Senior engineers exclusively. No tier-one queue, so there is no junior pass-through to grow into. If you've been in the field eight years and you've cleaned up other people's environments, you're who we look for.
If three of these resonate, we should talk. If all of them do, write us today.
Of hands-on field practice. Not eight years of titles — eight years in environments, with on-call.
You write things down without being asked. You believe an environment without documentation isn't real.
You've been in the room for a P1 outage and made it shorter, not longer.
You can say no to a client without escalating it. You can also say yes when the answer is yes.
You've kept up because you wanted to, not because someone made you.
You can be on-site in Boca three days a week. South Florida or willing to be.
All positions are W-2, full-time, with health, dental, vision, 401(k) match, and unlimited PTO that we actually expect you to use.
You'll own client M365 environments end-to-end: tenant design, Entra ID hardening, Intune, conditional access, ITDR, mailbox/SharePoint architecture. Carry incident response when it touches identity.
We expect: 8+ years on Microsoft identity at scale, deep Entra ID, comfort writing PowerShell that other people will read.
You'll design, deploy, and operate client networks: edge firewalls, internal segmentation, wireless, VPN, SD-WAN. Quarterly pen-test response cycles fall in your lane.
We expect: NSE / CCNP-equivalent depth, comfort with packet captures, understanding of network as a security boundary, not a transport layer.
Senior tier of our SOC. You triage what the L1/L2 escalates, lead containment for confirmed incidents, and write the post-mortem. On-call rotation is 1-in-5.
We expect: GCFA / GCIH / OSCP-equivalent, hands-on response in ransomware and BEC, comfort speaking with general counsel and an insurance carrier on the same call.
Hold the vCIO seat for six to eight regulated clients. Translate technology into board-grade language. Drive roadmaps, vendor consolidation, M&A diligence, and cyber-insurance applications.
We expect: prior CIO or vCIO seat at a regulated org (financial, legal, healthcare), the gravitas to hold a board's attention, the empathy to keep an engineer's trust.
Four steps. Two weeks if calendars cooperate. Yes-or-no by the end.
And three lines on the most interesting environment you've ever recovered. Send to careers@thebluevault.com.
With the person who'd be your manager. We talk about your background, your motivations, and what you'd want different.
A real scenario from our queue, on a sandbox environment. Walk us through what you'd do. We pair, not interrogate.
Come to the office, meet the team, see where you'd sit. Offer in hand by end of day. References checked after acceptance.
One-page resume + three lines on a recovery you're proud of. That's it.
careers@thebluevault.com→