Security & Development Operations Engineer

Galvanize • San Francisco, NY

1d • Onsite

About The Position

Galvanize Climate is seeking a hands-on DevOps / Security Operations (SecOps) Engineer to manage, secure, and optimize its cloud-first enterprise environment. The role combines systems administration, identity and access management, endpoint security, compliance operations, cloud infrastructure, and SaaS application integration to support a secure and scalable technology ecosystem.

The engineer will administer Microsoft 365, Microsoft Entra ID, and Google Workspace; manage identity, access, devices, security operations, cloud infrastructure, and enterprise applications; and support compliance and governance requirements. The role also includes integrating applications through modern authentication, APIs, connectors, and automation, as well as supporting AI-enabled platforms and enterprise integrations.

The position requires an in-office presence in New York or San Francisco four days per week, with flexibility for early or late coverage around key needs. Estimated base salary is $130,000–$170,000 per annum, depending on experience, and the role is eligible for an annual discretionary bonus.

Requirements

• At least 5 years of progressive IT experience in a regulated financial services environment, such as an RIA, asset management firm, or venture firm.
• Deep administration experience with Microsoft 365 and Entra ID, including identity, SSO integrations, Conditional Access, and MFA.
• Hands-on Intune expertise for Windows 11, including Autopilot, configuration, app deployment, and updates.
• Solid networking fundamentals, including switching/Wi-Fi, DHCP/DNS, and VPN/SD-WAN concepts, with practical troubleshooting experience.
• Experience with Cisco.
• Demonstrated security mindset, including least privilege, encryption, EDR, patching, and phishing defenses.
• Familiarity with the Microsoft Defender security stack and Purview governance/DLP.
• PowerShell scripting and automation skills for scale and repeatability.
• Hands-on experience with SIEM platforms such as Microsoft Sentinel, Splunk, or comparable technologies.
• Experience with SSPM tools and practices, including configuration monitoring, risk assessment, and application governance.
• Knowledge of DFIR methodologies, investigation workflows, evidence preservation, and post-incident remediation.
• Experience provisioning and administering Azure SQL databases, including access management, security controls, performance tuning, backup strategies, and disaster recovery.
• Experience assessing and securing enterprise AI, SaaS, and third-party application integrations through APIs, connectors, and automation platforms.
• Exceptional communication, discretion, and customer service skills, including service to senior stakeholders.
• In-office presence in New York or San Francisco four days per week, with flexibility for early or late coverage around key needs.

Responsibilities

• Administer and maintain Microsoft 365, Microsoft Entra ID, and Google Workspace.
• Configure and maintain SSO, SCIM and OIDC provisioning, conditional access policies, and MFA.
• Administer Azure Enterprise Applications and support enterprise application registration, authentication, and authorization.
• Manage BYOD controls and mobile device compliance.
• Monitor, investigate, and respond to security alerts.
• Administer and optimize CrowdStrike Falcon and other security monitoring tools.
• Implement and maintain endpoint protection, vulnerability management, and threat detection.
• Review security posture across cloud and SaaS platforms, recommend improvements, and coordinate remediation with internal stakeholders and external vendors.
• Manage Windows, macOS, and mobile devices; administer Microsoft Entra-based device management and JAMF for Apple devices.
• Provision and manage Azure resources and cloud infrastructure, and support Windows Virtual Desktop (Azure Virtual Desktop).
• Maintain networking infrastructure and troubleshoot connectivity.
• Manage domain registrations, DNS records, certificates, and cloud networking.
• Support LAN/Wi-Fi health, including switching, access points, DHCP/DNS, VLANs, and QoS for real-time media; coordinate with providers on circuits and SD-WAN/VPN.
• Manage application security settings, permissions, and data-sharing configurations.
• Design and maintain integrations using APIs, connectors, and modern automation.
• Support integration of AI-enabled platforms, MCPs (Model Context Protocols), and enterprise applications.
• Administer compliance archiving and communications monitoring platforms, including SteeleEye and Global Relay.
• Support regulatory, audit, and governance requirements.
• Maintain data retention and eDiscovery policies across Microsoft 365, Druva, and other platforms.
• Implement and manage DLP policies and information protection.
• Ensure security configurations align with company policies and compliance requirements.

Benefits

• Annual discretionary bonus eligibility.
• Generous benefits package, including employer-paid health coverage options.
• 401(k) plan with employer match.
• 25 days of PTO inclusive of vacation, personal time, and sick leave.
• Monthly wellness benefit covering a broad range of activities.
• Annual stipend for employer-sponsored professional development opportunities.
• 16 weeks of paid parental leave for parents of any gender.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed