Security Engineer

The Security Engineer is a technical role responsible for designing, implementing, and operating core security controls across the organization’s infrastructure and cloud platforms. This role serves as the owner for key security tooling and processes (for example, endpoint protection, logging and monitoring, vulnerability management, and secure configurations) and works closely with Network, Systems, and IAM teams to ensure secure, compliant, and efficient operations.

The Security Engineer II supports Identity and Access Management (IAM) workflows and policies but does not serve as the primary IAM program owner.

• Design, implement, and maintain security controls for networks, servers, endpoints, and cloud services, including firewalls, endpoint protection, email/web security, and VPN/remote access.
• Own the configuration, operation, and tuning of core security tools (for example, endpoint protection, log collection/monitoring, vulnerability scanning), including health checks, upgrades, and effectiveness reviews.
• Work with Network Administrators, Network Engineers, and Systems Administrators to ensure new infrastructure deployments follow standardized security baselines and hardening guidelines.
• Develop and maintain security standards, diagrams, and technical documentation for security architectures and controls.
• Monitor security alerts and logs (identity, endpoint, email, network) using established tools and elevate or respond according to documented runbooks.
• Investigate security incidents involving endpoints, servers, and user accounts; perform containment and recovery activities in coordination with infrastructure and IAM teams.
• Coordinate periodic vulnerability scans and patching campaigns, working with system and application owners to remediate findings within defined SLAs.
• Contribute to post?incident reviews by documenting root cause, corrective actions, and improvements to controls and processes.
• Implement and maintain technical controls required by organizational security policies and applicable frameworks (for example, NIST/CMMC) in partnership with IT leadership and security/IAM stakeholders.
• Support internal and external audits of security controls by providing technical evidence, documentation, and explanations of how controls are implemented.
• Collaborate with Project Managers, business unit IT contacts, and application owners to embed security requirements into projects and change initiatives.
• Contribute to security awareness efforts by providing technical input related to secure configurations, endpoint security, and authentication practices.
• Support IAM operations in Entra /Azure AD, on?prem Active Directory, and key business applications by assisting with secure patterns for provisioning/de?provisioning, access changes, and role models.
• Help implement and maintain IAM policies such as MFA requirements, conditional access rules, and privileged access workflows, in coordination with Senior Security & IAM Analysts and IAM Engineers.
• Participate in investigations of identity?related security events (for example, suspicious sign?ins, compromised accounts) by providing input on endpoint/network aspects and coordinating remediation.
• Maintain and improve technical documentation related to IAM?adjacent security configurations (for example, secure login flows, device compliance requirements, integration touchpoints with security tools).
• Develop and maintain basic automation (for example, Power Shell scripts) to support security operations tasks such as log collection, configuration checks, and simple IAM/support workflows.
• Identify opportunities to streamline security processes, reduce manual effort, and improve consistency of control deployment across environments.
• Provide guidance and informal mentorship to junior Security & IAM Analysts and infrastructure staff on security best practices, standard procedures, and use of security tooling as appropriate.

• 3–6 years of experience in IT infrastructure, systems administration, network engineering, or security operations, with significant responsibility for security controls and/or IAM.
• Strong hands?on experience…