Senior Cloud & Security Engineer

Responsibilities:

Security Engineering

• Own KPA's enterprise security platforms including CrowdStrike Rapid7 Cisco Umbrella Cisco Duo and related technologies.
• Lead vulnerability management & remediation endpoint security identity security privileged access penetration testing and security hardening initiatives.
• Investigate and respond to complex security incidents while partnering with the IT Operations team on security and infrastructure escalations.
• Own the technical implementation and ongoing operation of infrastructure-related SOC 2 controls and security audit related requirements.
• Continuously evaluate new technologies and recommend improvements that strengthen KPA's overall security posture.

Cloud Identity & Systems Engineering

• Own Microsoft 365 Entra ID Exchange Online Exchange Hybrid modernization identity architecture and endpoint management.
• Own Azure infrastructure and AWS workloads outside the DevOps application stack. Partner with DevOps where needed as there is a natural crossover between them and this position.
• Own Cisco Meraki networking VPN infrastructure and cloud connectivity.
• Lead technical initiatives including cloud modernization email domain consolidation phone system replacement identity modernization and enterprise platform upgrades.

Automation Projects & Technical Leadership

• Lead complex security and cloud projects from planning through implementation and post-change validation.
• Build automation using PowerShell Microsoft Graph REST APIs and leverage AI-assisted development and automation to improve engineering efficiency and reduce manual effort.
• Produce clear technical documentation implementation plans rollback procedures and operational handoffs.
• Proactively identify technical debt security gaps and opportunities to improve efficiency through automation and modernization.

Qualifications:

• Bachelor's degree in Computer Science Information Technology Cybersecurity or equivalent experience.
• 7+ years of experience in cloud infrastructure systems engineering security engineering or a related senior technical role.
• Strong experience administering Microsoft 365 Entra ID Azure Windows Server Exchange Online and hybrid identity.
• Experience with enterprise security platforms such as CrowdStrike Rapid7 Cisco Umbrella Duo or equivalent technologies.
• Strong understanding of identity networking endpoint management vulnerability management and Zero Trust security principles.
• Experience supporting SOC 2 or similar compliance frameworks.
• Relevant certifications such as Microsoft AZ-104 AZ-500 MS-102 SC-300 CompTIA Security+ CISSP or equivalent certifications are preferred.
• Excellent communication documentation project management and problem-solving skills.

Success Criteria:

• Work ethic that aligns with KPA's core values:
• Trust: earning trust through integrity expertise and acting in the client's best interest.
• Innovation: continuously seeking out ways to better serve clients.
• Excellence: holding ourselves to high standards in everything we do.
• Results: moving with purpose to deliver meaningful outcomes.
• Provides technical leadership sound architectural recommendations and trusted engineering expertise across cloud infrastructure and security initiatives.
• Successfully leads cloud modernization and technical security initiatives that improve KPA's security scalability and operational maturity.
• Owns and continually improves enterprise security platforms and technical security controls.
• Delivers complex technical projects with strong planning communication documentation testing and post-implementation validation.
• Reduces manual effort through automation and modern engineering practices.
• Serves as the senior escalation point for complex cloud infrastructure and security issues.
• Partners effectively with IT Operations and DevOps to ensure new technologies transition smoothly into day-to-day operations.

Physical Requirements:

Physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
Working at a computer typing and view a screen - Constantly
Stationary sitting or standing - Constantly
Visual Recognition - Constantly
Hearing/Listening - Occasionally
Communicating verbally and/or in writing - Occasionally
Travel - Seldom

Compensation:

• Annual base salary range between $110-125k commensurate with experience.
• Bonus potential of 10% annually

What We Do

KPA solutions help clients identify remedy and prevent workplace safety and compliance problems across their entire enterprise. The combination of KPA’s easy-to-use software platforms consulting services and award-winning training content helps organizations minimize risk so they can focus on what’s important—their core business. For nearly 40 years KPA has helped 10000+ clients achieve regulatory compliance protect their business and keep people safe.

Why Work With Us

Since 1986 we have been refining the core values with which we work together as a team and with our clients. Do you align with our core values of Integrity Helpfulness Excellence Agility Respectfulness and Teamwork? It is these core values that promote our success through both organic growth and integrating acquisitions.

Gallery