Lead Consultant

CBIZ India; Karnataka; On-site; INR 2,800,000 - 4,400,000; Full time

Job summary

CBIZ India is seeking a Senior Security Engineer (Cloud & Enterprise Security Engineering) to design, implement, and continuously improve enterprise security controls across cloud, identity, endpoint, network, email, and data protection domains. The role emphasizes engineering secure-by-default solutions and cross-functional collaboration to strengthen security posture.

The engineer will translate requirements into scalable solutions, assess current architectures, and drive long-term maturity

Responsibilities

• Design, implement, harden, and maintain enterprise security controls and reference architectures across AWS, M365 security, and hybrid environments.
• Engineer secure-by-default configurations and guardrails to reduce attack surface and support scalable operations.
• Translate business, compliance and security requirements into practical engineering designs.
• Evaluate current architectures, identify gaps, and implement improvements to strengthen security posture.

Job description

CBIZ, Inc. (NYSE: CBZ) is a leading professional services advisor to middle-market businesses nationwide. With industry knowledge and expertise in accounting, tax, advisory, benefits, insurance, and technology, CBIZ delivers actionable insights to help clients anticipate what is next and discover new ways to accelerate growth. CBIZ has more than 9,500 team members across 23 major markets coast to coast.

CBIZ strives to be our team members' employer of choice by creating an environment where team members are appreciated, recognized for their contributions, and provided with opportunities to grow, both personally and professionally, throughout their careers.

Together, CBIZ and CBIZ CPAs are ranked as one of the top providers of accounting services in the United States. CBIZ CPAs is an independent CPA firm that provides audit, review and attest services, while CBIZ provides business consulting, tax and financial services. In certain jurisdictions, CBIZ CPAs operates under its previous name, Mayer Hoffman McCann P.C.

Role Summary

The Senior Security Engineer (Cloud & Enterprise Security Engineering) is a deeply technical, hands-on engineering role responsible for designing, implementing, hardening, integrating, and continuously improving CBIZ’s enterprise security technologies and controls across cloud, identity, endpoint, network, email, and data protection domains. This position requires strong engineering fundamentals, broad systems knowledge, and the ability to solve complex technical problems across hybrid and multi-cloud environments.

The ideal candidate is an experienced builder and troubleshooter who can translate security requirements into scalable, reliable, and measurable technical solutions. Success in this role depends on advanced expertise in security architecture, platform engineering, automation, systems integration, detection logic, and control validation. The engineer must be able to work across diverse technologies, analyze intricate dependencies, and develop durable solutions that strengthen security posture, reduce risk, and improve operational resilience.

This is not a passive monitoring or ticket-routing role. It is a senior technical position focused on engineering secure-by-default solutions, improving platform capabilities, automating security functions, and driving long-term technical maturity across the environment. While incident support and investigation remain part of the role, the primary emphasis is on building, optimizing, and sustaining the security technologies, integrations, and guardrails that prevent, detect, and contain threats at scale.

Cloud & Enterprise Security Engineering

• Design, implement, harden, and maintain enterprise security controls and reference architectures across:

Amazon Web Services (AWS)

Microsoft 365 security and compliance platforms

Hybrid identity, endpoint, email, and data protection environments

• Engineer secure-by-default configurations and technical guardrails that reduce attack surface, improve resilience, and support scalable enterprise operations.
• Translate business, compliance, and security requirements into practical engineering designs and sustainable technical solutions.
• Evaluate current-state architectures, identify control gaps, and implement improvements that strengthen security posture while maintaining operational usability.
• Partner with infrastructure, cloud, networking, systems, and endpoint teams to embed security into enterprise platforms, workflows, and lifecycle processes.

Identity, Data Protection & Platform Security

• Engineer and operationalize controls for identity protection, phishing defense, DLP, conditional access, privileged access, tenant security baselines, and cloud workload protection.
• Secure workloads, identities, and data across hybrid and multi-cloud environments through design standards, configuration baselines, and measurable technical guardrails.
• Support and troubleshoot certificate-based authentication, encryption, and PKI-related services, including lifecycle considerations such as issuance, renewal, revocation, and dependency management.
• Improve authentication security, access control design, and privileged access protections across enterprise systems and cloud platforms.
• Design and validate visibility and monitoring coverage for cloud, identity, endpoint, email, and platform security events to ensure reliable telemetry and actionable data.
• Security Platforms, Automation & Tooling.
• Build, administer,