Senior Cybersecurity Engineer

Amro Fabricating Corporation•Mukilteo, WA

1d•$130,000 - $165,000

About The Position

This role strengthens identity security, privileged access, vulnerability management, and technical remediation across Karman’s multi-site environment. You will engineer and continuously improve security controls across Microsoft platforms, endpoints, servers, cloud environments, site technologies, and specialized assets. Working closely with Infrastructure, Business Systems, site teams, and service providers, you will ensure clear ownership, reliable evidence, and sustainable remediation that supports regulated aerospace and defense requirements.

Requirements

Bachelor’s degree in cybersecurity, information technology, computer science, engineering, or a related field; equivalent relevant experience may be considered.
7+ years of progressive experience in cybersecurity engineering, identity and access management, vulnerability management, endpoint security, infrastructure security, or related roles.
Hands-on experience with Active Directory, Microsoft Entra ID, Microsoft 365, MFA, conditional access, single sign-on (SSO), privileged access, identity lifecycle processes, and non-human identities.
Experience operating enterprise vulnerability‑management tools, establishing scan coverage, prioritizing risk, coordinating remediation, and validating closure.
Experience with endpoint protection, hardening, patching, device compliance, security monitoring, and the Microsoft security ecosystem.
Working knowledge of Windows endpoint and server security, cloud and network security, segmentation, secure configuration, logging, and incident response.
Experience producing technical control evidence and supporting audits, assessments, or regulated control environments.
Strong troubleshooting, documentation, communication, and cross-functional coordination skills in a fast-paced, multi-site environment.

Nice To Haves

Experience in aerospace, defense, manufacturing, engineering, or another highly regulated environment.
Direct experience with CMMC Level 2, NIST SP 800‑171, DFARS, CUI, SOX ITGC, GCC High, or export‑controlled environments.
Experience with Microsoft 365 GCC High and tools such as Defender, Intune, Entra ID, Purview, Sentinel, Tenable, Qualys, Rapid7, or Defender Vulnerability Management.
Experience with privileged access management, password vaulting, security information and event management (SIEM), endpoint detection and response (EDR), email security, and security orchestration.
Experience with mergers and acquisitions (M&A), site onboarding, identity consolidation, endpoint standardization, and post-acquisition remediation.
Familiarity with firewalls, virtual private networks (VPN), network segmentation, Zero Trust, Center for Internet Security (CIS) benchmarks, specialized assets, and compensating‑control design.
Security+, Cybersecurity Analyst (CySA+), Systems Security Certified Practitioner (SSCP), Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), GIAC Security Essentials Certification (GSEC), GIAC Certified Incident Handler (GCIH), Microsoft Security, Azure Security Engineer, or comparable certification.

Responsibilities

Engineers and improves identity security across Active Directory, Microsoft Entra ID, Microsoft 365 GCC High, cloud platforms, business applications, and related services.
Strengthens identity lifecycle processes, access provisioning, privileged access, multifactor authentication (MFA), conditional access, role-based access control, and non-human identity protections.
Operates and matures enterprise vulnerability management, ensuring authenticated scanning, asset coverage, data quality, prioritization, remediation coordination, and validated closure.
Partners with Infrastructure to enhance endpoint, server, and cloud security through patching, encryption, device management, configuration baselines, detection capabilities, and Microsoft security tools.
Reviews new Microsoft 365, Software‑as‑a‑Service (SaaS), cloud, and AI-enabled capabilities for identity, access, logging, and data-handling requirements.
Administers assigned security tools and investigates identity, endpoint, email-security, vulnerability, and logging alerts; supports containment, evidence preservation, and post-incident hardening.
Implements, validates, and documents technical controls supporting CMMC Level 2, NIST SP 800‑171, DFARS, Controlled Unclassified Information (CUI), and Sarbanes‑Oxley (SOX) Information Technology General Controls (ITGC).
Supports technical remediation of assessment findings, audit gaps, Plans of Action and Milestones (POA&Ms), and control failures and participates in walkthroughs, reviews, and assessments.
Reviews technology projects, integrations, deployments, SaaS services, vendor solutions, and M&A activities for identity, vulnerability, endpoint, and data-exposure risks.
Maintains technical procedures, configurations, remediation guides, metrics, and automation opportunities and mentors IT and security teams to strengthen operating capability.