Senior Cloud & Security Engineer

This is a fully remote position, open to applicants in Colorado.

📋 Description

• Take ownership of KPA's enterprise security platforms, including CrowdStrike, Rapid7, Cisco Umbrella, Cisco Duo, and associated technologies.

• Spearhead initiatives related to vulnerability management and remediation, endpoint security, identity security, privileged access, penetration testing, and security hardening.

• Investigate and respond to intricate security incidents while collaborating with the IT Operations team on security and infrastructure escalations.

• Oversee the technical implementation and continuous operation of infrastructure-related SOC 2 controls and security audit requirements.

• Continuously assess new technologies and suggest enhancements that fortify KPA's overall security posture.

• Manage Microsoft 365, Entra ID, Exchange Online, Exchange Hybrid modernization, identity architecture, and endpoint management.

• Handle Azure infrastructure and AWS workloads outside of the DevOps application stack, collaborating with DevOps as necessary due to overlapping responsibilities.

• Oversee Cisco Meraki networking, VPN infrastructure, and cloud connectivity.

• Lead technical endeavors such as cloud modernization, email domain consolidation, phone system replacement, identity modernization, and enterprise platform upgrades.

• Direct complex security and cloud projects from the planning phase through implementation and post-change validation.

• Develop automation using PowerShell, Microsoft Graph, REST APIs, and utilize AI-assisted development and automation to enhance engineering efficiency and minimize manual work.

• Create clear technical documentation, implementation plans, rollback procedures, and operational handoffs.

• Proactively identify technical debt, security vulnerabilities, and opportunities for efficiency improvements through automation and modernization.

⛳️ Requirements

• A Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or equivalent experience.

• Over 7 years of experience in cloud infrastructure, systems engineering, security engineering, or a comparable senior technical role.

• Extensive experience in administering Microsoft 365, Entra ID, Azure, Windows Server, Exchange Online, and hybrid identity.

• Familiarity with enterprise security platforms such as CrowdStrike, Rapid7, Cisco Umbrella, Duo, or similar technologies.

• Strong comprehension of identity, networking, endpoint management, vulnerability management, and Zero Trust security principles.

• Experience in supporting SOC 2 or similar compliance frameworks.

• Preferred relevant certifications such as Microsoft AZ-104, AZ-500, MS-102, SC-300, CompTIA Security+, CISSP, or equivalent certifications.

• Exceptional communication, documentation, project management, and problem-solving abilities.

🏝️ Benefits

• Annual bonus potential of 10%.