Security Engineer

• Lead the design and implementation of a defense-in-depth security framework for Model Context Protocol (MCP) servers and related agent ecosystems.
• Own enforceable scopes, egress control, and observability patterns that protect internal and customer data while preserving developer velocity.
• Operate as a Lead/Specialist: working independently, leading others to solve complex problems, and applying specialized expertise to influence product, platform, and policy decisions.
• This is a hands-on role: design, code, test, and ship production-grade security components and reference implementations.
• Architect, implement, and maintain a secure ingress pattern for remote MCP servers behind an authenticated gateway.
• Define and implement scope-based authorization aligned to OAuth2/OIDC.
• Build or adapt to egress controls and telemetry for remote and local/stdio MCP servers.
• Ship and maintain production-ready reference implementations and hardened templates for Kubernetes-based deployments.
• Integrate static and supply-chain scanning into CI for MCP servers.
• Automate checks in registration and deployment pipelines.
• Partner with agent teams for tool metadata linting, scope-to-tool mapping, and safety checks at the agent and gateway layers.
• Build and maintain vetted libraries, CLIs, shims, and middleware for token validation, scope evaluation, logging, and egress controls.
• Lead cross-functional technical design with other Trimble security and platform teams.

Lead AI Security Engineer, MCP Security

Information Security – Full/Part Time

Microsoft 365 Consultant, Security

Senior Product Designer – Org & Security

Senior Customer Success Manager – Identity Security

Managementberater, Security – Regulatorik