Security Engineer

Role: Security Engineer

Location: Belgrade, ME (3 days onsite and 2 days Remote)

Duration: Direct Hire/Full Time

Interview: MS Teams

Job Description

We are looking for a Security Architect / Engineer to join our IT Operations team and help strengthen security as the organization expands its Microsoft Azure cloud environment.

This is a net-new position that will work alongside an existing Security Engineer as part of a two-person security team. The current engineer has deep knowledge of the company's existing environment, while this new hire will bring the cloud and Azure security expertise needed as the organization modernizes its infrastructure.

A major focus of this role will be helping determine what should move to the cloud, what should remain on-premises, and how to securely architect the environment moving forward.

Key Responsibilities

• Serve as the primary Azure and cloud security subject matter expert.
• Help develop the organization's overall cloud security architecture and strategy.
• Assess existing systems and help determine which workloads should move to Azure versus remain on-premises.
• Design and implement security controls for Azure environments.
• Support the organization's ongoing migration and adoption of Microsoft Azure.
• Help secure a new Microsoft Fabric data environment as workloads and data are moved into Azure.
• Manage and improve identity and access security using Microsoft Entra ID / Azure Active Directory.
• Implement security best practices around Azure networking, permissions, data, applications, and infrastructure.
• Monitor cloud security posture and identify vulnerabilities or configuration risks.
• Partner with the organization's CrowdStrike provider / SOC to address security alerts, vulnerabilities, and incidents.
• Help maintain PCI compliance and ensure cloud environments continue to meet PCI security requirements.
• Develop cloud security policies, standards, and documentation.
• Work closely with the existing Security Engineer, Systems Administrator, and other members of the IT Operations team.

Requirements

• 5+ years of experience in IT security, cybersecurity, cloud security, or security engineering.
• Strong hands-on experience with Microsoft Azure security.
• Experience designing or securing cloud infrastructure and cloud migrations.
• Strong understanding of Microsoft Entra ID / Azure Active Directory, IAM, RBAC, MFA, and Conditional Access.
• Experience with Azure security tools such as Microsoft Defender for Cloud, Microsoft Sentinel, Azure Policy, and Azure Key Vault.
• Understanding of Azure networking and network security, including VNets, NSGs, Azure Firewall, VPNs, Private Link, and network segmentation.
• Experience assessing security risks and recommending appropriate cloud security controls.
• Understanding of hybrid cloud environments and securing integrations between on-premises and Azure infrastructure.
• Experience working with SIEM, endpoint security, SOC, or managed security providers.
• Familiarity with CrowdStrike is preferred.
• Knowledge of PCI DSS compliance and security requirements.
• Strong communication skills and the ability to work collaboratively with infrastructure and operations teams

Top 5 Required Skills (Must-Have / Non-Negotiable)

• They want someone who has managed an Azure cloud environment before, who can come in and offer thoughtful solutions and structure to their cloud environment.
• Networking, routing and switching
• VMWare
• Experience with O365, Windows Server, VMWare ESX, Azure, Intune, and SQL Server.
• Strong understanding of Firewall, WAN, LAN, and WLAN technologies.