This is a permanent opportunity that will require someone to be on site 5 days a week initially. The Senior Information Security Engineer is responsible for designing, implementing, and managing enterprise security controls that support regulatory compliance and strengthen the organization''s overall security posture. This role leads the implementation of security technologies across cloud, infrastructure, identity, and endpoint environments while supporting compliance with SOC 2 Type
II, ISO/IEC 27001, ISO/IEC 42001, CSA STAR
Level 2, Cyber Essentials+, HIPAA, and other industry frameworks. Key Responsibilities Design, implement, and maintain enterprise security controls aligned with industry standards and compliance requirements. Lead Identity and Access Management (IAM), including RBAC, privileged access management (PAM), access governance, and identity lifecycle management. Manage secure authentication solutions, including MFA, SSO, federation, and certificate-based authentication. Administer endpoint and cloud security technologies, including antivirus, EDR/XDR, malware protection, and threat detection. Develop and maintain Data Loss Prevention (DLP) strategies across endpoints, email, networks, and cloud environments. Oversee vulnerability management, including scanning, risk prioritization, remediation tracking, patch management, and penetration test coordination. Establish secure configuration management processes, including security baselines, change control, compliance monitoring, and Infrastructure as Code (IaC) validation. Partner with Infrastructure leadership and the CISO to design and implement security controls for Azure and Google Cloud Platform (Google Cloud Platform). Support physical security technologies and integrate physical and logical access controls. Assist with security assessments, audits, certifications, and remediation activities while working with internal stakeholders and external auditors. Provide technical leadership and mentor security team members on security best practices and continuous improvement initiatives. Technical Expertise Enterprise IAM, RBAC, ABAC, PAM, and identity governance MFA, SSO, SAML, OAuth 2.0, OpenID Connect (OIDC), PKI, and certificate management Endpoint security, EDR/XDR, threat intelligence, malware protection, and incident response Data Loss Prevention (DLP), encryption, tokenization, and data classification Configuration management, security baselines, compliance automation, and IaC security Vulnerability management, patch management, penetration testing, and remediation Physical access control systems (PACS) and integrated security monitoring Compliance & Security Frameworks Experience supporting security programs aligned with: SOC 2 Type
Qualifications Bachelor''s degree in Computer Science, Information Security, or a related field (or equivalent experience). 5-7 years of information security, including hands-on implementation of enterprise security controls plus 3 years of leadership experience. Experience securing cloud environments (Azure and Google Cloud Platform) and enterprise infrastructure. Knowledge of Zero Trust architecture, DevSecOps, AI/ML security, and security automation. Proficiency with scripting and automation tools such as Python, PowerShell, Bash, or Terraform.
