IT Security Engineer

Pattern Energy Group•Houston, TX

About The Position

The Senior IT Security Engineer develops and executes cybersecurity strategy and architecture, and designs, implements, and continuously improves security controls across Pattern and its subsidiaries’ enterprise IT and cloud environments. The role serves as a senior technical authority, translating cybersecurity strategy, risk, and business requirements into scalable security architectures, technical standards, and engineering solutions. It works closely with IT Operations, Security Operations, Business Applications, Enterprise Architecture, and external technology and security providers to reduce cyber risk and strengthen the organization’s security posture.

Requirements

At least 7 years of experience in Information Security Engineering, Cybersecurity Engineering, Infrastructure Security, or another applicable field.
Demonstrated experience developing and executing security strategy, technical roadmaps, and target-state security architectures, including identifying capability gaps and translating organizational risk into prioritized security initiatives.
Strong experience with security architecture and design, including architecture reviews, threat-informed design, defense-in-depth, Zero Trust principles, reference architectures, security patterns, and technical security standards.
Strong understanding of the Microsoft suite, including Microsoft Defender, Intune, Azure/Entra, and Microsoft 365.
Experience applying recognized cybersecurity frameworks and practices, particularly NIST Cybersecurity Framework (CSF), NIST SP 800-53, CIS Controls, CIS Benchmarks, and Zero Trust architecture principles.
Experience working with MSSPs, MSNPs, or other external SOC/MDR providers.
Strong documentation, communication, and cross-functional collaboration skills.

Nice To Haves

Certifications such as CISSP, CCSP, CRISC, CCNA, or CCNP.

Responsibilities

Develop and execute the security strategy and roadmap; identify capability gaps, emerging risks, and opportunities to improve security maturity, and translate business and cybersecurity objectives into prioritized technical initiatives.
Define and maintain security architecture principles, patterns, and reference architectures across cloud and enterprise IT; lead security architecture reviews for new technologies, applications, infrastructure, and significant changes, providing risk-based design requirements and recommendations.
Design, implement, and continuously improve security controls across Azure, Microsoft 365, Microsoft Defender, Entra ID, Intune, endpoints, servers, networks, and other enterprise technologies.
Develop and maintain security standards, secure configuration baselines, architecture requirements, hardening guidance, and engineering documentation, ensuring technical controls align with the organization’s security strategy and frameworks such as NIST Cybersecurity Framework 2.0.
Lead vulnerability and security exposure management across enterprise IT systems, including identification, technical risk assessment, prioritization, mitigation strategy, remediation coordination, and risk tracking; assess emerging vulnerabilities and threats for potential organizational impact.
Evaluate security technologies and recommend their architecture, adoption, configuration, integration, consolidation, or retirement, balancing risk reduction with operational requirements, integration complexity, and cost.
Partner with Security Operations to improve detection, logging, SIEM, EDR/XDR, and security monitoring integrations.
Provide senior technical expertise during significant cybersecurity incidents, including containment, remediation, recovery, and implementation of longer-term corrective controls.
Serve as a senior cybersecurity technical authority and trusted advisor to Security, IT Operations, Enterprise Architecture, Business Applications, and technology leadership.
Provide technical direction on complex security issues, mentor other engineers, influence secure technology decisions, and work with MSSP/MDR, network, cloud, and other external partners to ensure security requirements are implemented.