Enterprise Security Engineer

The Enterprise Security Engineer is responsible for designing, implementing, and maintaining secure enterprise infrastructure across both on-premises and cloud environments. This role establishes security architecture standards, governs identity and access management systems, and ensures segmentation between internal corporate systems and cloud platforms. The engineer will bring deep expertise in enterprise security technologies, cloud security (Azure, GCP), and modern detection/monitoring platforms such as Microsoft Sentinel and CrowdStrike premises and cloud environments.

ESSENTIAL TASKS

Enterprise Security Architecture:

• Support the design and maintenance of secure network architectures through the provision of recommendations and best practices for segmentation, firewall policies, and access control standards across corporate back-office infrastructure
• Establish and maintain enterprise security baselines, system hardening standards, and configuration management policies aligned to industry frameworks
• Lead security architecture reviews for new and existing systems and provide guidance to engineering teams on secure design principles

Cloud Security (Azure & GCP):

• Design, implement, and maintain cloud security controls in Azure, Google Cloud Platform (GCP), AWS including network security groups, service accounts, workload identity federation, logging, and cloud-native security tooling
• Support secure integration and connectivity between on-premises environments and cloud-hosted applications and infrastructure
• Apply cloud hardening standards, ensure proper encryption configurations, and enforce secure deployment patterns.
• Contribute to cloud security initiatives by applying security best practices for Google Kubernetes Engine (GKE) and supporting the organization’s transition from Windows-based environments to modernized cloud-native deployments
• Develop and implement secure configurations for Cloud SQL in alignment with evolving cloud database security standards

Security Infrastructure & Tooling:

• Configure, maintain, and develop SIEM and security monitoring technologies including Microsoft Sentinel, CrowdStrike Falcon, and other endpoint, log analytics, or detection platforms
• Develop and maintain detection rules, alert logic, and automated workflows to strengthen enterprise security posture
• Manage PKI and security certificates, including lifecycle management, renewal processes, and deployment automation

Infrastructure Security:

• Conduct infrastructure security assessments across servers, networks, applications, and cloud environments to identify vulnerabilities and misconfigurations.
• Remediate or coordinate remediation of identified issues in collaboration with infrastructure, engineering, and cloud teams.
• Design and implement secure data handling standards, encryption policies, and key management practices.

 AI Utilization:

• Leverage AI-enabled tools and analytics to enhance decision-making, improve efficiency, and drive measurable business outcomes when appropriate.
• Apply sound judgment and ethical standards when using AI, ensuring accuracy, data privacy, and responsible human-in-the-loop oversight.

PREFERRED SKILLS AND EXPERIENCE

• 5+ years in enterprise security engineering, infrastructure security, or a systems engineering role with strong security responsibilities
• Experience designing and securing corporate back office and hybrid cloud environments
• Expertise with major cloud platforms, particularly Azure and Google Cloud Platform (GCP), and cloud-native security features
• Hands-on experience with Microsoft Sentinel, CrowdStrike Falcon, or other SIEM/XDR/EDR technologies. Demonstrated fluency in Kusto Query Language (KQL) and Falcon Query Language (FQL)
• Strong understanding of identity and access management, including Active Directory, Azure AD/Entra ID, IAM policies, SSO, MFA, and PAM solutions
• Proficiency with infrastructure-as-code (IaC) tools and automation scripting using PowerShell or Python
• Strong knowledge of networking, encryption, certificates, and security protocols
• Excellent communication skills with the ability to work effectively across cross-functional teams

The pay range for this position is $83,000-$95,000/year; however, base pay offered may vary depending on job-related knowledge, geographic location, skills, and experience. This position is eligible for an annual bonus in addition to a full range of benefits. This information is provided per the relevant state and local pay transparency laws for the location in which this position will be performed.

The Enterprise Security Engineer is responsible for designing, implementing, and maintaining secure enterprise infrastructure across both on-premises and cloud environments. This role establishes security architecture standards, governs identity and ac...

The Enterprise Security Engineer is responsible for designing, implementing, and maintaining secure enterprise infrastructure across both on-premises and cloud environments. This role establishes security architecture standards, governs identity and access management systems, and ensures segmentation between internal corporate systems and cloud platforms. The engineer will bring deep expertise in enterprise security technologies, cloud security (Azure, GCP), and modern detection/monitoring platforms such as Microsoft Sentinel and CrowdStrike premises and cloud environments.

ESSENTIAL TASKS

Enterprise Security Architecture:

• Support the design and maintenance of secure network architectures through the provision of recommendations and best practices for segmentation, firewall policies, and access control standards across corporate back-office infrastructure
• Establish and maintain enterprise security baselines, system hardening standards, and configuration management policies aligned to industry frameworks
• Lead security architecture reviews for new and existing systems and provide guidance to engineering teams on secure design principles

Cloud Security (Azure & GCP):

• Design, implement, and maintain cloud security controls in Azure, Google Cloud Platform (GCP), AWS including network security groups, service accounts, workload identity federation, logging, and cloud-native security tooling
• Support secure integration and connectivity between on-premises environments and cloud-hosted applications and infrastructure
• Apply cloud hardening standards, ensure proper encryption configurations, and enforce secure deployment patterns.
• Contribute to cloud security initiatives by applying security best practices for Google Kubernetes Engine (GKE) and supporting the organization’s transition from Windows-based environments to modernized cloud-native deployments
• Develop and implement secure configurations for Cloud SQL in alignment with evolving cloud database security standards

Security Infrastructure & Tooling:

• Configure, maintain, and develop SIEM and security monitoring technologies including Microsoft Sentinel, CrowdStrike Falcon, and other endpoint, log analytics, or detection platforms
• Develop and maintain detection rules, alert logic, and automated workflows to strengthen enterprise security posture
• Manage PKI and security certificates, including lifecycle management, renewal processes, and deployment automation

Infrastructure Security:

• Conduct infrastructure security assessments across servers, networks, applications, and cloud environments to identify vulnerabilities and misconfigurations.
• Remediate or coordinate remediation of identified issues in collaboration with infrastructure, engineering, and cloud teams.
• Design and implement secure data handling standards, encryption policies, and key management practices.

 AI Utilization:

• Leverage AI-enabled tools and analytics to enhance decision-making, improve efficiency, and drive measurable business outcomes when appropriate.
• Apply sound judgment and ethical standards when using AI, ensuring accuracy, data privacy, and responsible human-in-the-loop oversight.

PREFERRED SKILLS AND EXPERIENCE

• 5+ years in enterprise security engineering, infrastructure security, or a systems engineering role with strong security responsibilities
• Experience designing and securing corporate back office and hybrid cloud environments
• Expertise with major cloud platforms, particularly Azure and Google Cloud Platform (GCP), and cloud-native security features
• Hands-on experience with Microsoft Sentinel, CrowdStrike Falcon, or other SIEM/XDR/EDR technologies. Demonstrated fluency in Kusto Query Language (KQL) and Falcon Query Language (FQL)
• Strong understanding of identity and access management, including Active Directory, Azure AD/Entra ID, IAM policies, SSO, MFA, and PAM solutions
• Proficiency with infrastructure-as-code (IaC) tools and automation scripting using PowerShell or Python
• Strong knowledge of networking, encryption, certificates, and security protocols
• Excellent communication skills with the ability to work effectively across cross-functional teams

The pay range for this position is $83,000-$95,000/year; however, base pay offered may vary depending on job-related knowledge, geographic location, skills, and experience. This position is eligible for an annual bonus in addition to a full range of benefits. This information is provided per the relevant state and local pay transparency laws for the location in which this position will be performed.

The Enterprise Security Engineer is responsible for designing, implementing, and maintaining secure enterprise infrastructure across both on-premises and cloud environments. This role establishes security architecture standards, governs identity and ac...