Cybersecurity Engineer

Trane Technologies•Davidson, NC

16h•Hybrid

About The Position

The Security Engineer is a hands-on member of the Security Engineering team, responsible for managing, maintaining, configuring, and supporting security technologies that protect enterprise identities, endpoints, applications, and data. The role primarily engineers and provides operational support for capabilities within the Microsoft Security Suite, with particular emphasis on Conditional Access, secure access controls, cloud security technologies, and continuous improvement of Microsoft security capabilities. The engineer partners with Infrastructure, Security Operations, Digital Risk, IAM, and application teams to implement security controls, support strategic initiatives, improve operational maturity, and strengthen the organization's cybersecurity posture. The role includes platform operations and lifecycle management, troubleshooting, security incident support, automation, documentation, governance, metrics, and reporting.

Requirements

Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field, or equivalent experience.
At least 5 years of experience in cybersecurity, systems administration, or security engineering.
Experience implementing and supporting enterprise security technologies.
Hands-on experience with Microsoft Entra and Microsoft Defender capabilities.
Experience implementing and supporting Conditional Access policies.
Strong understanding of cybersecurity principles and best practices.
Strong understanding of identity and access security concepts.
Strong understanding of authentication and authorization technologies.
Strong understanding of endpoint security fundamentals.
Strong understanding of cloud security fundamentals.
Strong understanding of enterprise networking fundamentals.
Experience troubleshooting complex security and access-related issues.

Responsibilities

Manage, maintain, configure, and support security capabilities within the Microsoft Security Suite, including Microsoft Entra and Microsoft Defender technologies.
Support platform lifecycle activities, including upgrades, integrations, configuration changes, testing, and operational support.
Evaluate new Microsoft security capabilities and assist with their implementation and adoption.
Design, implement, test, deploy, and support Conditional Access policies.
Maintain access control policies aligned with cybersecurity requirements while minimizing unnecessary operational and user impact.
Support device compliance, strong authentication, risk-based access decisions, secure application access, and onboarding applications and services into access-control frameworks.
Investigate and troubleshoot authentication, authorization, access-related, and other complex security issues.
Support day-to-day operations of assigned security technologies and recommend improvements to security maturity and operational efficiency.
Participate in security incident investigations and support remediation efforts.
Perform root cause analysis and corrective action planning for security-related issues.
Assist with vulnerability remediation, platform hardening, and security improvement initiatives.
Identify opportunities to automate repetitive operational activities and develop scripts and automation solutions to improve efficiency, consistency, and scalability.
Improve monitoring, reporting, and visibility across managed security technologies and support ongoing optimization efforts.
Maintain technical documentation, implementation standards, support procedures, and operational guides.
Support audit and compliance activities and ensure managed security capabilities align with company standards and cybersecurity requirements.
Provide technical guidance and knowledge-sharing across Security Engineering and partner teams.
Develop and maintain operational metrics; support Monthly Operating Reviews, Project Status Reviews, and leadership reporting; and track platform health, adoption, effectiveness, and improvement opportunities.
Partner with Security Operations, Infrastructure, IAM, Digital Risk, and Application teams to implement and operate security controls.
Provide backup and support for additional Security Engineering capabilities as required by business priorities and contribute to a collaborative, continuously improving team environment.