Cybersecurity Security Engineer II

Expand Energy; Spring (TX); On-site; USD 110,000 - 150,000; Full time

Job summary

Expand Energy is seeking a Cybersecurity Engineer focused on IAM and cloud security in the United States. The role targets 3–5 years of experience and emphasizes secure identity architectures across enterprise platforms.

You will manage IAM services, secure Microsoft Azure environments, and advance CSPM efforts while growing toward a future security architecture role.

Qualifications

• Experience with enterprise IAM platforms and cloud identity models.
• Strong knowledge of SSO, MFA, and identity governance principles.
• Hands-on experience with Azure security technologies and Defender for Cloud.

Responsibilities

• Administer and support IAM technologies (Okta, SailPoint, CyberArk/Idira, Entra ID).
• Configure SSO, federation, and policy administration for applications.
• Implement MFA and Conditional Access to enforce least privilege.
• Assist identity lifecycle, provisioning, deprovisioning, and access governance.
• Support Azure security operations and cloud posture management.

Skills

IAM platforms

SSO Federation

MFA & CA

Azure Security

RBAC

Identity governance

Automation scripting

Education

Bachelor’s degree in Cybersecurity/CS/IS

High school diploma or GED

Cybersecurity training

Job description

Our core values — Stewardship, Character, Collaborate, Learn, Disrupt — are the lens through which we evaluate every business decision. As a dynamic, growing company that offers extremely competitive compensation and benefits, our employees are our most valued assets and the foundation of Expand's performance among our E&P competitors.

We seek applicants from all backgrounds to ensure we get the best, most creative talent on our team. We realize that, historically, underrepresented groups feel the need to be 100% qualified in order to apply. If you meet any combination of our requirements, we encourage you to apply. We strive to hire people from a wide variety of backgrounds, not just because it’s the right thing to do, but because it makes our company stronger.

Job Summary

Expand Energy is seeking a Cybersecurity Engineer to join our cybersecurity team with a primary focus on Identity and Access Management (IAM) and Cloud Security. This role is ideal for a security professional with 3-5 years of experience who is passionate about securing modern cloud environments and enterprise identity platforms.

The Cybersecurity Engineer will support and enhance our identity ecosystem, secure our Microsoft Azure cloud environment, and help advance our cloud security posture management capabilities. This position combines hands‑on operational responsibilities with engineering and design opportunities, allowing the successful candidate to develop into a future security architecture role.

The ideal candidate possesses strong technical knowledge of cloud security and identity security principles, is comfortable working across multiple security technologies, and has a desire to grow into a strategic contributor who helps shape the future direction of cybersecurity at Expand Energy.

Job Duties & Responsibilities

Identity & Access Management

• Administer and support enterprise IAM technologies, including Okta, SailPoint, CyberArk / Idira, and Microsoft Entra ID
• Configure and maintain Single Sign-On (SSO) and federation services, with emphasis on Okta policy administration and application integrations
• Implement and support MFA and Conditional Access policies
• Assist with identity lifecycle management processes, including provisioning, deprovisioning, and access governance
• Support privileged access management initiatives and privileged account controls
• Partner with application owners to integrate applications with enterprise identity services
• Assist in maintaining and improving identity governance and Zero Trust security initiatives

Cloud Security

• Support security operations and engineering activities within Microsoft Azure
• Assist with the implementation and ongoing administration of Microsoft Defender for Cloud
• Monitor and improve the organization's Cloud Security Posture Management (CSPM) program
• Identify, track, and support remediation of cloud security risks and misconfigurations
• Implement and support Azure Role-Based Access Control (RBAC) and least‑privilege access models
• Participate in cloud security assessments, security reviews, and architecture discussions
• Contribute to the development of cloud security standards, patterns, and best practices

Security Engineering & Operations

• Support day‑to‑day cybersecurity operations while participating in engineering and improvement initiatives
• Troubleshoot authentication, authorization, identity, and access‑related issues
• Participate in incident response activities and operational support efforts as needed
• Participate in an on‑call rotation supporting critical cybersecurity services
• Work with infrastructure and application teams to implement secure solutions
• Develop and maintain technical documentation, standards, and operational procedures
• Identify opportunities to automate manual processes and improve operational efficiency

Security Innovation & Future Growth

• Contribute ideas and recommendations for improving security architecture and operational maturity
• Assist with evaluating emerging security technologies and capabilities
• Leverage scripting, automation, and AI technologies to create repeatable and scalable security processes
• Develop expertise that enables progression toward a future security architecture role over time

Job Specific Skills

• Strong understanding of SSO, federation, MFA, identity governance, privileged access management, RBAC, and IAM best practices
• Experience with one or more IAM platforms such as Okta, SailPoint, CyberArk / Idira, or Microsoft Entra ID
• Working knowledge of cloud security principles and best practices
• Strong troubleshooting, analytical, and problem‑solving skills
• Ability to communicate clearly with technical teams, application owners, and business stakeholders

Education

Minimum: High school diploma or GED

Preferred: Bachelor’s degree – from accredited university – Cybersecurity, Information Security, Computer Science, Information Systems, or a related discipline

Preferred: Cybersecurity training

Experience

Minimum: 2 years work experience in cybersecurity, cloud security, IAM, infrastructure security, or a related field

Experience supporting enterprise cloud environments, preferably Microsoft Azure

Experience with identity and access management concepts and technologies

Additional Qualifications

• CompTIA Security+
• Microsoft Azure Security Engineer (AZ-500)
• Microsoft Identity and Access Administrator (SC-300)
• CISSP, Associate of ISC2, or progress toward CISSP certification
• Other relevant cloud, identity, or cybersecurity certifications
• Experience with Microsoft Defender for Cloud
• Experience with Cloud Security Posture Management (CSPM) practices
• Knowledge of Zero Trust architecture principles
• Scripting and automation experience using PowerShell, Python, or similar technologies
• Experience leveraging AI tools to improve operational efficiency and automate repetitive tasks
• Experience working in regulated, energy, or critical infrastructure environments
• Familiarity with cloud security frameworks and security architecture concepts

Expand Energy takes necessary action to ensure that all applicants are treated without regard to their race, color, religion, sex, sexual orientation, age, gender identity, national origin, genetic information, disability, pregnancy, military or veteran status or any other protected characteristic as established by law.

Expand Energy Corporation's operations are focused on discovering and developing its large and geographically diverse resource base of unconventional oil and natural gas assets onshore in the United States.

Nearest Major Market: Oklahoma City

Nearest Secondary Market: Oklahoma

Job Segment: Computer Science, Information Security, Information Systems, Engineer, Technology, Engineering