> Markdown version of [/jobs/ext/3736246-devops-security-operations-secops-engineer](https://www.wearedevelopers.com/jobs/ext/3736246-devops-security-operations-secops-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# DevOps / Security Operations (SecOps) Engineer

- **Company:** GALVANIZE CLIMATE SOLUTIONS LLC
- **Location:** San Francisco, CA, United States
- **Experience:** Expert
- **Salary:** $130,000.0 - $170,000.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Application Programming Interfaces (APIs), Artificial Intelligence, Apple Mac Systems, Application Integration Architecture, Microsoft Azure, Backup Devices, Software as a Service, Cloud Computing, Cloud Computing Security, Cyber Security, Databases, Information Leak Prevention, Data Sharing, Dynamic Host Configuration Protocol, Digital Forensics, Domain Name System (DNS), Identity and Access Management, Information Security Management, Intrusion Detection and Prevention, Virtual Private Networks (VPN), Automation of Marketing, SQL Azure, Virtual Desktops, Networking Basics, OpenID, Performance Tuning, Windows PowerShell, Azure Active Directory, Anti-Phishing, Security Information and Event Management, Systems Integration, Virtual Local Area Networks, Software Vulnerability Management, Wide Area Networks, Scripting, Computer Networking Systems, Enterprise Software Applications, Software Security, Microsoft InTune, Infrastructure Automation Frameworks, Information Technology, Deployment Automation, Microsoft Sentinel, Casper Suite, Gsuite, Splunk, Azure Resource Manager, Cisco
- **Published:** October 14, 2026
- **Apply:** https://startup.jobs/security-development-operations-engineer-galvanize-climate-solutions-10439685

## About the Role

* 5+ years of progressive IT experience in a regulated financial services environment (RIA/asset management/venture).
 * Deep administration of Microsoft 365 & Entra ID (identity, SSO integrations, Conditional Access, MFA).
 * Hands-on Intune expertise for Windows 11: Autopilot, configuration, app deployment, updates,
 * Solid networking fundamentals (switching/Wi-Fi, DHCP/DNS, VPN/SD-WAN concepts) and practical troubleshooting.
 * Experience with Cisco
 * Demonstrated security mindset (least privilege, encryption, EDR, patching, phishing defenses).
 * Familiarity with Microsoft Defender security stack and Purview governance/DLP.
 * Scripting/automation (PowerShell) for scale and repeatability
 * Hands-on experience with Security Information and Event Management (SIEM) platforms such as Microsoft Sentinel, Splunk, or comparable technologies.
 * Experience with SaaS Security Posture Management (SSPM) tools and practices, including configuration monitoring, risk assessment, and application governance.
 * Knowledge of Digital Forensics and Incident Response (DFIR) methodologies, investigation workflows, evidence preservation, and post-incident remediation.
 * Experience provisioning and administering Azure SQL databases, including access management, security controls, performance tuning, backup strategies, and disaster
 * Experience assessing and securing enterprise AI, SaaS, and third-party application integrations through APIs, connectors, and automation platforms. Exceptional communication, discretion, and customer service with senior
 * In-office presence in NY or SF, 4 days/week; flexibility for early/late coverage around key

## Description

Galvanize Climate is seeking a highly skilled and hands-on DevOps / Security Operations (SecOps) Engineer to manage, secure, and optimize our cloud-first enterprise environment. This role combines systems administration, identity and access management, endpoint security, compliance operations, cloud infrastructure, and SaaS application integration to support a secure and scalable technology ecosystem., The ideal candidate will have strong experience administering Microsoft 365 Workspace environments, implementing security controls, managing endpoint devices, supporting compliance requirements, and integrating enterprise applications through modern authentication and automation technologies., * Administer and maintain Microsoft 365, Microsoft Entra ID, and Google Workspace

 * Configure and maintain Single Sign-On (SSO), SCIM and OIDC provisioning, conditional access policies, and MFA.
 * Administer Azure Enterprise Applications
 * Manage Bring Your Own Device (BYOD) controls and mobile device compliance
 * Support enterprise application registration, authentication, and authorization

Security Operations

 * Monitor, investigate, and respond to security alerts and
 * Administer and optimize CrowdStrike Falcon and other security monitoring
 * Implement and maintain endpoint protection, vulnerability management, and threat detection
 * Review security posture across cloud and SaaS platforms and recommend
 * Partner with internal stakeholders and external vendors to remediate security

Endpoint & Device Management

 * Manage Windows, macOS, and mobile device
 * Administer Microsoft Entra-based device management and JAMF for Apple

Cloud & Infrastructure Administration

 * Provision and manage Azure resources and cloud
 * Support Windows Virtual Desktop (Azure Virtual Desktop)
 * Maintain networking infrastructure and troubleshoot connectivity
 * Manage domain registrations, DNS records, certificates, and cloud networking
 * Support LAN/Wi-Fi health (switching, APs, DHCP/DNS, VLANs, QoS for real-time media) and coordinate with providers on circuits and SD-WAN/VPN., * Design and maintain integrations using APIs, connectors, and modern automation
 * Support integration of AI-enabled platforms, MCPs (Model Context Protocols), and enterprise
 * Experience with Infrastructure-as-Code (IaC), automation, and cloud

Compliance & Governance

 * Administer compliance archiving and communications monitoring platforms including SteeleEye and Global Relay.
 * Support regulatory, audit, and governance
 * Maintain data retention and eDiscovery policies across Microsoft 365, Druva, and other
 * Implement and manage Data Loss Prevention (DLP) policies and information protection
 * Ensure security configurations align with company policies and compliance