SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
The Solana Foundation, a non-profit based in Zug, Switzerland, is seeking a Senior IT Security Engineer to own and mature the organization's enterprise security program. This is a hands-on, high-ownership role reporting to the CISO, responsible for identity, endpoint, and SaaS security across a global team.
Key responsibilities include deploying and managing centralized identity and access management platforms (Okta); configuring and managing endpoint detection and response (EDR) and mobile device management (MDM) solutions; managing secure configuration and governance across the SaaS application fleet; collaborating with operations to secure the full lifecycle of a global endpoint fleet from procurement through retirement; implementing access control systems and internal data security practices; operating vulnerability management solutions including scanning, triage, and remediation tracking; auditing and securing modern enterprise tech stacks (GitHub, AWS, GCP); executing backup testing and participating in incident response; and maintaining compliance with security frameworks such as ISO 27001 and SOC 2.
Ideal candidates bring strong infrastructure and enterprise security experience including security governance, access control systems, and vulnerability management. Hands-on experience deploying and managing SSO, EDR, and MDM tooling is required. Experience securing and managing SaaS application fleets at organization-wide scale, managing global endpoint fleets across their full lifecycle, and securing modern enterprise tech stacks is essential. Scripting proficiency (Python, Go, or Bash) to automate security workflows and integrations is expected. Experience building backup processes, leading incident response, and working within security frameworks (ISO 27001, SOC 2) is required. Strong communication skills and comfort operating autonomously across time zones are critical.
Bonus experience includes familiarity with both web2 operational security and crypto/web3 environments, understanding how their security and risk models differ, and experience securing custody, key management, or other crypto-specific infrastructure.
