Senior Cloud & Security Engineer

KPA is a company specializing in technology solutions, and they are seeking a Senior Cloud & Security Engineer to lead their cloud infrastructure and security initiatives. The role involves managing security platforms, overseeing cloud and identity management, and driving automation projects to enhance operational efficiency.

Responsibilities:

• Own KPA's enterprise security platforms including CrowdStrike, Rapid7, Cisco Umbrella, Cisco Duo and related technologies
• Lead vulnerability management & remediation, endpoint security, identity security, privileged access, penetration testing, and security hardening initiatives
• Investigate and respond to complex security incidents while partnering with the IT Operations team on security and infrastructure escalations
• Own the technical implementation and ongoing operation of infrastructure-related SOC 2 controls and security audit related requirements
• Continuously evaluate new technologies and recommend improvements that strengthen KPA's overall security posture
• Own Microsoft 365, Entra ID, Exchange Online, Exchange Hybrid modernization, identity architecture, and endpoint management
• Own Azure infrastructure and AWS workloads outside the DevOps application stack. Partner with DevOps where needed as there is a natural crossover between them and this position
• Own Cisco Meraki networking, VPN infrastructure, and cloud connectivity
• Lead technical initiatives including cloud modernization, email domain consolidation, phone system replacement, identity modernization, and enterprise platform upgrades
• Lead complex security and cloud projects from planning through implementation and post-change validation
• Build automation using PowerShell, Microsoft Graph, REST APIs, and leverage AI-assisted development and automation to improve engineering efficiency and reduce manual effort
• Produce clear technical documentation, implementation plans, rollback procedures, and operational handoffs
• Proactively identify technical debt, security gaps, and opportunities to improve efficiency through automation and modernization

Requirements:

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or equivalent experience
• 7+ years of experience in cloud infrastructure, systems engineering, security engineering, or a related senior technical role
• Strong experience administering Microsoft 365, Entra ID, Azure, Windows Server, Exchange Online, and hybrid identity
• Experience with enterprise security platforms such as CrowdStrike, Rapid7, Cisco Umbrella, Duo, or equivalent technologies
• Strong understanding of identity, networking, endpoint management, vulnerability management, and Zero Trust security principles
• Experience supporting SOC 2 or similar compliance frameworks
• Excellent communication, documentation, project management, and problem-solving skills
• Relevant certifications such as Microsoft AZ-104, AZ-500, MS-102, SC-300, CompTIA Security+, CISSP, or equivalent certifications are preferred