Senior Cloud & Security Engineer

Position Description:

Responsibilities:

Security Engineering

• Own KPA's enterprise security platforms including CrowdStrike, Rapid7, Cisco Umbrella, Cisco Duo and related technologies.
• Lead vulnerability management & remediation, endpoint security, identity security, privileged access, penetration testing, and security hardening initiatives.
• Investigate and respond to complex security incidents while partnering with the IT Operations team on security and infrastructure escalations.
• Own the technical implementation and ongoing operation of infrastructure-related SOC 2 controls and security audit related requirements.
• Continuously evaluate new technologies and recommend improvements that strengthen KPA's overall security posture.

Cloud, Identity & Systems Engineering

• Own Microsoft 365, Entra ID, Exchange Online, Exchange Hybrid modernization, identity architecture, and endpoint management.
• Own Azure infrastructure and AWS workloads outside the DevOps application stack. Partner with DevOps where needed as there is a natural crossover between them and this position.
• Own Cisco Meraki networking, VPN infrastructure, and cloud connectivity.
• Lead technical initiatives including cloud modernization, email domain consolidation, phone system replacement, identity modernization, and enterprise platform upgrades.

Automation, Projects & Technical Leadership

• Lead complex security and cloud projects from planning through implementation and post-change validation.
• Build automation using PowerShell, Microsoft Graph, REST APIs, and leverage AI-assisted development and automation to improve engineering efficiency and reduce manual effort.
• Produce clear technical documentation, implementation plans, rollback procedures, and operational handoffs.
• Proactively identify technical debt, security gaps, and opportunities to improve efficiency through automation and modernization.

Qualifications:

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or equivalent experience.
• 7+ years of experience in cloud infrastructure, systems engineering, security engineering, or a related senior technical role.
• Strong experience administering Microsoft 365, Entra ID, Azure, Windows Server, Exchange Online, and hybrid identity.
• Experience with enterprise security platforms such as CrowdStrike, Rapid7, Cisco Umbrella, Duo, or equivalent technologies.
• Strong understanding of identity, networking, endpoint management, vulnerability management, and Zero Trust security principles.
• Experience supporting SOC 2 or similar compliance frameworks.
• Relevant certifications such as Microsoft AZ-104, AZ-500, MS-102, SC-300, CompTIA Security+, CISSP, or equivalent certifications are preferred.
• Excellent communication, documentation, project management, and problem-solving skills.

Success Criteria:

• Work ethic that aligns with KPA's core values:
• Trust: earning trust through integrity, expertise, and acting in the client's best interest.
• Innovation: continuously seeking out ways to better serve clients.
• Excellence: holding ourselves to high standards in everything we do.
• Results: moving with purpose to deliver meaningful outcomes.
• Provides technical leadership, sound architectural recommendations, and trusted engineering expertise across cloud, infrastructure, and security initiatives.
• Successfully leads cloud modernization and technical security initiatives that improve KPA's security, scalability, and operational maturity.
• Owns and continually improves enterprise security platforms and technical security controls.
• Delivers complex technical projects with strong planning, communication, documentation, testing, and post-implementation validation.
• Reduces manual effort through automation and modern engineering practices.
• Serves as the senior escalation point for complex cloud, infrastructure, and security issues.
• Partners effectively with IT Operations and DevOps to ensure new technologies transition smoothly into day-to-day operations