Cybersecurity Security Engineer II

Expand Energy•Oklahoma City, TX

11d

About The Position

Expand Energy is seeking a Cybersecurity Engineer to join our cybersecurity team with a primary focus on Identity and Access Management (IAM) and Cloud Security. This role is ideal for a security professional with 3-5 years of experience who is passionate about securing modern cloud environments and enterprise identity platforms. The Cybersecurity Engineer will support and enhance our identity ecosystem, secure our Microsoft Azure cloud environment, and help advance our cloud security posture management capabilities. This position combines hands-on operational responsibilities with engineering and design opportunities, allowing the successful candidate to develop into a future security architecture role. The ideal candidate possesses strong technical knowledge of cloud security and identity security principles, is comfortable working across multiple security technologies, and has a desire to grow into a strategic contributor who helps shape the future direction of cybersecurity at Expand Energy.

Requirements

Minimum: High school diploma or GED
Minimum: 2 years work experience in cybersecurity, cloud security, IAM, infrastructure security, or a related field
Experience supporting enterprise cloud environments, preferably Microsoft Azure
Experience with identity and access management concepts and technologies
Strong understanding of SSO, federation, MFA, identity governance, privileged access management, RBAC, and IAM best practices
Experience with one or more IAM platforms such as Okta, SailPoint, CyberArk / Idira, or Microsoft Entra ID
Working knowledge of cloud security principles and best practices
Strong troubleshooting, analytical, and problem-solving skills
Ability to communicate clearly with technical teams, application owners, and business stakeholders

Nice To Haves

Preferred: Bachelor’s degree - from accredited university - Cybersecurity, Information Security, Computer Science, Information Systems, or a related discipline
Preferred: Cybersecurity training
CompTIA Security+
Microsoft Azure Security Engineer (AZ-500)
Microsoft Identity and Access Administrator (SC-300)
CISSP, Associate of ISC2, or progress toward CISSP certification
Other relevant cloud, identity, or cybersecurity certifications
Experience with Microsoft Defender for Cloud
Experience with Cloud Security Posture Management (CSPM) practices
Knowledge of Zero Trust architecture principles
Scripting and automation experience using PowerShell, Python, or similar technologies
Experience leveraging AI tools to improve operational efficiency and automate repetitive tasks
Experience working in regulated, energy, or critical infrastructure environments
Familiarity with cloud security frameworks and security architecture concepts

Responsibilities

Administer and support enterprise IAM technologies, including Okta, SailPoint, CyberArk / Idira, and Microsoft EntraID
Configure and maintain Single Sign-On (SSO) and federation services, with emphasis on Okta policy administration and application integrations
Implement and support MFA and Conditional Access policies
Assist with identity lifecycle management processes, including provisioning, deprovisioning, and access governance
Support privileged access management initiatives and privileged account controls
Partner with application owners to integrate applications with enterprise identity services
Assist in maintaining and improving identity governance and Zero Trust security initiatives
Support security operations and engineering activities within Microsoft Azure
Assist with the implementation and ongoing administration of Microsoft Defender for Cloud
Monitor and improve the organization's Cloud Security Posture Management (CSPM) program
Identify, track, and support remediation of cloud security risks and misconfigurations
Implement and support Azure Role-Based Access Control (RBAC) and least-privilege access models
Participate in cloud security assessments, security reviews, and architecture discussions
Contribute to the development of cloud security standards, patterns, and best practices
Support day-to-day cybersecurity operations while participating in engineering and improvement initiatives
Troubleshoot authentication, authorization, identity, and access-related issues
Participate in incident response activities and operational support efforts as needed
Participate in an on-call rotation supporting critical cybersecurity services
Work with infrastructure and application teams to implement secure solutions
Develop and maintain technical documentation, standards, and operational procedures
Identify opportunities to automate manual processes and improve operational efficiency
Contribute ideas and recommendations for improving security architecture and operational maturity
Assist with evaluating emerging security technologies and capabilities
Leverage scripting, automation, and AI technologies to create repeatable and scalable security processes
Develop expertise that enables progression toward a future security architecture role over time