Encryption

SpaceXAI’s mission is to create AI systems that can accurately understand the universe and aid humanity in its pursuit of knowledge. Our team is small, highly motivated, and focused on engineering excellence. This organization is for individuals who appreciate challenging themselves and thrive on curiosity. We operate with a flat organizational structure. All employees are expected to be hands-on and to contribute directly to the company’s mission. Leadership is given to those who show initiative and consistently deliver excellence. Work ethic and strong prioritization skills are important. All employees are expected to have strong communication skills. They should be able to concisely and accurately share knowledge with their teammates. ABOUT THE ROLE: We are seeking a skilled Azure Security Engineer to design, implement, and maintain robust security controls across our Azure Gov Cloud environment (including hybrid and multi-cloud scenarios). In this hands-on role, you will build, strengthen, and maintain our cloud security posture, protect critical workloads, and collaborate with engineering, DevOps, and compliance teams to embed security throughout the development lifecycle. You will develop, implement, and leverage Microsoft’s native security tools to detect threats, respond to incidents, and ensure alignment with industry standards and regulations. Lastly, you will be required to both achieve and maintain compliance with government regulations such as FedRAMP and CMMC.  RESPONSIBILITIES: * Implement, design, and manage security architecture for Azure Government and Commercial deployments (with considerations for DoD IL5\IL6 and FedRAMP High controls) * Configure and optimize Microsoft Defender for Cloud, Microsoft Sentinel, Microsoft Defender for Endpoint, and related services for threat detection, vulnerability management, and automated response   * Design and enforce identity & access management using Microsoft Entra ID, Privileged Identity Management (PIM), Conditional Access policies, RBAC, and just-in-time access   * Secure network architectures with Azure Firewall, Network Security Groups (NSGs), DDoS Protection, Web Application Firewall (WAF), Network Watcher, and private endpoints   * Protect data at rest and in transit via Azure Key Vault, encryption strategies, data classification, and information protection controls   * Develop and maintain security policies, initiatives, and blueprints using Azure Policy and Microsoft Purview for compliance (NIST, FedRAMP, CMMC, STIGs, etc.)   * Perform threat hunting, incident response, and forensics using Sentinel playbooks, Log Analytics, and KQL queries   * Conduct security reviews of Infrastructure as Code (IaC), containers, Kubernetes (AKS), and serverless workloads   * Collaborate with developers and architects to implement DevSecOps practices, including secure CI/CD pipelines, code scanning, and secure defaults   * Monitor and remediate security findings, reduce attack surface, and improve overall security posture per the Microsoft Cloud Security Benchmark (MCSB)  * Deploy configurations and compliance policies to Azure AVD endpoints using Intune and other Azure native services.  BASIC QUALIFICATIONS: * Active U.S. security clearance (e.g., Secret, Top Secret) or eligibility to obtain one.  * 3+ years of experience in cloud security, cybersecurity engineering, or related roles (with strong Azure focus)   * Deep hands-on expertise with core Azure security services: Microsoft Defender suite, Sentinel, Intune, Entra ID, Key Vault, Azure Policy, Firewall, Network Watcher, and Purview   * Strong understanding of DLP implementation both in cloud and on endpoints utilizing Purview and other Microsoft native controls * Experience implementing security in hybrid/multi-cloud environments   * Proficiency in scripting/automation (PowerShell, Azure CLI, Bicep/ARM templates, Terraform)   * Strong understanding of identity federation, zero-trust principles, encryption, network security, and vulnerability management   * Familiarity with compliance frameworks (NIST, FedRAMP, CMMC, STIGs, etc.) and regulatory requirements   * Excellent problem-solving, analytical, and communication skills * Strong verbal and written communication skills and the ability to stay composed under pressure. PREFERRED SKILLS AND EXPERIENCE: * Microsoft Certified: Azure Security Engineer Associate (AZ-500), Microsoft Cybersecurity Architect (SC-100) * Additional relevant certifications (e.g., CISSP, CCSP, Microsoft Certified: Azure Administrator, AWS Security Specialty, SANS GCPS, SANS GCAD)   * Deep experience with detection and response engineering and SOC operations * Knowledge of container security (Docker, AKS), secure DevOps, or AI/ML workload protection   * Prior experience in government regulations frameworks such as FedRAMP and CMMC.  COMPENSATION AND BENEFITS: $100,000 - $258,000 USD Base salary is just one part of our total rewards package at SpaceXAI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short & long-term disability insurance, life insurance, and various other discounts and perks. ITAR REQUIREMENTS: * To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here. SpaceXAI is an equal opportunity employer. For details on data processing, view our Recruitment Privacy Notice.

WPP is the trusted growth partner for the world’s leading brands.  We unite cutting-edge media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and expert strategic counsel in a single company – powered by exceptional talent and our agentic marketing platform, WPP Open, to help our clients navigate change, capture opportunity and deliver transformational growth.    We work with the world's most valuable brands and have global reach across 100+ markets, with deep local expertise.   Our people are the key to our success. We're committed to fostering a culture of creativity, belonging and continuous learning, attracting and developing the brightest talent, and providing exciting career opportunities that help our people grow.    For more information, visit WPP.com.   Why we're hiring: WPP is at the forefront of the marketing and advertising industry's largest transformation. Our Global CIO is leading a significant evolution of our Enterprise Technology capabilities, bringing together over 2,500 technology professionals into an integrated global team. This Team will play a crucial role in enabling the ongoing transformation of our agencies and functions. We are looking for a highly technical IT manager to oversee End User Services (EUS) and drive strategic technology operations across the Costa Rica market. This role ensures optimal service delivery, enhances IT frameworks, and manages a diverse technology landscape, integrating user endpoint infrastructure, security, and compliance requirements. The successful candidate will lead IT transformation initiatives and collaborate with cross-functional teams to align technology services with business objectives while maintaining robust system integrity and security posture. What you'll be doing: Roles and Responsibilities   * Oversee and manage daily technology operations to ensure high availability and reliability of IT services. * IT Budget management * Coordinate with cross-functional teams to implement technology solutions aligned with business objectives (WPP ET). * Monitor system performance, troubleshoot issues, and ensure timely resolution of incidents. * Manage IT infrastructure, including servers, networks, and cloud services, maintaining security and compliance standards. (AZURE, LAN) * Supervise and guide technical support staff, fostering professional growth and effective teamwork. * Collaborate with vendors and service providers for procurement, maintenance, and contract management. * Report on operational metrics, incident trends, and improvement initiatives to senior leadership. * Drive the adoption of best practices in IT service management and operational excellence following WPP ET guidelines * Attend and interact effectively and directly with stakeholders * Management of support for business-critical applications   Leadership & Line Management of Engineer Resources * Directly manage EUS Leads and Engineers, facilitate resource planning and workload distribution, ensuring optimal efficiency across projects and operational demands. * Set clear goals, expectations, and KPIs to measure individual and team performance across technical operations. * Lead mentoring and skills development initiatives, fostering a culture of innovation and technical excellence. * Champion process standardization, implementing ITIL and service management best practices for consistent execution. Ticket Queue Management & SLA Compliance * Oversee ticket queue management, ensuring incidents and requests are categorized, prioritized, and assigned efficiently. * Monitor SLA compliance, tracking ticket resolution times and ensuring adherence to service performance metrics. * Ensure documentation of all incidents and service requests, creating detailed root cause analyses for major recurring issues. * Lead stakeholder communication on SLA performance, ensuring transparency in service quality and incident handling expectations. Performance Optimization * Utilize ITIL methodologies to improve service delivery, reduce incidents, and enhance end-user experience. * Implement continuous improvement initiatives, analyzing ticket backlog data to enhance service response times and reduce bottlenecks. * Identify opportunities to implement AI-driven support solutions, including chatbots, predictive analytics, and self-service portals to streamline IT assistance. Infrastructure & End-User Services Management * Manage, implement, and optimize end-user service solutions to enhance support function in the Costa Rica market * Oversee device management, endpoint security, and identity access controls, ensuring compliance with global standards. * Manage deployment, configuration, and lifecycle support for core user environments, including endpoint devices, collaboration platforms, business systems and remote access solutions. Technology Strategy & Architecture * Develop and refine country IT infrastructure roadmaps, ensuring alignment with business needs and scalability considerations. * Lead technology standardization efforts for network architecture, Active Directory, endpoint security, and service automation platforms. * Collaborate with global technology teams to integrate IT frameworks, including enterprise mobility, security policies, and system automation. * Drive continuous improvements in system architecture, ensuring optimized performance of IT assets across on-premises and cloud-based environments. Security, Compliance & Risk Management * Implement cybersecurity best practices in coordination with the Cyber, Risk & Compliance (CRC) team. * Ensure regulatory compliance across identity & access management (IAM), endpoint encryption, and data protection strategies. * Lead incident response protocols, overseeing vulnerability management, SIEM monitoring, and remediation efforts. Vendor & Cost Optimization * Manage enterprise agreements with our technology partners, vendors and providers, ensuring cost-effective procurement of any licensing and services. * Optimize IT budgets, identifying opportunities for cost reduction in service contracts and hardware lifecycle management. * Evaluate emerging technology solutions that align with business expansion and infrastructure modernization initiatives. Project Management & IT Transformation * Lead market deployment of global IT initiatives, including Network, Infrastructure, Modern Workplace, and Security transformations. * Coordinate cross-functional teams on technology rollouts, overseeing user migration strategies, cloud adoption plans, and infrastructure upgrades. What you'll need: * Bachelor's degree in Information Technology, Computer Science or a related field. Or relevant experience within Information Technology. * This is a 100% on-site role; you must be able to work from one of our designated office locations * Strong leadership and team management skills. * Excellent communication and interpersonal skills. * Strong problem-solving and analytical skills. * Understanding of IT endpoint infrastructure, including Microsoft OS, MacOS, Active Directory, device management, Identity Management and Audio-Visual technology. * Proficiency in ITIL and ITSM frameworks * Experience with endpoint management platforms, including MDM solutions like Jamf and Intune. * Strong written and verbal English communication skills (advanced level required) * Demonstrated experience in IT governance, compliance audits, and risk mitigation strategies. * Budget management expertise, overseeing software licensing, vendor contracts, and IT cost optimization. Who you are: You're open: We are inclusive and collaborative; we encourage the free exchange of ideas; we respect and celebrate diverse views. We are open-minded: to new ideas, new partnerships, new ways of working. You're optimistic: We believe in the power of creativity, technology and talent to create brighter futures or our people, our clients and our communities. We approach all that we do with conviction: to try the new and to seek the unexpected. You're extraordinary: we are stronger together: through collaboration we achieve the amazing. We are creative leaders and pioneers of our industry; we provide extraordinary every day.   What we'll give you: Passionate, inspired people – We aim to create a culture in which people can do extraordinary work. Scale and opportunity – We offer the opportunity to create, influence and complete projects at a scale that is unparalleled in the industry. Challenging and stimulating work – Unique work and the opportunity to join a group of creative problem solvers. Are you up for the challenge? #LI-Onsite We believe the best work happens when we're together, fostering creativity, collaboration, and connection. That's why we’ve adopted a hybrid approach, with teams in the office around four days a week. If you require accommodations or flexibility, please discuss this with the hiring team during the interview process. WPP is an equal opportunity employer and considers applicants for all positions without discrimination or regard to particular characteristics. We are committed to fostering a culture of respect in which everyone feels they belong and has the same opportunities to progress in their careers. PLEASE READ OUR PRIVACY NOTICE (HTTPS://WWW.WPP.COM/EN/CAREERS/WPP-PRIVACY-POLICY-FOR-RECRUITMENT) FOR MORE INFORMATION ON HOW WE PROCESS THE INFORMATION YOU PROVIDE.