Security Engineer

We are seeking a Security Engineer to join the IT Operations team and help strengthen security as the organization expands its Microsoft Azure cloud environment. This is a full-time, net-new position based in Belgrade, Maine, where you will work alongside an existing Security Engineer as part of a two-person security team. A major focus will be helping determine what should move to the cloud, what should remain on-premises, and how to securely architect the environment moving forward.

Responsibilities

• Serve as the primary Azure and cloud security subject matter expert.
• Help develop the organization's overall cloud security architecture and strategy.
• Assess existing systems and help determine which workloads should move to Azure versus remain on-premises.
• Design and implement security controls for Azure environments.
• Support the organization's ongoing migration and adoption of Microsoft Azure.
• Help secure a new Microsoft Fabric data environment as workloads and data are moved into Azure.
• Manage and improve identity and access security using Microsoft Entra ID / Azure Active Directory.
• Implement security best practices around Azure networking, permissions, data, applications, and infrastructure.
• Monitor cloud security posture and identify vulnerabilities or configuration risks.
• Partner with the organization's CrowdStrike provider / SOC to address security alerts, vulnerabilities, and incidents.
• Help maintain PCI compliance and ensure cloud environments continue to meet PCI security requirements.
• Develop cloud security policies, standards, and documentation.
• Work closely with the existing Security Engineer, Systems Administrator, and other members of the IT Operations team.

Qualifications

• Required

• 5+ years of experience in IT security, cybersecurity, cloud security, or security engineering.

• Strong hands-on experience with Microsoft Azure security.

• Experience designing or securing cloud infrastructure and cloud migrations.

• Strong understanding of Microsoft Entra ID / Azure Active Directory, IAM, RBAC, MFA, and Conditional Access.

• Experience with Azure security tools such as Microsoft Defender for Cloud, Microsoft Sentinel, Azure Policy, and Azure Key Vault.

• Understanding of Azure networking and network security, including VNets, NSGs, Azure Firewall, VPNs, Private Link, and network segmentation.

• Experience assessing security risks and recommending appropriate cloud security controls.

• Understanding of hybrid cloud environments and securing integrations between on-premises and Azure infrastructure.

• Experience working with SIEM, endpoint security, SOC, or managed security providers.

• Knowledge of PCI DSS compliance and security requirements.

• Strong communication skills and the ability to work collaboratively with infrastructure and operations teams.

• Preferred

• Familiarity with CrowdStrike.