Cybersecurity Security Engineer II

Cybersecurity Security Engineer II

Expand Energy is seeking a Cybersecurity Engineer to join our cybersecurity team with a primary focus on Identity and Access Management (IAM) and Cloud Security. This role is ideal for a security professional with 3-5 years of experience who is passionate about securing modern cloud environments and enterprise identity platforms. The Cybersecurity Engineer will support and enhance our identity ecosystem, secure our Microsoft Azure cloud environment, and help advance our cloud security posture management capabilities.

This position combines hands-on operational responsibilities with engineering and design opportunities, allowing the successful candidate to develop into a future security architecture role. The ideal candidate possesses strong technical knowledge of cloud security and identity security principles, is comfortable working across multiple security technologies, and has a desire to grow into a strategic contributor who helps shape the future direction of cybersecurity at Expand Energy.

Job Duties & Responsibilities

• Identity & Access Management
• Administer and support enterprise IAM technologies, including Okta, SailPoint, Cyber Ark / Idira, and Microsoft Entra
• Configure and maintain Single Sign-On (SSO) and federation services, with emphasis on Okta policy administration and application integrations
• Implement and support MFA and Conditional Access policies
• Assist with identity lifecycle management processes, including provisioning, deprovisioning, and access governance
• Support privileged access management initiatives and privileged account controls
• Partner with application owners to integrate applications with enterprise identity services
• Assist in maintaining and improving identity governance and Zero Trust security initiatives
• Cloud Security
• Support security operations and engineering activities within Microsoft Azure
• Assist with the implementation and ongoing administration of Microsoft Defender for Cloud
• Monitor and improve the organization's Cloud Security Posture Management (CSPM) program
• Identify, track, and support remediation of cloud security risks and misconfigurations
• Implement and support Azure Role-Based Access Control (RBAC) and least-privilege access models
• Participate in cloud security assessments, security reviews, and architecture discussions
• Contribute to the development of cloud security standards, patterns, and best practices
• Security Engineering & Operations
• Support day-to-day cybersecurity operations while participating in engineering and improvement initiatives
• Troubleshoot authentication, authorization, identity, and access-related issues
• Participate in incident response activities and operational support efforts as needed
• Participate in an on-call rotation supporting critical cybersecurity services
• Work with infrastructure and application teams to implement secure solutions
• Develop and maintain technical documentation, standards, and operational procedures
• Identify opportunities to automate manual processes and improve operational efficiency
• Security Innovation & Future Growth
• Contribute ideas and recommendations for improving security architecture and operational maturity
• Assist with evaluating emerging security technologies and capabilities
• Leverage scripting, automation, and AI technologies to create repeatable and scalable security processes
• Develop expertise that enables progression toward a future security architecture role over time

Job Specific Skills

• Strong understanding of SSO, federation, MFA, identity governance, privileged access management, RBAC, and IAM best practices
• Experience with one or more IAM platforms such as Okta, SailPoint, Cyber Ark / Idira, or Microsoft Entra
• Working knowledge of cloud security principles and best practices
• Strong troubleshooting, analytical, and problem-solving skills
• Ability to communicate clearly with technical teams, application owners, and business stakeholders

Education

• Minimum:
  High school diploma or GED
• Preferred:
  Bachelor's degree - from accredited university - Cybersecurity, Information Security, Computer Science, Information Systems, or a related discipline
• Preferred:
  Cybersecurity training

Experience

• Minimum: 2 years work experience in cybersecurity, cloud security, IAM, infrastructure security, or a related field
• Experience supporting enterprise cloud environments, preferably Microsoft Azure
• Experience with identity and access management concepts and technologies

Additional Qualifications

• Preferred qualifications:
• CompTIA Security+
• Microsoft Azure Security Engineer (AZ-500)
• Microsoft Identity and Access Administrator (SC-300)
• CISSP, Associate of ISC2, or progress toward CISSP certification
• Other relevant cloud, identity, or cybersecurity certifications
• Experience with Microsoft Defender for Cloud
• Experience with Cloud Security Posture Management (CSPM) practices
• Knowledge of Zero Trust architecture principles
• Scripting and automation experience using Power Shell, Python, or similar technologies
• Experience leveraging AI tools to…