Cybersecurity Engineer

CBRE; United States; Hybrid; USD 110,000 - 160,000; Full time

Job summary

CBRE is seeking a Cybersecurity Engineer to secure and support global AD and Entra ID in a hybrid environment. You will enhance authentication, automation, and monitoring across on-premises and cloud estates to ensure directory services integrity and availability.

You will lead projects, develop automated monitoring solutions, provide L3 support, and collaborate with IT and security teams worldwide. Strong scripting (PowerShell, Python) and experience with IAM controls are essential.

Qualifications

• Bachelor's Degree preferred with 5-8 years of relevant experience in directory services (AD, Entra ID).
• Strong understanding of AD and Entra ID architecture, permissions, and security best practices.
• Experience with authentication protocols (Kerberos, SAML, OAuth).
• Proficient in scripting and automation; PowerShell or Python preferred.

Responsibilities

• Architect, implement, and maintain secure directory systems (AD and Entra ID) on-premises and in the cloud.
• Serve as SME for authentication and directory-based authorization.
• Investigate and resolve security vulnerabilities in directory components.
• Lead and contribute to global projects enabling directory services.

Skills

Scripting & automation

Authentication protocols

Troubleshooting & documentation

Global collaboration

Education

Bachelor's degree preferred

Tools

PowerShell

Python

Entra ID/Azure AD

Active Directory

SIEM

Job description

About the Role:

As a CBRE Cybersecurity Engineer, you will support and secure global enterprise scale Active Directory (AD), Entra ID (Azure AD), and their underlying components in a hybrid environment. You will play a key role in authentication, automation, and monitoring, ensuring the integrity and availability of directory services for our organization.

This job is part of the Cybersecurity job function. They are responsible for identifying security risks and developing procedures to prevent future incidents.

What You'll Do:

• Architect, implement, and maintain secure directory systems, including AD and Entra ID environments (on-premises and cloud).
• Serve as a subject matter expert for authentication and directory facilitated authorization.
• Investigate and resolve security vulnerabilities related to directory system components.
• Lead and contribute to global projects enabling and supporting directory services.
• Develop and maintain automated solutions for monitoring and managing directory service components at scale.
• Provide L3 support for critical directory service components, including troubleshooting and resolving complex authentication and directory issues.
• Collaborate with a globally distributed team, with members located in different regions.
• Manage and provide guidance related to permissions, group policies and access controls for AD and Entra ID.
• Collaborate with IT and security teams to ensure compliance and best practices.
• Document processes, configurations, and incident responses.
• Lead by example and model behaviors that are consistent with CBRE RISE values.
• Impact the achievement of customer, operational, project, or service objectives across multi-discipline teams.
• Work is guided by functional policies which impact the design of procedures and policies.
• Communicate difficult and complex ideas with the ability to influence.

What You'll Need:

To perform this job successfully, an individual will need to perform each crucial duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform essential functions.

• Bachelor's Degree preferred with 5-8 years of relevant experience with 3+ years supporting enterprise or government-level directory services (AD, Entra ID/Azure AD). In lieu of a degree, a combination of experience and education will be considered.
• In depth understanding of AD and Entra ID architecture, permissions, and security best practices.
• Expertise with Active Directory, Entra ID, Azure, AWS, GCP, DNS, Entra Conditional Access, Entra Connect, and Federation.
• Strong scripting and automation skills (PowerShell, Python, or similar).
• Expertise in authentication protocols (Kerberos, SAML, OAuth, etc.).
• Experience with monitoring tools and SIEM platforms.
• Excellent troubleshooting, communication, and documentation skills.
• Relevant certifications (preferred): Microsoft Certified, CISSP, etc.
• The innovative mentality to develop methods that go beyond existing solutions.
• Ability to solve unique problems using standard and innovative solutions having a broad impact on the business.
• Expert organizational skills with an advanced inquisitive mindset.