Principal Product Security Engineer

Category: Technology

Position Type: Full Time

Location: US-CA-Pleasanton

Overview: As a Principal Security Engineer, you'll serve as the technical strategist and architect driving security and identity strategy across the organization's entire technical ecosystem—Network, Endpoint, Azure/AD Infrastructure, and Identity (Okta). With a primary focus on identity and access management, you'll lead the vision and technical direction of our IAM program while extending your influence across the broader corporate security landscape, including data loss prevention, remote access, and secure enterprise browsing. You'll be the trusted right-hand technical leader who partners closely with security and infrastructure leadership to establish foundational practices, mature our security posture, and ensure our defenses keep pace with an evolving threat landscape. Your work will directly impact the security, compliance, and resilience of the entire organization. YOU'D LOVE THIS JOB IFyou're passionate about establishing security and IAM best practices from the ground up and love the challenge of driving technical strategy across multiple domains—identity, network, endpoint, and cloud infrastructureyou thrive on being the technical visionary and trusted advisor who doesn't just solve today's security challenges, but architects the principles, strategies, and roadmaps that mature the organization's entire security postureyou find deep satisfaction in influencing and elevating engineering teams across disciplines, knowing that your technical guidance shapes how the entire organization approaches identity, access, and securityyou excel at translating sophisticated security and identity concepts into strategic roadmaps that align with compliance requirements (PCI DSS, SOC2, NYDFS) and get stakeholders excited about security investments

Responsibilities: Serves as the principal technical strategist and architect driving security and identity strategy across Network, Endpoint, Azure/AD Infrastructure, and Okta, partnering closely with security and infrastructure leadership Leads the overall strategy, direction, and technical vision of the organization's identity and access management program, establishing IAM principles and best practices across identity lifecycle management, identity governance & administration (IGA), privileged access management (PAM), and access request/entitlement processes Designs & implements comprehensive identity governance solutions to consolidate fragmented identity systems (multiple AD domains, Okta tenants) into a unified, compliant architecture Drives the organization's remote access strategy, architecting secure connectivity solutions (Prisma Access / SASE) including SSL/TLS decryption for traffic inspection and threat prevention Establishes and manages data loss prevention (DLP) strategy and controls to protect sensitive data across the enterprise Leads adoption and integration of secure enterprise browser technology (Prisma Browser) to protect access to corporate applications and data Provides technical vision in the deployment of authentication, authorization, provisioning, network security, and endpoint security technologies across heterogeneous environments Partners with Compliance, Security, and IT Operations teams to ensure solutions meet regulatory requirements and security objectives Evaluates emerging security and IAM technologies (zero trust, passwordless authentication, identity threat detection, SASE) to keep the organization at the forefront of access and data security Mentors and upskills engineering teams across disciplines, building organizational competency in security and identity best practices

Benefits: Salary Range for California Residents Only: $189,990.00 to $256,500.00 Pay is based on several factors including but not limited to education, work experience, certifications, etc. In addition to your salary, Blackhawk Network offers benefits including 401k with employer matchmedicaldentalvision12 paid holidays in the year1 hour of sick pay accrual for every 30 hours workedparental leavelife insurancedisability insuranceaccident and illness insurancehealth and dependent care flexible spending accountswellness benefitsflexible time off for all full-time employeesEEO Statement: Blackhawk Network provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. Blackhawk Network believes that diversity leads to strength. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training. Blackhawk Network encourages applicants with previous criminal records to apply to all positions and, pursuant to the San Francisco and Los Angeles Fair Chance Acts (and other “Fair Chance” laws), Blackhawk Network will consider for employment qualified applicants with arrest and conviction records. For Philadelphia applicants or jobs, please see a copy of Philadelphia’s ordinance on this topic by clicking this link: https://codelibrary.amlegal.com/codes/philadelphia/latest/philadelphia_pa/0-0-0-280104.