IT Security Engineer

SunStream Business Services; Northern (KY); On-site; USD 90,000 - 140,000; Full time

Benefits offered by this job

Healthcare accounts

401(k) plan

Learning budget

Time off & flexibility

Job summary

SunStream Business Services is seeking a hands-on Infrastructure Security Platform Engineer to own and enhance core security technologies. You will manage SASE remote access, firewalls, DLP/CASB, Purview, web filtering, and email security within the Infrastructure & Operations team.

You’ll review changes before deployment, conduct audits, and partner with Security and IT to enforce standards, strengthen posture, and enable scalable security services for MSP engagements.

Qualifications

• Bachelor's degree or equivalent in computer science or IT.
• 3–5 years of security or infrastructure engineering experience.
• Hands-on experience with network security platforms (SASE, firewalls, DLP, web/email security).
• Familiarity with Microsoft security tools (Purview, Sentinel, Defender, CA).

Responsibilities

• Own and engineer core security platforms including SASE, firewalls, DLP, CASB, Purview, and email security.
• Design and implement security policies and drive platform enhancements.
• Review changes pre-deployment and conduct audits for governance and compliance.
• Respond to alerts, troubleshoot incidents, and support on-call rotations.
• Collaborate with Security, Infrastructure and IT Services to improve operations.

Skills

Network security

Security auditing

Documentation

Cross-team collaboration

Education

Bachelor’s degree in computer science, information technology, or related field

Tools

SASE

Firewalls

DLP/CASB

Microsoft Purview

Sentinel

Defender

Conditional Access

TLS inspection

URL filtering

Job description

Our Core Philosophy: (in)Trust - A Culture Built on Trust

At SunStream, we embrace our "One Word Why" – (in)Trust. This powerful conceptrepresentsour unwavering commitment to trust as the foundation of our relationships with clients, employees, and stakeholders. Trustisn'tjust a part of our services;it'sthe bedrock of our culture.

As we join forces to create value, we promise tooperate(in)Trust with you at every step. Joining the SunStream team means engaging in purposeful work, achieving financial well-being, and thriving in an exceptional culture. Our owners, clients, and employees (in)Trust us to deliver strong returns, steward resources effectively, and provide opportunities for growth and value, all within a framework of mutual trust.

The Opportunity

We’re seeking a hands-onInfrastructure Security Platform Engineerto own and enhance our core security technologies. This roleis responsible forthe engineering, administration, and continuous improvement of platforms such as SASE remote access, firewalls, DLP,CASB, Microsoft Purview, web filtering, and email security.

As part of the Infrastructure & Operations team,you’llplay a critical role in ensuring our environment is securely configured-reviewing changes before deployment, conducting audits, and partnering closely with Security and IT teams to enforce standards and strengthen our overall security posture.

What You’ll Be Doing

Own & Engineer Security Platforms

• Act as technical owner for core security tools, including SASE, firewalls, DLP/CASB, web filtering, Microsoft Purview, and email security
• Design, implement, andoptimizepolicies (TLS inspection, DLP, URL filtering, email controls)
• Drive platform enhancements through research, testing, and vendor collaboration

Ensure Secure Configuration & Governance

• Review infrastructure and application changes pre-deployment to ensure alignment with security standards
• Conduct regular configuration audits across network, cloud, endpoint, and identity platforms
• Maintain configuration baselines, audit frameworks, and operational runbooks

Support Operations & Change Management

• Evaluate and approve security-related change requestsin core platforms
• Troubleshoot platform issues and partner with vendors to resolve incidents
• Respond to alerts, support investigations, andparticipatein on-call rotations
• Partner with Security, Infrastructure, and IT Services teams to enforce standards and improve operations
• Enable scalable support through strong documentation and knowledge transfer
• Contribute to security services that support customer-facing MSP engagements

Strengthen Risk & Compliance

• Track risks, audit findings, and remediation activities for managed platforms
• Maintain security policies and procedures to align with regulatory requirements and risk appetite

What You’ll Bring to the Table

• Bachelor’s degree in computer science, information technology, or a related field, or an equivalent combination of education and experience sufficient to perform the essential functions of the job
• 3–5 years of experience insecurity or infrastructure engineering
• Hands-on experience withnetwork security platforms(SASE, firewalls, DLP, web/email security)
• Familiarity withMicrosoft security tools (Purview,Sentinel, Defender, Conditional Access)or similar platforms
• Experience reviewing configurations or performing security audits preferred
• Strong documentation and cross-team collaboration skills

Preferred Certifications:CISSP, Microsoft Security, Check Point, or SASE-related certifications

How You’ll Be Rewarded

All SunStream employees receive a competitive salary and bonus package. Eligible employees also enjoy access to an industry-leading benefits program, including but not limited to:

• Tax-advantaged healthcare accounts
• 401(k) plan with generous employer match
• Individual learning & development budget
• Robust time off plans and workplace flexibility

Who We Are

SunStream Business Services,establishedin 2020 under section 4.25 of the Farm Credit Act of 1971, supports Farm Credit lending institutions. We provide services, including Loan Servicing, General Ledger, Financial Reporting, Data & Analytics, Technology & Security, and Business Services to support farmers, ranchers, and rural communities.

SunStream is committed to equal opportunity employment and will not discriminate against any employee or applicant for employment because of his or her race, color, religion, sex, or national origin, disability status or protected veteran status.