> Markdown version of [/jobs/ext/2713771-senior-platform-security-engineer-in-philadelphia](https://www.wearedevelopers.com/jobs/ext/2713771-senior-platform-security-engineer-in-philadelphia). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Platform & Security Engineer in Philadelphia

- **Company:** Energy Jobline
- **Location:** Philadelphia, PA, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Artificial Intelligence, Microsoft Antivirus, Application Performance Management, Microsoft Azure, Software as a Service, Cloud Storage, Cyber Security, Continuous Integration, Data Integration, DevOps, Identity and Access Management, Information Technology Operations, Key Management, PostgreSQL, Log Analysis, Microsoft Office, SQL Azure, Azure Active Directory, Azure DevOps Pipelines, Microsoft SharePoint, Software Vulnerability Management, Azure Service Bus, Data Logging, Cloud Platform System, Microsoft Fabric, Microsoft Sentinel, Azure Resource Manager
- **Published:** September 4, 2026
- **Apply:** https://www.energyjobline.com/job/senior-platform-security-engineer-philadelphia-31458507

## About the Role

* 7-10 years in cloud platform engineering, DevOps, or infrastructure security
 * Hands-on production Azure experience across the full service lifecycle, not just resource provisioning
 * Practical experience implementing technical controls for HIPAA and SOC 2 Type 2
 * Fluent in Entra ID: conditional access, MFA, role assignments, and governance
 * Applies appropriate safeguards for protected health information, including PHI-safe logging pipelines, data isolation, and least-privilege access controls
 * Comfortable owning IT operations end-to-end: M365, SaaS administration, and employee access management included
 * Brings a point of view. This role requires someone who assesses the environment, identifies gaps, and recommends a path forward
 * Energized by doing the work. This is a hands-on role with full ownership of the platform and security posture
 * Healthcare or regulated industry background is a genuine advantage
 * Comfortable incorporating AI-assisted tools and workflows into day-to-day work to improve speed and quality

## Description

We are looking for a Senior Platform and Security Engineer to own the Azure infrastructure, IT operations, and technical implementation of security controls that underpin this platform. This is a hands-on individual contributor role with a potential path toward team leadership as the company grows. You will work closely with the engineering team on platform changes and directly with leadership on SOC 2 Type 2 and HIPAA audit preparation., Azure Platform Ownership

 * Own infrastructure for all Azure resources across development, UAT, and production environments
 * Manage and evolve Azure DevOps pipelines for build, test, and deployment
 * Operate Azure Container Apps, App Service, Service Bus, Azure Database for PostgreSQL Flexible Server, Blob Storage, and supporting services

 * Maintain Azure Key Vault including secrets rotation and enforcement of least-privilege access
 * Configure and tune Application Insights and Log Analytics, including PHI-safe logging pipelines that prevent sensitive data from appearing in telemetry
 * Administer Microsoft Fabric, including workspace governance, capacity management, access controls, data integration oversight, and alignment with security and compliance requirements

Security Controls and Compliance

 * Implement and maintain technical controls in support of SOC 2 Type 2 and HIPAA compliance programs
 * Administer Entra ID including conditional access policies, MFA enforcement, group lifecycle management, and governance
 * Partner with leadership on audit preparation, evidence collection, and control documentation
 * Contribute to incident response readiness, including tabletop exercises and runbook development
 * Manage logging and alerting functions through Microsoft Purview and Microsoft Sentinel, including alert tuning, analytics rules, and data connector configuration
 * Maintain and improve the organization's security posture through vulnerability management, access reviews, and security monitoring

IT Operations

 * Own Office 365 administration, SharePoint configuration, and SaaS tool management for the organization
 * Serve as the internal technical authority on endpoint security, device management, and employee access provisioning
 * Evaluate and onboard new tooling as the company scales, with a bias toward security and operational simplicity

The Technical Environment

 * Infrastructure: Azure Container Apps, Azure App Service, Azure Service Bus, Azure Database for PostgreSQL Flexible Server, Azure Blob Storage, Microsoft Fabric
 * Security and : Azure Key Vault, Microsoft Entra ID, Microsoft Defender, Azure Policy

 * Observability and Security Operations: Application Insights, Log Analytics Workspaces, Microsoft Sentinel, Microsoft Purview
 * CI/CD: Azure DevOps pipelines
 * Productivity: Microsoft 365, SharePoint, Teams
 * Compliance targets: SOC 2 Type 2, HIPAA


## Related Videos

- [Hacking MSSQL on Cloud. All of them. How I became sysadmin on Azure, AWS, GCP and Alibaba.](https://www.wearedevelopers.com/videos/100339-hacking-mssql-on-cloud-all-of-them-how-i-became-sysadmin-on-azure-aws-gcp-and-alibaba)
- [Platform Engineering vs. DevOps Why not both?](https://www.wearedevelopers.com/videos/885-platform-engineering-vs-devops-why-not-both)
- [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform)
- [Optimizing Discovery: PostgreSQL's Role in Transforming GetYourGuide's Search](https://www.wearedevelopers.com/videos/1647-optimizing-discovery-postgresql-s-role-in-transforming-getyourguide-s-search)
- [Discover the open source trio you didn’t expect: .NET and PostgreSQL on Linux](https://www.wearedevelopers.com/videos/2042-discover-the-open-source-trio-you-didn-t-expect-net-and-postgresql-on-linux)
- [Automated MS SQL Server database deployments with dacpacs and Azure DevOps](https://www.wearedevelopers.com/videos/334-automated-ms-sql-server-database-deployments-with-dacpacs-and-azure-devops)

## Related Articles

- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs)
- [7 Most Popular Web Developer Jobs in Europe](https://www.wearedevelopers.com/magazine/163-7-most-popular-web-developer-jobs-in-europe)
- [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)