Senior Security Engineer

Position Description

KPA is seeking a Senior Security Engineer to serve as the senior technical counterpart to the Director of Security & Technology. This role owns KPA's security platforms, cloud security, identity, automation, and technical security initiatives. The ideal candidate is a hands‑on security engineer with strong cloud and infrastructure experience who can independently lead complex security projects, partner effectively with IT Operations and Dev Ops, and continuously improve KPA's security posture.

KPA is seeking a Senior Security Engineer to serve as the senior technical counterpart to the Director of Security & Technology. This role owns KPA's security platforms, cloud security, identity, automation, and technical security initiatives. The ideal candidate is a hands‑on security engineer with strong cloud and infrastructure experience who can independently lead complex security projects, partner effectively with IT Operations and Dev Ops, and continuously improve KPA's security posture.

• Own KPA's enterprise security platforms, including Crowd Strike, Rapid7 (InsightIDR, InsightVM, Insight App Sec , MDR), Cisco Umbrella, Cisco Duo, KnowBe4, and related technologies.
• Lead vulnerability management and remediation, endpoint security, identity security, privileged access, penetration testing, and security hardening initiatives.
• Lead security incident response, investigations, containment, remediation, and post‑incident reviews.
• Own the ongoing operation of SOC 2 controls, security audit requirements, and technical compliance initiatives.
• Own Cisco Meraki security, VPN infrastructure, network security controls, and secure cloud connectivity.
• Secure Azure, AWS, Microsoft 365, Entra , AWS Identity Center, Auth0, and cloud‑native workloads using modern security best practices.
• Administer and improve identity governance across Microsoft Entra , Cisco Duo, AWS Identity Center, Auth0, SSO, SCIM, Conditional Access, PIM, privileged accounts, service accounts, and authentication architecture.
• Partner with Dev Ops to integrate security into CI/CD pipelines, Infrastructure as Code, containers, Kubernetes, and cloud workloads, including SAST, DAST, Snyk, and other application security technologies.
• Own and continually improve KPA's cloud security posture management, workload protection, identity controls, logging, alerting, detection engineering, and remediation processes.
• Own email security across Microsoft 365, Send Grid, Amazon SES, SPF, DKIM, DMARC, and phishing protection.
• Build security automation using Power Shell, Python, Microsoft Graph, REST APIs, and AI‑assisted development.
• Lead security assessments for new vendors, SaaS platforms, cloud services, and third‑party integrations; administer third party vendor management (TPVM) and support ongoing vendor risk management.
• Administer and improve KPA's security awareness program, security policies, standards, and technical procedures.
• Support AI security and governance initiatives, including ChatGPT Enterprise, Claude, MCP, and emerging AI technologies.
• Support security architecture reviews for new cloud services, platforms, integrations, and technical initiatives.
• Proactively identify security gaps, technical debt, and opportunities to improve KPA's security posture through automation, AI, and modern engineering practices.

• 5+ years of experience in security engineering, cloud security, infrastructure security, or a related senior technical role.
• Strong knowledge of identity security, endpoint security, vulnerability management, network security, incident response, and zero trust principles.
• Experience securing Azure, AWS, Microsoft 365, Entra , Windows, and Linux.
• Familiarity with CI/CD pipelines, Kubernetes, container security, application security scanning, and Dev Sec Ops  practices.
• Scripting and automation experience using Power Shell, Python, REST APIs, or similar technologies.
• Experience supporting SOC 2 & NIST CSF or comparable security and compliance frameworks.
• Relevant certifications such as CompTIA Security+, CISSP, CCSP, AWS Certified Security, or equivalent certifications are preferred.
• Excellent communication, documentation, project leadership, and problem‑solving skills.
• Bachelor's degree in Computer Science, Information Technology or Cybersecurity or equivalent experience.

• Work ethic that aligns with KPA's core values:
  • Trust: earning trust through integrity, expertise, and acting in the client's best interest.
  • Innovation: continuously seeking out ways to better serve clients.
  • Excellence: holding ourselves to high standards in everything we do.
  • Results: moving with purpose to deliver meaningful outcomes.
• Owns and continually improves KPA's enterprise security platforms and technical security controls.
• Improves KPA's security posture across endpoints, identity, networking, cloud, and Dev Ops environments.
• Delivers complex security initiatives with strong planning, communication, documentation, testing, and…