Cybersecurity Security Engineer II

Our core values — Stewardship, Character, Collaborate, Learn, Disrupt — are the lens through which we evaluate every business decision. As a dynamic, growing company that offers extremely competitive compensation and benefits, our employees are our most valued assets and the foundation of Expand's performance among our E&P competitors.

We seek applicants from all backgrounds to ensure we get the best, most creative talent on our team. We realize that, historically, underrepresented groups feel the need to be 100% qualified in order to apply. If you meet any combination of our requirements, we encourage you to apply. We strive to hire people from a wide variety of backgrounds, not just because it’s the right thing to do, but because it makes our company stronger.

Expand Energy is seeking a Cybersecurity Engineer to join our cybersecurity team with a primary focus on Identity and Access Management (IAM) and Cloud Security. This role is ideal for a security professional with 3-5 years of experience who is passionate about securing modern cloud environments and enterprise identity platforms.

The Cybersecurity Engineer will support and enhance our identity ecosystem, secure our Microsoft Azure cloud environment, and help advance our cloud security posture management capabilities. This position combines hands‑on operational responsibilities with engineering and design opportunities, allowing the successful candidate to develop into a future security architecture role.

The ideal candidate possesses strong technical knowledge of cloud security and identity security principles, is comfortable working across multiple security technologies, and has a desire to grow into a strategic contributor who helps shape the future direction of cybersecurity at Expand Energy.

• Administer and support enterprise IAM technologies, including Okta, SailPoint, Cyber Ark / Idira, and Microsoft Entra
• Configure and maintain Single Sign-On (SSO) and federation services, with emphasis on Okta policy administration and application integrations
• Implement and support MFA and Conditional Access policies
• Assist with identity lifecycle management processes, including provisioning, deprovisioning, and access governance
• Support privileged access management initiatives and privileged account controls
• Partner with application owners to integrate applications with enterprise identity services
• Assist in maintaining and improving identity governance and Zero Trust security initiatives

• Support security operations and engineering activities within Microsoft Azure
• Assist with the implementation and ongoing administration of Microsoft Defender for Cloud
• Monitor and improve the organization's Cloud Security Posture Management (CSPM) program
• Identify, track, and support remediation of cloud security risks and misconfigurations
• Implement and support Azure Role-Based Access Control (RBAC) and least‑privilege access models
• Participate in cloud security assessments, security reviews, and architecture discussions
• Contribute to the development of cloud security standards, patterns, and best practices

• Support day‑to‑day cybersecurity operations while participating in engineering and improvement initiatives
• Troubleshoot authentication, authorization, identity, and access‑related issues
• Participate in incident response activities and operational support efforts as needed
• Participate in an on‑call rotation supporting critical cybersecurity services
• Work with infrastructure and application teams to implement secure solutions
• Develop and maintain technical documentation, standards, and operational procedures
• Identify opportunities to automate manual processes and improve operational efficiency

• Contribute ideas and recommendations for improving security architecture and operational maturity
• Assist with evaluating emerging security technologies and capabilities
• Leverage scripting, automation, and AI technologies to create repeatable and scalable security processes
• Develop expertise that enables progression toward a future security…