IT Security Engineer

Pattern Energy Group; Houston (TX); On-site; USD 111,000 - 139,000; Full time

Benefits offered by this job

Medical

Dental

Vision

Disability insurance

Life insurance

Retirement plan

Paid time off

Job summary

Pattern Energy Group is seeking a Senior IT Security Engineer to design and implement security controls across our enterprise IT and cloud environments. This role translates cybersecurity strategy into scalable architectures and partners with IT Operations, Security Operations, and Business Applications to reduce risk.

You will apply NIST CSF and Zero Trust principles, lead vulnerability management, and mentor engineers while collaborating with MSSP/MDR vendors to strengthen the organization’s

Qualifications

• 7+ years of experience in Information Security Engineering or related fields.
• Experience developing and executing security strategy, roadmaps, and target-state security architectures.
• Strong experience in security design including architecture reviews, threat-informed design, defense-in-depth, and Zero Trust principles.
• Strong understanding of the Microsoft security stack (MS Defender, Intune, Azure/Entra, M365).
• Experience applying recognized cybersecurity frameworks (NIST CSF, 800-53, CIS Controls, CIS Benchmarks) and Zero Trust principles.
• Experience working with MSSP/MDR providers and external security partners.
• Strong documentation, communication, and cross-functional collaboration skills.
• Certifications such as CISSP, CCSP, CRISC, CCNA/CCNP are beneficial.

Responsibilities

• Develop and execute security strategy and roadmap, identifying gaps and opportunities to improve security maturity.
• Define and maintain security architecture principles and reference architectures across cloud and on-premises environments.
• Design, implement, and continuously improve security controls across Azure, Microsoft 365, Defender, Entra ID, Intune, endpoints, servers, networks.
• Develop and maintain security standards, secure configuration baselines, architecture requirements, hardening guidance, and engineering docs.
• Lead vulnerability and security exposure management across enterprise IT systems, including risk assessment, prioritization, and remediation coordination.
• Evaluate security technologies and provide recommendations on architecture, integration, and cost-effectiveness.
• Partner with Security Operations to improve detection, logging, SIEM, EDR/XDR, and security monitoring; mentor engineers and liaise with external partners during incidents.
• Serve as a senior cybersecurity technical authority and trusted advisor to security and IT leadership, guiding secure technology decisions.

Skills

Security architecture

Zero Trust

Threat-informed design

NIST CSF familiarity

Microsoft security suite

Vendor management

Technical communication

Job description

Overview

Pattern Energy is a leading renewable energy company that develops, constructs, owns, and operates high-quality wind and solar generation, transmission, and energy storage facilities. Our mission is to transition the world to renewable energy through the sustainable development and responsible operation of facilities with respect for the environment, communities, and cultures where we have a presence. Our approach begins and ends with establishing trust, accountability, and transparency. Our company values of creative spirit, pride of ownership, follow-through, and a team-first attitude drive us to pursue our mission every day. Our culture supports our values by fostering innovative and critical thinking and a deep belief in living up to our promises. Headquartered in the United States, Pattern has a global portfolio of more than 30 power facilities and transmission assets, serving various customers that provide low-cost clean energy to millions of consumers.

Responsibilities

The Senior IT Security Engineer is responsible for developing and executing cybersecurity strategy and architecture while designing, implementing, and continuously improving security controls across Pattern and its subsidiaries’ enterprise IT and cloud environments.

The position serves as a senior technical authority for IT security, translating cybersecurity strategy, risk, and business requirements into scalable security architectures, technical standards, and engineering solutions. The role partners closely with IT Operations, Security Operations, Business Applications, Enterprise Architecture, and third-party technology and security providers to reduce cyber risk and strengthen the organization’s overall security posture.

KEY ACCOUNTABILITIES

1. Develop and execute Security strategy and roadmap. Identify capability gaps, emerging risks, and opportunities to improve

security maturity, and translate business and cybersecurity objectives into prioritized technical initiatives.

2. Define and maintain security architecture principles, patterns, and reference architectures across cloud and enterprise IT. Lead

security architecture reviews for new technologies, applications, infrastructure, and significant changes, providing risk-based

design requirements and recommendations.

3. Design, implement, and continuously improve security controls across Azure, Microsoft 365, Microsoft Defender, Entra ID, Intune,

endpoints, servers, networks, and other enterprise technologies.

4. Develop and maintain security standards, secure configuration baselines, architecture requirements, hardening guidance, and

engineering documentation. Ensure technical controls align with the organization's security strategy and frameworks such as NIST

Cybersecurity Framework 2.0.

5. Lead vulnerability and security exposure management across enterprise IT systems, including identification, technical risk

assessment, prioritization, mitigation strategy, remediation coordination, and risk tracking. Evaluate emerging vulnerabilities

and threats to determine potential organizational impact.

6. Evaluate security technologies and make recommendations regarding architecture, adoption, configuration, integration, consolidation, and retirement. Ensure security investments provide appropriate risk reduction while balancing operational requirements, integration complexity, and cost.

7. Partner with Security Operations to improve detection, logging,SIEM, EDR/XDR, and security monitoring integrations. Provide

senior technical expertise during significant cybersecurity incidents, including containment, remediation, recovery, and implementation of longer-term corrective controls.

8. Serve as a senior cybersecurity technical authority and trusted advisor to Security, IT Operations, Enterprise Architecture,

Business Applications, and technology leadership. Provide technical direction on complex security issues, mentor other

engineers, influence secure technology decisions, and work with MSSP/MDR, network, cloud, and other external partners to

ensure security requirements are effectively implemented.

Qualifications

• 7+ years of experience in Information Security Engineering, Cybersecurity Engineering, Infrastructure Security or other applicable fields.
• Demonstrated experience developing and executing security strategy, technical roadmaps, and target-state security architectures, including identifying capability gaps and translating organizational risk into prioritized security initiatives.
• Strong experience with security architecture and design, including architecture reviews, threat-informed design, defense-in-depth, Zero Trust principles, reference architectures, security patterns, and development of technical security standards.
• Strong understanding of the Microsoft suite (MS Defender, Intune, Azure/Entra, M365).
• Experience applying recognized cybersecurity frameworks and practices, particularly NIST Cybersecurity Framework (CSF), NIST SP 800-53, CIS Controls, CIS Benchmarks, and Zero Trust architecture principles.
• Experience working with MSSP’s, MSNP’s, or other external SOC/MDR providers.
• Strong documentation, communication, and cross functional collaboration skills.
• Certifications such as CISSP, CCSP, CRISC, CCNA/CCNP, etc are beneficial.

The expected starting pay range for this role is $111,000 - $139,000 USD. This range is an estimate and base pay may be above or below the ranges based on several factors including but not limited to location, work experience, certifications, and education. In addition to base pay, Pattern’s compensation program includes a bonus structure for full‑time employees of all levels.

We also provide a comprehensive benefits package which includes:

• medical
• dental
• vision
• short and long-term disability
• life insurance
• voluntary benefits
• family care benefits
• employee assistance program
• paid time off and bonding leave
• paid holidays
• 401(k)/RRSP retirement savings plan with employer contribution
• employee referral bonuses.

Pattern Energy Group is an Equal Opportunity Employer.