Lead Security Engineer - Workspace

Description

Job Location

The primary work location for this role is Trivandrum, India with a hybrid/ remote work model.

About Envestnet

Envestnet is an adaptive WealthTech company that is redefining the future of wealth management by helping advisors meet the moment with its comprehensive technology, actionable insights, and industry leading support. Backed by over 25 years of experience and approximately $7.0 trillion in platform assets, Envestnet is trusted by over one third of financial advisors across leading banks, wealth managers, brokerages, and RIAs.

For a deeper look at how Envestnet is shaping the future of financial advice, visit .

The Team You’ll Join

You will join Envestnet’s Technology team, where we design, build, and maintain scalable, secure, and robust WealthTech solutions that power the future of financial advice. The team collaborates closely with product, operations, and business stakeholders to drive innovation, enhance efficiency, and enable sustainable growth. Guided by modern engineering practices and a commitment to domain excellence, technical rigor, and collaboration, the Technology team ensures our platforms remain resilient, adaptable, and aligned with evolving business needs making it a core driver of Envestnet’s long term success.

How You’ll Contribute

• Improve the security posture of enterprise endpoints, cloud-managed devices, VDI, privileged workstations, developer environments, and SaaS-connected workspaces.
• Reduce endpoint, identity, and data security risk by implementing controls that limit lateral movement, credential misuse, unmanaged device access, and exposure of sensitive data.
• Strengthen security for high-risk user and engineering environments, including privileged access, development workflows, AI-enabled tooling, and systems that process sensitive or regulated data.
• Support secure endpoint and workspace operations through policy enforcement, posture monitoring, automation, reporting, and remediation workflows.
• Partner cross-functionally to align endpoint and workspace security controls with enterprise security standards, compliance expectations, and business needs.
• Maintain clear documentation, control evidence, runbooks, and operational procedures to support consistent execution and audit readiness.
  

What You’ll Need to Bring

• Strong hands-on experience securing and managing enterprise endpoint environments across Windows, macOS, Linux, VDI, remote workspaces, cloud-managed devices, and developer workstations.
• Deep understanding of endpoint hardening, endpoint protection technologies, device management, security baselines, EDR/XDR, DLP, disk encryption, host firewalls, application control, Intune, Autopilot, and related endpoint security tools.
• Understanding of identity-based security controls, Conditional Access, device compliance, credential protection, token protection, and Zero Trust principles.
• Experience implementing or supporting endpoint data protection controls, including encryption, DLP, CASB/SaaS policies, and monitoring for sensitive or regulated data.
• Proficiency in scripting, automation, and AI-assisted engineering using PowerShell, Python, or similar languages and tools.
• Solid understanding of endpoint hardening, compliance, and control frameworks such as CIS benchmarks, NIST standards, and related enterprise security requirements.
  

Nice-to-Haves

• Experience securing high-risk workstation and development environments, including Privileged Access Workstations, Endpoint Privilege Management, least-privilege access models, application control, containers, DevOps pipelines, source code platforms, build systems, engineering workstations, and AI-enabled development workflows.
• Hands-on experience with CASB or SaaS security tools such as Microsoft Defender for Cloud Apps, Zscaler, Obsidian, Netskope, or similar platforms.
• Experience with vulnerability management, patch orchestration, endpoint compliance reporting, security control deployment, and infrastructure-, configuration-, or policy-as-code approaches at enterprise scale.
• Experience supporting regulated environments or data protection requirements involving PII, PHI, PCI, intellectual property, or other sensitive data.
  
  

Why You’ll Enjoy Working at Envestnet

Help shape the future of WealthTech. At Envestnet you’ll gain hands-on experience and collaborate with some of the industry’s brightest minds to deliver meaningful, innovative solutions that make a real difference.

We value flexibility in how and where work gets done, and we recognize strong performance with meaningful rewards—because your contributions should drive both business success and your own personal growth. If you’re looking for a place where your work has impact, your development is supported, and your contributions are truly valued, Envestnet is where you can build your future.

The opportunity is now!

Our Investment in You

At Envestnet, our total rewards philosophy is designed to attract, motivate, and grow exceptional talent. We offer competitive, market-aligned compensation complemented with performance-linked incentives and rewards programs that recognize and reward impact.

In addition, we provide a comprehensive suite of benefits - subject to Envestnet’s plan eligibility rules - that support your overall well-being, including medical insurance for you and your family, annual health check-ups, free online doctor consultations and telemedicine services, subsidized health club memberships, and an employee assistance program. Our investment in you means supporting you professionally, financially, and personally at every stage of your journey with us.

Our Commitment to Inclusion & Belonging

Envestnet is an Equal Employment Opportunity employer and does not discriminate in employment on the basis of religion, race, color, caste, sex, gender, gender identity or expression, pregnancy, age, disability, medical condition, nationality, ethnic origin, marital status, or any other status protected under applicable Indian law. This commitment is in accordance with the Constitution of India and applicable labor and employment laws. All employment decisions are made solely based on merit, qualifications, performance, and business needs.

We strive to provide an inclusive application and interview process. If you are a candidate with a disability and require reasonable accommodation, please contact us at . Please include your full name, the title of the role you are applying for, and the accommodation necessary to assist you with the recruiting process.

Recruitment Fraud

At Envestnet, safeguarding the trust and safety of job seekers is a top priority. We are aware that scammers may impersonate Envestnet recruiters or create fake job opportunities to deceive candidates. Review the information on our recruitment fraud awareness page to help you recognize and avoid recruitment fraud.