Enterprise Security Engineer

NEPSE Trading; Northern (KY); Hybrid; USD 83,000 - 95,000; Full time

Job summary

Jenzabar seeks an Enterprise Security Engineer to design, implement, and maintain secure infrastructure across on‑premises and cloud. You’ll establish security standards, govern IAM, and enforce segmentation between corporate systems and cloud platforms.

Focus areas include Azure and GCP security, Microsoft Sentinel and CrowdStrike tooling, encryption and PKI, and secure deployment patterns with IaC and automation.

Qualifications

• 5+ years in enterprise security engineering or related field.
• Experience with Azure and Google Cloud Platform (GCP).
• Hands-on with SIEM/XDR/EDR tools (Microsoft Sentinel, CrowdStrike).
• Fluency in IAM concepts: AD/Entra ID, SSO, MFA, PAM.
• Proficient in IaC and scripting (PowerShell, Python).

Responsibilities

• Design and maintain secure enterprise infrastructure (on-prem and cloud).
• Lead security architecture reviews and enforce secure design principles.
• Configure and maintain SIEM and monitoring rules.
• Manage PKI and certificate lifecycle.
• Enforce data encryption, key management, and secure deployment patterns.
• Collaborate across teams to remediate vulnerabilities.

Skills

Enterprise security engineering

Hybrid cloud security

Identity & access management

KQL / FQL languages

IaC & automation (PowerShell/Python)

Networking & encryption

Communication skills

Security reviews & architecture

Tools

Microsoft Sentinel

CrowdStrike Falcon

Kubernetes

Job description

## About the roleThe Enterprise Security Engineer is responsible for designing, implementing, and maintaining secure enterprise infrastructure across both on-premises and cloud environments. This role establishes security architecture standards, governs identity and access management systems, and ensures segmentation between internal corporate systems and cloud platforms. The engineer will bring deep expertise in enterprise security technologies, cloud security (Azure, GCP), and modern detection/monitoring platforms such as Microsoft Sentinel and CrowdStrike premises and cloud environments.ESSENTIAL TASKS Enterprise Security Architecture: Support the design and maintenance of secure network architectures through the provision of recommendations and best practices for segmentation, firewall policies, and access control standards across corporate back-office infrastructure Establish and maintain enterprise security baselines, system hardening standards, and configuration management policies aligned to industry frameworks Lead security architecture reviews for new and existing systems and provide guidance to engineering teams on secure design principles Cloud Security (Azure & GCP): Design, implement, and maintain cloud security controls in Azure, Google Cloud Platform (GCP), AWS including network security groups, service accounts, workload identity federation, logging, and cloud-native security tooling Support secure integration and connectivity between on-premises environments and cloud-hosted applications and infrastructure Apply cloud hardening standards, ensure proper encryption configurations, and enforce secure deployment patterns. Contribute to cloud security initiatives by applying security best practices for Google Kubernetes Engine (GKE) and supporting the organization's transition from Windows-based environments to modernized cloud-native deployments Develop and implement secure configurations for Cloud SQL in alignment with evolving cloud database security standards Security Infrastructure & Tooling: Configure, maintain, and develop SIEM and security monitoring technologies including Microsoft Sentinel, CrowdStrike Falcon, and other endpoint, log analytics, or detection platforms Develop and maintain detection rules, alert logic, and automated workflows to strengthen enterprise security posture Manage PKI and security certificates, including lifecycle management, renewal processes, and deployment automation Infrastructure Security: Conduct infrastructure security assessments across servers, networks, applications, and cloud environments to identify vulnerabilities and misconfigurations. Remediate or coordinate remediation of identified issues in collaboration with infrastructure, engineering, and cloud teams.Design and implement secure data handling standards, encryption policies, and key management practices. AI Utilization: Leverage AI-enabled tools and analytics to enhance decision-making, improve efficiency, and drive measurable business outcomes when appropriate. Apply sound judgment and ethical standards when using AI, ensuring accuracy, data privacy, and responsible human-in-the-loop oversight.PREFERRED SKILLS AND EXPERIENCE 5+ years in enterprise security engineering, infrastructure security, or a systems engineering role with strong security### responsibilitiesExperience designing and securing corporate back office and hybrid cloud environments Expertise with major cloud platforms, particularly Azure and Google Cloud Platform (GCP), and cloud-native security features Hands-on experience with Microsoft Sentinel, CrowdStrike Falcon, or other SIEM/XDR/EDR technologies. Demonstrated fluency in Kusto Query Language (KQL) and Falcon Query Language (FQL) Strong understanding of identity and access management, including Active Directory, Azure AD/Entra ID, IAM policies, SSO, MFA, and PAM solutions Proficiency with infrastructure-as-code (IaC) tools and automation scripting using PowerShell or Python Strong knowledge of networking, encryption, certificates, and security protocols Excellent communication skills with the ability to work effectively across cross-functional teams The pay range for this position is $83,000-$95,000/year; however, base pay offered may vary depending on job-related knowledge, geographic location, skills, and experience. This position is eligible for an annual bonus in addition to a full range of### benefits. This information is provided per the relevant state and local pay transparency laws for the location in which this position will be performed. Benefits Medical Insurance, Life Insurance, Dental Insurance, Vision Insurance, PTO, Paid Parental Leave, Paid Holidays, Short Term Disability, Long Term Disability, 401K, Educational Assistance Jenzabar does not discriminate in employment opportunities or practices on the basis of race, color, sex, gender, gender identity, pregnancy, childbirth and related medical conditions, genetics, genetic markers and carrier status, creed, religion, national origin, ancestry, age, disability, medical condition, marital status, sexual orientation, military service, veteran status, or any other status protected by state and federal laws.Please Note: Jenzabar does not sponsor applicants for work visas. Electronic Monitoring Notice: Job applicants are advised that Jenzabar reserves the right to monitor, access, review, and disclose electronic activity conducted on Company-owned devices, networks, and systems, as well as activity involving Jenzabar applications or accounts accessed on personal devices. Monitoring may include email, messaging, internet usage, files, applications, and other electronic communications or data, and is performed for security, compliance, and operational purposes.Originally posted on Himalayas## Required skillsSecurity EngineerEnterprise Security EngineerCybersecurity EngineerCloud Security EngineerInformation Security EngineerEnterprise Security EngineeringEnterprise Security ArchitectEnterprise Security SpecialistIT Security EngineerpythonsqlawskubernetesLocation: United States