Enterprise Security Engineer

Jenzabar

3d•$83,000 - $95,000

About The Position

The Enterprise Security Engineer is responsible for designing, implementing, and maintaining secure enterprise infrastructure across both on-premises and cloud environments. This role establishes security architecture standards, governs identity and access management systems, and ensures segmentation between internal corporate systems and cloud platforms. The engineer will bring deep expertise in enterprise security technologies, cloud security (Azure, GCP), and modern detection/monitoring platforms such as Microsoft Sentinel and CrowdStrike premises and cloud environments.

Requirements

5+ years in enterprise security engineering, infrastructure security, or a systems engineering role with strong security responsibilities
Experience designing and securing corporate back office and hybrid cloud environments
Expertise with major cloud platforms, particularly Azure and Google Cloud Platform (GCP), and cloud-native security features
Hands-on experience with Microsoft Sentinel, CrowdStrike Falcon, or other SIEM/XDR/EDR technologies.
Demonstrated fluency in Kusto Query Language (KQL) and Falcon Query Language (FQL)
Strong understanding of identity and access management, including Active Directory, Azure AD/Entra ID, IAM policies, SSO, MFA, and PAM solutions
Proficiency with infrastructure-as-code (IaC) tools and automation scripting using PowerShell or Python
Strong knowledge of networking, encryption, certificates, and security protocols
Excellent communication skills with the ability to work effectively across cross-functional teams

Responsibilities

Support the design and maintenance of secure network architectures through the provision of recommendations and best practices for segmentation, firewall policies, and access control standards across corporate back-office infrastructure
Establish and maintain enterprise security baselines, system hardening standards, and configuration management policies aligned to industry frameworks
Lead security architecture reviews for new and existing systems and provide guidance to engineering teams on secure design principles
Design, implement, and maintain cloud security controls in Azure, Google Cloud Platform (GCP), AWS including network security groups, service accounts, workload identity federation, logging, and cloud-native security tooling
Support secure integration and connectivity between on-premises environments and cloud-hosted applications and infrastructure
Apply cloud hardening standards, ensure proper encryption configurations, and enforce secure deployment patterns.
Contribute to cloud security initiatives by applying security best practices for Google Kubernetes Engine (GKE) and supporting the organization’s transition from Windows-based environments to modernized cloud-native deployments
Develop and implement secure configurations for Cloud SQL in alignment with evolving cloud database security standards
Configure, maintain, and develop SIEM and security monitoring technologies including Microsoft Sentinel, CrowdStrike Falcon, and other endpoint, log analytics, or detection platforms
Develop and maintain detection rules, alert logic, and automated workflows to strengthen enterprise security posture
Manage PKI and security certificates, including lifecycle management, renewal processes, and deployment automation
Conduct infrastructure security assessments across servers, networks, applications, and cloud environments to identify vulnerabilities and misconfigurations.
Remediate or coordinate remediation of identified issues in collaboration with infrastructure, engineering, and cloud teams.
Design and implement secure data handling standards, encryption policies, and key management practices.
Leverage AI-enabled tools and analytics to enhance decision-making, improve efficiency, and drive measurable business outcomes when appropriate.
Apply sound judgment and ethical standards when using AI, ensuring accuracy, data privacy, and responsible human-in-the-loop oversight.