Sr. Security Engineer, Cloud Infrastructure

Overview

The ideal candidate is a hands‑on security engineer with strong Microsoft cloud and infrastructure security experience who can configure, troubleshoot, document, and improve security controls in a regulated healthcare environment.

• Implement and support security controls across Microsoft cloud services, endpoint platforms, identity systems, infrastructure, SaaS applications, and network environments.
• Support vulnerability management activities, including validation, prioritization, remediation coordination, patching support, and closure documentation.
• Configure and improve Microsoft security capabilities across Microsoft 365, Entra , Intune, Defender, Sentinel, Purview, Azure, and related security platforms.
• Support endpoint security improvements, including endpoint protection, device compliance, encryption, patching, configuration baselines, and secure administration practices.
• Support identity and access security controls, including MFA, Conditional Access, privileged access, service accounts, vendor access, and access review processes.
• Support Azure security controls, including RBAC, policy enforcement, logging, secure networking, resource configuration, and cloud security posture improvements.
• Support Microsoft Purview and data protection capabilities, including DLP, sensitivity labels, data classification, audit support, eDiscovery support, and policy tuning.
• Support web security controls, including web proxy, secure web gateway, URL filtering, browser controls, internet access logging, and related policy enforcement.
• Configure, validate, and improve security logging to support monitoring, investigation, reporting, and audit evidence.
• Investigate security alerts and incidents, perform technical analysis, support containment and recovery actions, and document findings.
• Partner with infrastructure, cloud, network, application, compliance, vendor, and business teams to implement practical security improvements.
• Produce technical documentation, including implementation notes, runbooks, standards, evidence, and operational procedures.
• Support security reviews and remediation activities for third‑party platforms, hosted systems, applications, and infrastructure services.
• Support business continuity and disaster recovery security activities, including technical validation, documentation, and remediation support.
• Recommend practical security improvements that are achievable in an operational healthcare environment.

• Bachelor's degree and 6+ years of experience in cybersecurity, cloud security, infrastructure security, systems engineering, network security, endpoint security, or data protection. Additional relevant experience may be considered in lieu of degree.
• Hands‑on experience implementing, configuring, and supporting security controls in Microsoft Azure, Microsoft 365, Entra , Intune, Defender, Sentinel, Purview, and related Microsoft security platforms.
• Strong practical understanding of identity security, endpoint protection, cloud security, data protection, network security, server hardening, logging, vulnerability management, and incident response.
• Hands‑on experience with Microsoft Purview, DLP, sensitivity labels, data classification, eDiscovery support, audit logging, or related data protection controls.
• Experience supporting web proxy, secure web gateway, URL filtering, CASB, browser controls, SSL inspection, or internet access security controls.
• Experience working with vulnerability management tools, EDR/XDR platforms, SIEM/logging platforms, IAM tools, endpoint management platforms, DLP tools, web proxy platforms, and cloud security posture tools.
• Ability to review technical findings, determine practical remediation steps, implement improvements, validate results, and produce clear evidence.
• Working knowledge of Microsoft 365 security, Entra , Conditional Access, Intune, Defender for Endpoint, Defender for Cloud, Sentinel, Purview, Azure Policy, RBAC, and cloud logging concepts.
• Practical understanding of data loss prevention, PHI/PII protection, cloud app access, file movement controls, web activity monitoring, and data protection practices.
• Experience supporting…