Top Tech Jobs & Startup Jobs in San Francisco Bay Area, CA

Configure, manage, and troubleshoot Palo Alto NGFWs and Panorama; create security policies (NAT, VPN, URL filtering); deploy IDS/IPS; integrate SASE and Prisma cloud solutions; automate tasks with Python/Ansible/Terraform and APIs; ensure compliance and resolve complex traffic, SSL/TLS, and HA issues.

Manage performance and growth of assigned IDIQ contracts and task orders, oversee staffing, budgets, subcontractors, compliance, and reporting, coordinate cross-functional teams for proposals and delivery, maintain program plans, financials, risk registers, and pursue additional task orders under contract vehicles.

Design, deploy, secure, and maintain enterprise Windows endpoints (Windows 10/11) supporting AI-enabled desktop capabilities. Administer Intune/Endpoint Manager, implement STIG-compliant baselines, configure Conditional Access and Zero Trust controls, automate provisioning with Autopilot and PowerShell, integrate endpoint telemetry with security tools, and support audits and compliance in government cloud environments.

Design and execute AWS GovCloud migrations using the 7 Rs, plan migration waves, automate infrastructure with Terraform, ensure secure hybrid connectivity and Zero Trust controls, validate performance and operational readiness, and support modernization to container and cloud-native platforms.

Design, implement, and operate an enterprise secrets management platform. Onboard applications, automate credential lifecycle (provisioning, rotation, revocation), integrate with AWS services and CI/CD, enforce least-privilege IAM policies, implement PKI and FIPS-compliant cryptography, monitor/audit access, and support GovCloud and DevSecOps integrations.

Design, implement, and operate enterprise IAM/ICAM platforms across on-prem, cloud, SaaS, and hybrid environments. Implement automated provisioning, federation (SAML/OIDC/OAuth/SCIM), PAM, IGA, PIV/CAC and phishing‑resistant MFA. Integrate AWS identity services, enforce least‑privilege access and FICAM alignment, automate workflows, monitor/authentication events, perform access reviews, and collaborate with cross‑functional teams to onboard and secure applications.

Design, deploy, and maintain enterprise PKI and certificate lifecycle automation across Windows, Linux, cloud, containers, applications, and network devices. Implement ACME automation, integrate AWS Private CA/ACM and HSMs, support FPKI/DoD PKI and CAC/PIV, enable mTLS and Zero Trust, establish governance, monitoring, inventory, and troubleshooting processes, and collaborate with security, cloud, identity, and application teams.

Designs, automates, and operates secure enterprise AWS (including GovCloud) and hybrid-cloud environments. Builds IaC, CI/CD and GitOps pipelines, manages Kubernetes/EKS/ECS and container platforms, executes cloud migrations, administers RHEL/Windows servers, enforces DoD/FedRAMP security controls, provides Tier III operations, and leads engineering teams supporting mission-critical government workloads.

Lead end-to-end database migration projects across on-prem, cloud, hybrid, relational and non-relational systems. Plan migration strategies, perform schema mapping and conversions, implement replication and change data capture, minimize downtime with HA techniques, conduct cutovers and rehearsals, validate post-migration, and develop rollback/contingency plans. Collaborate with teams and address technical risks and compatibility issues.