IT Security Engineer

About Digital Asset & the Canton Network Digital Asset builds the technologies that are reshaping the foundations of financial markets. Our mission is to create the world’s most trusted, privacy-enabled, and interoperable digital infrastructure for global finance. At the heart of this mission is the Canton Network - the blockchain purpose-built for institutional finance.

Uniquely combining privacy, compliance, and scalability, Canton enables real-time, secure settlement across multiple asset classes. Governed by the Canton Foundation with participation from leading financial institutions, it is the proven link between the promise of blockchain and the power of global finance. Founded in 2014 and headquartered in New York City, with offices in London, Zurich, Budapest, Hong Kong, and Sydney— we are on a mission to transform finance— and that transformation is now playing out rapidly on the Canton Network.

If you’re interested in playing a crucial role at the intersection of traditional and crypto-capital markets and want to help bring the next trillion dollars of finance on-chain, join us.

About The Role

: The Digital Asset Security & IT (“Sec IT”) group is responsible for managing, operating, and securing Digital Asset’s corporate security programs, corporate infrastructure, cloud & SaaS services, data stores, and providing oversight, policy, and governance for our CI/CD DevSecOps, development, build, and product/services application security. The IT Security Administrator manages and supports our end-user environments, cloud infrastructure, and automation processes. This role involves managing and administering our end-user devices (Apple/Linux environments) using JAMF Pro and Canonical Landscape, our cloud environments, developing software deployments, and automating laptop build processes.

The team manages Google Workplace and Office 365 environments, integrates services via SAML/OAuth, and collaborates with the Digital Asset Enterprise Support team to deliver customer-focused solutions.

Key Responsibilities

include providing cloud infrastructure support across AWS, GCP, and Azure, managing Kubernetes, cost management of cloud and SaaS expenditure, and ensuring effective staff onboarding/offboarding via automation. They develop and maintain Python and JavaScript scripts to enhance reporting and visibility into cloud and end-user systems, support disaster recovery planning, and ensure secure, authorized access to systems. Additionally, they play a key role in IT education, creating training programs, and staying up-to-date with industry developments to continuously improve the firm’s technology infrastructure.

Responsibilities

: Managing inventory and administering end-user Mac OS and Ubuntu Linux utilizing MDM tools like JAMF Pro and Canonical Landscape. This includes developing new software deployments and scripts to manage the environment, automate the laptop build process, and track inventory. Ensures security agents are deployed and endpoints are patched.

Managing and securing our Corporate IDP, including Google Workspace and Auth0, involves reviewing and updating SAML integrations and auditing non-human identities (API keys/tokens). Manage and monitor the global corporate network, including Juniper devices and Strongswan VPNs. Monitoring an array of security tools like DLP, EDR, MDM, and SIEM to detect anomalies.

Ensuring authorized access by investigating improper access, reporting violations, monitoring information requests through new programming, and recommending improvements. Providing support for our Cloud Infrastructure (AWS, GCP, Azure) environments to set up projects and manage costs. Collaborating with our Engineering teams to administer and deploy different types of cloud workloads while utilizing our CSPM to validate security posture during provisioning.