experience and a strong background in regulated environments.

Key Responsibilities

• Lead migration from Microsoft Defender to CrowdStrike Falcon across endpoints and servers
• Define baselines, tuning, sensor deployment, and runbooks
• Implement Zero Trust capabilities using Cloudflare and Palo Alto
• Configure identity-aware access, SWG policies, DNS filtering
• Administer Okta (SSO, MFA, lifecycle management)
• Support privileged access improvements
• Assist vulnerability management efforts and prioritization
• Support SIEM integrations and basic detection tuning
• Align security controls with NIST and assist with audit documentation
  
  

Required Skills

• Five to eight years in Security Engineering or SecOps
• Hands-on experience with CrowdStrike Falcon
• Zero Trust experience with Cloudflare or Palo Alto
• Okta admin backgrounds including MFA and SSO integration
• Experience supporting vulnerability management
• Knowledge of NIST-based security controls
• Proven experience in highly regulated environments
  
  

Preferred Skills

• Exposure to SIEM tuning and log onboarding
• Familiarity with AWS, Azure, or GCP
• Relevant certifications (CrowdStrike, Okta, PCNSA, CISSP, etc.)
  

Desired Skills and Experience

5 to 8 years in Security Engineering or SecOps roles
Hands-on experience migrating or operating CrowdStrike Falcon
Experience implementing or supporting Zero Trust workflows with Cloudflare or Palo Alto
Strong Okta administration skills including MFA and SSO integration
Familiarity with vulnerability management processes and prioritization
Knowledge of NIST-based controls and security best practices
Ability to collaborate with IT, Cloud, and Compliance teams

All qualified applicants will receive consideration for employment without regard to race, color, national origin, age, ancestry, religion, sex, sexual orientation, gender identity, gender expression, marital status, disability, medical condition, genetic information, pregnancy, or military or veteran status. We consider all qualified applicants, including those with criminal histories, in a manner consistent with state and local laws, including the California Fair Chance Act, City of Los Angeles' Fair Chance Initiative for Hiring Ordinance, and Los Angeles County Fair Chance Ordinance.