Cybersecurity Platform Engineer: Defender & IAM Lead

Jack Link's Inc.; Minneapolis, Northern (MN, KY); Hybrid; USD 115,000 - 130,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

Life insurance

Disability insurance

401k

Job summary

Link Snacks is seeking a Cybersecurity Platform Engineer to lead the development, configuration, automation, and continuous improvement of enterprise cybersecurity platforms. Focus areas include Defender, Purview, cloud security, and IAM, with collaboration across IT and business teams to mature controls globally.

The role requires hands-on engineering, strong security fundamentals, and the ability to translate risk and compliance needs into scalable platform solutions for a fast-moving

Qualifications

• Bachelor’s degree in Cybersecurity, IT, CS, or related field or equivalent professional experience.
• 4+ years of hands-on experience engineering, administering, or improving cybersecurity platforms across Microsoft security, cloud security, identity, endpoint, data protection, or security operations domains.
• Strong foundation in cybersecurity platform engineering, including endpoint security, cloud security, IAM data protection, compliance controls, automation, and incident response support.
• Proficient in Microsoft security and identity technologies, Windows, Linux, PowerShell, scripting, API-based integrations, and automation of security operations processes.
• Strong experience with Microsoft Defender, Microsoft Purview, Microsoft Entra ID, Microsoft Intune, Active Directory, Microsoft Sentinel, and Microsoft 365 security and compliance capabilities.
• Skilled in platform configuration, log analysis, alert tuning, dashboarding, control validation, secure baseline development, and remediation tracking.
• Proven ability to secure both IT and OT networks, including experience with incident response, alert triaging, and vulnerability management.
• Proficient in managing identity and access controls, including Active Directory administration and privileged access management.
• Skilled in executing cybersecurity strategies and enforcing technical policies across enterprise environments.
• Experienced in working with security frameworks and standards such as ISO 27001, NIST CSF, and GDPR.
• Capable of managing vendor relationships and coordinating with internal/external stakeholders on security incidents and compliance matters.
• Strong understanding of cybersecurity principles, risk management, encryption, authentication, and access control.
• In-depth knowledge of network and infrastructure security, including virtualization, wireless technologies, and email systems.
• Familiarity with security technologies and tools, including SIEM platforms, automated penetration testing tools, and cloud risk assessment methodologies.
• Knowledgeable in security design, technical governance, and third-party auditing practices.
• Ability to communicate complex technical issues clearly and effectively to both technical and non-technical audiences.
• Demonstrated discretion in handling sensitive and confidential information.
• Strong adaptability, time management, and independent problem-solving skills.
• Ability to remain composed under pressure and provide after-hours support when necessary.
• Willingness to travel up to 10% for training and business-related activities.

Responsibilities

• Lead the engineering, administration, and continuous improvement of Microsoft Defender capabilities, including Defender for Endpoint, Defender for Office 365, Defender for Cloud Apps, Defender for Identity, Defender XDR, and related security integrations.
• Design, implement, and mature Microsoft Purview capabilities for data protection, information governance, data loss prevention, insider risk, eDiscovery support, retention, sensitivity labeling, and compliance-driven control enforcement.
• Engineer cloud security controls across Microsoft Azure and Microsoft 365 environments, including secure configuration baselines, cloud security posture management, workload protection, logging, alerting, policy enforcement, and remediation tracking.
• Lead identity and access management engineering activities, including Entra ID, Active Directory, Conditional Access, privileged access, access reviews, identity lifecycle automation, service accounts, guest access, and secure authentication patterns.
• Develop automation, scripts, integrations, and repeatable processes that improve security platform reliability, reduce manual effort, standardize controls, and support consistent enforcement across global environments.
• Partner with security operations, MDR, SIEM, infrastructure, network, application, data, and OT teams to integrate cybersecurity platforms with detection, response, vulnerability management, incident response, and operational workflows.
• Create and maintain security platform standards, configuration baselines, procedures, runbooks, diagrams, operational documentation, and audit-ready evidence supporting regulatory and cybersecurity framework requirements.
• Define and report platform health, control effectiveness, adoption, remediation progress, secure configuration status, and other actionable security metrics for technical teams and leadership stakeholders.
• Evaluate emerging cybersecurity platform capabilities, Microsoft security roadmap changes, cloud security trends, and industry best practices to recommend practical improvements that strengthen the organization’s security posture.
• Perform other duties as assigned.

Skills

Microsoft Defender

Microsoft Purview

Entra ID / IAM

Automation

PowerShell

Cloud security

Log analysis

Vulnerability management

Education

Bachelor’s degree in Cybersecurity, IT, CS, or related field

Tools

Active Directory

Microsoft Sentinel

Tenable Nessus

Azure

Microsoft 365 Defender

Job description

Link Snacks is seeking a Cybersecurity Platform Engineer to lead the development, configuration, automation, and continuous improvement of enterprise cybersecurity platforms. Focus areas include Defender, Purview, cloud security, and IAM, with collaboration across IT and business teams to mature controls globally.

The role requires hands-on engineering, strong security fundamentals, and the ability to translate risk and compliance needs into scalable platform solutions for a fast-moving