Senior Security & Infrastructure Engineer

Zentalis • San Diego, CA

6d • $130,000 - $160,000

About The Position

We are seeking a Senior Security and Infrastructure Engineer to help secure, support, and improve our cloud, identity, infrastructure, and security operations environments. This role is ideal for a hands-on engineer with broad experience across cybersecurity, Microsoft 365, Azure, AWS, identity, virtualization, monitoring, backup, and enterprise infrastructure. The position partners with internal teams, business stakeholders, vendors, and managed security providers to reduce risk, maintain reliable systems, and support a secure, scalable technology environment.

Requirements

• Bachelor's degree in Information Security, Information Technology, Computer Science, or a related field preferred; equivalent experience may be considered.
• 8+ years of combined experience in cybersecurity, infrastructure engineering, systems administration, cloud administration, identity management, or related technical disciplines; 10+ years preferred.
• Hands-on experience supporting both security operations and enterprise infrastructure in business-critical environments.
• Experience with Microsoft 365, Azure, AWS, Microsoft Entra ID, Conditional Access, MFA, identity security, PKI, VMware, Azure Arc, vulnerability management, enterprise patching, and monitoring platforms.
• Experience working with MDR, managed SOC, or SOCaaS providers to coordinate investigations, remediation, recommendations, and security response activities.
• Working knowledge of backup, disaster recovery, immutable backup concepts, infrastructure resiliency, and recovery readiness practices.
• Ability to troubleshoot complex technical issues, prioritize work across competing needs, document procedures, and communicate clearly with technical and non-technical stakeholders.

Nice To Haves

• Microsoft Defender Suite, Microsoft Entra ID, Azure administration/security, Azure Arc, Microsoft Intune, and Microsoft 365 security technologies.
• AWS administration/security, Azure Virtual Desktop, Amazon WorkSpaces, VMware vSphere, and hybrid infrastructure management.
• Cloud PKI, certificate automation, endpoint protection, vulnerability management, SIEM, MDR, SOCaaS, and enterprise monitoring platforms such as LogicMonitor.
• Enterprise backup platforms such as Veeam, Rubrik, Cohesity, Druva, Commvault, or similar solutions, including immutable backup and ransomware recovery technologies.
• Firewall, VPN, routing, switching, wireless, network security, and regulated environments such as pharmaceutical, biotechnology, SOX, NIST, ISO 27001, or CIS.
• Relevant security, cloud, infrastructure, or vendor certifications preferred, such as: CISSP, Security+, GSEC, SC-200, SC-300, AZ-500, AWS Security Specialty, AWS Solutions Architect, Microsoft Security, or VMware certifications.

Responsibilities

• Monitor, investigate, triage, and coordinate remediation for security alerts, identity events, vulnerabilities, and verified incidents across cloud, endpoint, server, and network environments.
• Partner with MDR, managed SOC, and SOCaaS providers to review escalations, validate recommendations, improve detection logic, and ensure response workflows are effective.
• Administer and improve Microsoft Entra ID, Conditional Access, MFA, identity governance, privileged access monitoring, access reviews, PKI, and certificate lifecycle management.
• Support vulnerability management, patch compliance, security control administration, and risk prioritization from identification through remediation validation.
• Coordinate remediation efforts to ensure corrective actions are communicated, completed, documented, and aligned to risk priorities.
• Participate in incident response activities as needed, including containment support, recovery coordination, evidence handling, stakeholder communication, and post-incident corrective actions.
• Drive continuous improvement of security monitoring, alert response, operational procedures, and risk reduction efforts based on threat trends, lessons learned, and security assessments.
• Assist with security assessments, audits, compliance reviews, and evidence collection.
• Serve as a primary administrator for core security technologies, including: Microsoft Defender Suite, Microsoft Entra ID, Conditional Access, Endpoint Protection, Email Security, Vulnerability Management, Security Monitoring and Logging Solutions, SIEM, MDR, and SOCaaS Services.
• Administer and support Microsoft 365, Azure, AWS, VMware, Azure Arc, hybrid infrastructure, and enterprise infrastructure platforms.
• Troubleshoot complex infrastructure and platform issues while maintaining reliability, availability, performance, and secure configuration across enterprise systems.
• Support infrastructure modernization, architecture, hardening, technology evaluations, implementation projects, and operational readiness activities.
• Monitor and respond to infrastructure, application, and security alerts through LogicMonitor and other monitoring platforms; identify recurring issues and improve alerting or runbooks where needed.
• Administer cloud backup, disaster recovery, data protection, recovery readiness, and immutable backup technologies.
• Serve as a backup technical resource for firewall, VPN, switching, routing, wireless, network security, and connectivity operations.
• Support commercial business needs by partnering with stakeholders, vendors, and technical teams on secure, reliable infrastructure solutions.
• Participate in after-hours support and escalation activities as required.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior