Enterprise Security Engineer

The Enterprise Security Engineer is responsible for designing, implementing, and maintaining secure enterprise infrastructure across both on-premises and cloud environments. This role establishes security architecture standards, governs identity and access management systems, and ensures segmentation between internal corporate systems and cloud platforms. The engineer will bring deep expertise in enterprise security technologies, cloud security (Azure, GCP), and modern detection/monitoring platforms such as Microsoft Sentinel and CrowdStrike premises and cloud environments.

• Support the design and maintenance of secure network architectures through the provision of recommendations and best practices for segmentation, firewall policies, and access control standards across corporate back-office infrastructure
• Establish and maintain enterprise security baselines, system hardening standards, and configuration management policies aligned to industry frameworks
• Lead security architecture reviews for new and existing systems and provide guidance to engineering teams on secure design principles

• Design, implement, and maintain cloud security controls in Azure, Google Cloud Platform (GCP), AWS including network security groups, service accounts, workload identity federation, logging, and cloud-native security tooling
• Support secure integration and connectivity between on-premises environments and cloud-hosted applications and infrastructure
• Apply cloud hardening standards, ensure proper encryption configurations, and enforce secure deployment patterns.
• Contribute to cloud security initiatives by applying security best practices for Google Kubernetes Engine (GKE) and supporting the organization’s transition from Windows-based environments to modernized cloud-native deployments
• Develop and implement secure configurations for Cloud SQL in alignment with evolving cloud database security standards

• Configure, maintain, and develop SIEM and security monitoring technologies including Microsoft Sentinel, CrowdStrike Falcon, and other endpoint, log analytics, or detection platforms
• Develop and maintain detection rules, alert logic, and automated workflows to strengthen enterprise security posture
• Manage PKI and security certificates, including lifecycle management, renewal processes, and deployment automation

• Conduct infrastructure security assessments across servers, networks, applications, and cloud environments to identify vulnerabilities and misconfigurations.
• Remediate or coordinate remediation of identified issues in collaboration with infrastructure, engineering, and cloud teams.
• Design and implement secure data handling standards, encryption policies, and key management practices.

• Leverage AI-enabled tools and analytics to enhance decision-making, improve efficiency, and drive measurable business outcomes when appropriate.
• Apply sound judgment and ethical standards when using AI, ensuring accuracy, data privacy, and responsible human-in-the-loop oversight.

• 5+ years in enterprise security engineering, infrastructure security, or a systems engineering role with strong security responsibilities
• Experience designing and securing corporate back office and hybrid cloud environments
• Expertise with major cloud platforms, particularly Azure and Google Cloud Platform (GCP), and cloud-native security features
• Hands-on experience with Microsoft Sentinel, CrowdStrike Falcon, or other SIEM/XDR/EDR technologies. Demonstrated fluency in Kusto Query Language (KQL) and Falcon Query Language (FQL)
• Strong understanding of identity and access management, including Active Directory, Azure AD/Entra ID, IAM policies, SSO, MFA, and PAM solutions
• Proficiency with infrastructure-as-code (IaC) tools and automation scripting using PowerShell or Python
• Strong knowledge of networking, encryption, certificates, and security protocols
• Excellent communication skills with the ability to work effectively across cross-functional teams

The pay range for this position is $83,000-$95,000/year; however, base pay offered may vary depending on job-related knowledge, geographic location, skills, and experience. This position is eligible for an annual bonus in addition to a full range of benefits. This information is provided per the relevant state and local pay transparency laws for the location in which this position will be performed.

Medical Insurance, Life Insurance, Dental Insurance, Vision Insurance, PTO, Paid Parental Leave, Paid Holidays, Short Term Disability, Long Term Disability, 401K, Educational Assistance

Jenzabar does not discriminate in employment opportunities or practices on the basis of race, color, sex, gender, gender identity, pregnancy, childbirth and related medical conditions, genetics, genetic markers and carrier status, creed, religion, national origin, ancestry, age, disability, medical condition, marital status, sexual orientation, military service, veteran status, or any other status protected by state and federal laws.

Please Note: Jenzabar does not sponsor applicants for work visas.

Electronic Monitoring Notice:

Job applicants are advised that Jenzabar reserves the right to monitor, access, review, and disclose electronic activity conducted on Company‑owned devices, networks, and systems, as well as activity involving Jenzabar applications or accounts accessed on personal devices. Monitoring may include email, messaging, internet usage, files, applications, and other electronic communications or data, and is performed for security, compliance, and operational purposes.

Originally posted on Himalayas