Sr. Cybersecurity Engineer

Mativ•Alpharetta, GA

1d•Hybrid

About The Position

The Senior Cybersecurity Engineer is responsible for designing, implementing, and operating cybersecurity solutions that reduce enterprise risk while enabling business transformation. This role serves as the technical lead for Identity & Access Management (IAM), Microsoft Azure/Entra security, Data Loss Prevention (DLP), and cloud security initiatives. The engineer partners with Infrastructure, Enterprise Architecture, IT Operations, and Business stakeholders to deliver secure, scalable, and compliant solutions aligned with Zero Trust principles. This is a hands-on engineering role that includes architecture, implementation, operational support, and strategic planning responsibilities.

Requirements

5-8+ years of cybersecurity engineering experience.
Strong experience with: Microsoft Entra ID (Azure AD), Active Directory, Single Sign-On (SSO), Multi-Factor Authentication (MFA), Conditional Access, Microsoft Azure, Microsoft Purview / DLP.
Experience implementing Zero Trust security controls.
Experience with identity governance and access management.
Strong understanding of security frameworks such as: NIST CSF, CIS Controls, Zero Trust Architecture.
Experience managing cybersecurity technologies and SaaS integrations.
Strong communication and stakeholder management skills.

Nice To Haves

CISSP
AZ-500
SC-100
SC-300
Microsoft Security Certifications
Experience with: Varonis, BeyondTrust, Rapid7, Intune, Defender Suite, ServiceNow, PowerShell automation, Identity governance programs.

Responsibilities

Lead enterprise IAM initiatives across Microsoft Entra ID, Active Directory, SSO, MFA, Conditional Access, and Privileged Identity Management (PIM).
Design and maintain role-based access control (RBAC) models.
Develop contractor, vendor, and third-party identity governance processes.
Support joiner, mover, and leaver automation initiatives.
Drive identity modernization and cloud-first identity strategies.
Implement and maintain Azure security controls and governance standards.
Partner with infrastructure teams on secure cloud architecture.
Review Azure configurations for compliance with Zero Trust principles.
Support cloud security posture management and risk reduction efforts.
Assist with cloud migration security reviews and architecture assessments.
Design and administer Microsoft Purview and DLP policies.
Support data classification, labeling, and protection programs.
Investigate and remediate DLP incidents.
Partner with Legal, Compliance, HR, and business leaders on sensitive data protection requirements.
Develop data protection metrics and reporting.
Design and implement security controls across endpoint, identity, cloud, and SaaS platforms.
Support implementation and administration of: Microsoft Defender, Microsoft Intune, Varonis, BeyondTrust, Rapid7, Automox.
Develop automation to improve control effectiveness and operational efficiency.
Participate in architecture reviews and project security assessments.
Support regulatory and audit initiatives.
Document security standards, procedures, and technical controls.
Partner with GRC teams to address audit findings and risk treatment plans.
Assist with cyber insurance and security assessment activities.
Participate in security investigations and incident response activities.
Recommend and implement corrective actions following incidents.
Support threat mitigation efforts through engineering improvements.
Collaborate with Security Operations on detection and response enhancements.
Provide technical guidance to junior engineers and analysts.
Lead cybersecurity projects and workstreams.
Act as a subject matter expert for IAM, Azure security, and DLP.
Contribute to cybersecurity roadmap development and execution.