Security Engineer

We are seeking a Security Engineer to join the IT Operations team and help strengthen security as the organization expands its Microsoft Azure cloud environment. This is a full-time, net-new position based in Belgrade, Maine, where you will work alongside an existing Security Engineer as part of a two-person security team. A major focus will be helping determine what should move to the cloud, what should remain on-premises, and how to securely architect the environment moving forward.

Responsibilities

• Serve as the primary Azure and cloud security subject matter expert.
• Help develop the organization’s overall cloud security architecture and strategy.
• Assess existing systems and help determine which workloads should move to Azure versus remain on-premises.
• Design and implement security controls for Azure environments.
• Support the organization’s ongoing migration and adoption of Microsoft Azure.
• Help secure a new Microsoft Fabric data environment as workloads and data are moved into Azure.
• Manage and improve identity and access security using Microsoft Entra ID / Azure Active Directory.
• Implement security best practices around Azure networking, permissions, data, applications, and infrastructure.
• Monitor cloud security posture and identify vulnerabilities or configuration risks.
• Partner with the organization’s CrowdStrike provider / SOC to address security alerts, vulnerabilities, and incidents.
• Help maintain PCI compliance and ensure cloud environments continue to meet PCI security requirements.
• Develop cloud security policies, standards, and documentation.
• Work closely with the existing Security Engineer, Systems Administrator, and other members of the IT Operations team.

Cloud Computing, Information Technology & Information Systems, Microsoft Windows Azure, Security Architecture, Organizational Development/Management, Cloud Architecture, Systems Analysis, Microsoft Product Family, Microsoft Active Directory, Identity Data Management, * Required

• 5+ years of experience in IT security, cybersecurity, cloud security, or security engineering.
• Strong hands-on experience with Microsoft Azure security.
• Experience designing or securing cloud infrastructure and cloud migrations.
• Strong understanding of Microsoft Entra ID / Azure Active Directory, IAM, RBAC, MFA, and Conditional Access.
• Experience with Azure security tools such as Microsoft Defender for Cloud, Microsoft Sentinel, Azure Policy, and Azure Key Vault.
• Understanding of Azure networking and network security, including VNets, NSGs, Azure Firewall, VPNs, Private Link, and network segmentation.
• Experience assessing security risks and recommending appropriate cloud security controls.
• Understanding of hybrid cloud environments and securing integrations between on-premises and Azure infrastructure.
• Experience working with SIEM, endpoint security, SOC, or managed security providers.
• Knowledge of PCI DSS compliance and security requirements.
• Strong communication skills and the ability to work collaboratively with infrastructure and operations teams.
• Preferred
• Familiarity with CrowdStrike.