IT Security Engineer

SunStream Business Services; Saint Paul (MN); On-site; USD 80,000 - 110,000; Full time

Benefits offered by this job

Comprehensive medical, dental, and vision insurance

401(k) plan with generous employer match

Individual learning & development budget

Job summary

SunStream Business Services in Saint Paul, Minnesota, is seeking an experienced Infrastructure Security Platform Engineer. This crucial role involves enhancing security technologies and ensuring their proper deployment and configuration.

The ideal candidate will have 3-5 years of experience, a Bachelor's degree, and hands-on familiarity with various security platforms, working closely with IT teams to enforce security standards and strengthen the overall security posture.

SunStream offers a competitive salary, bonus package, and robust benefits, including comprehensive medical insurance and a 401(k) plan.

Qualifications

• 3-5 years of experience in security or infrastructure engineering.
• Hands-on experience with network security platforms.
• Familiarity with Microsoft security tools.

Responsibilities

• Act as technical owner for core security tools.
• Review infrastructure and application changes pre-deployment.
• Evaluate and approve security-related change requests.

Skills

Experience in security or infrastructure engineering

Hands-on experience with network security platforms (SASE, firewalls, DLP)

Strong documentation skills

Cross-team collaboration

Education

Bachelor's degree in computer science or related field

Tools

Microsoft security tools (Purview, Sentinel, Defender)

DLP systems

Job description

Our Core Philosophy: (in)Trust - A Culture Built on Trust

At SunStream, we embrace our "One Word Why" - (in)Trust. This powerful concept represents our unwavering commitment to trust as the foundation of our relationships with clients, employees, and stakeholders. Trust isn't just a part of our services; it's the bedrock of our culture.

The Opportunity

We're seeking a hands‑on Infrastructure Security Platform Engineer to own and enhance our core security technologies. This role is responsible for the engineering, administration, and continuous improvement of platforms such as SASE remote access, firewalls, DLP, CASB, Microsoft Purview, web filtering, and email security.

As part of the Infrastructure & Operations team, you will play a critical role in ensuring our environment is securely configured – reviewing changes before deployment, conducting audits, and partnering closely with Security and IT teams to enforce standards and strengthen our overall security posture.

What You’ll Be Doing

Own & Engineer Security Platforms

• Act as technical owner for core security tools, including SASE, firewalls, DLP/CASB, web filtering, Microsoft Purview, and email security
• Design, implement, and optimize policies (TLS inspection, DLP, URL filtering, email controls)
• Drive platform enhancements through research, testing, and vendor collaboration

Ensure Secure Configuration & Governance

• Review infrastructure and application changes pre‑deployment to ensure alignment with security standards
• Conduct regular configuration audits across network, cloud, endpoint, and identity platforms
• Maintain configuration baselines, audit frameworks, and operational runbooks

Support Operations & Change Management

• Evaluate and approve security‑related change requests in core platforms
• Troubleshoot platform issues and partner with vendors to resolve incidents
• Respond to alerts, support investigations, and participate in on‑call rotations

Collaborate Across Teams

• Partner with Security, Infrastructure, and IT Services teams to enforce standards and improve operations
• Enable scalable support through strong documentation and knowledge transfer
• Contribute to security services that support customer‑facing MSP engagements

Strengthen Risk & Compliance

• Support regulatory compliance efforts (NIST, FFIEC, HIPAA, PCI, etc.)
• Track risks, audit findings, and remediation activities for managed platforms
• Maintain security policies and procedures to align with regulatory requirements and risk appetite

What You’ll Bring to the Table

• Bachelor’s degree in computer science, information technology, or a related field, or an equivalent combination of education and experience sufficient to perform the essential functions of the job
• 3‑5 years of experience in security or infrastructure engineering
• Hands‑on experience with network security platforms (SASE, firewalls, DLP, web/email security)
• Familiarity with Microsoft security tools (Purview, Sentinel, Defender, Conditional Access) or similar platforms
• Experience reviewing configurations or performing security audits preferred
• Strong documentation and cross‑team collaboration skills

Preferred Certifications: CISSP, Microsoft Security, Check Point, or SASE‑related certifications

How You’ll Be Rewarded

All SunStream employees receive a competitive salary and bonus package. Eligible employees also enjoy access to an industry‑leading benefits program, including but not limited to:

• Comprehensive medical, dental and vision insurance
• Tax‑advantaged healthcare accounts
• 401(k) plan with generous employer match
• Income protection benefits
• Individual learning & development budget
• Robust time off plans and workplace flexibility

Who We Are

SunStream Business Services, established in 2020 under section 4.25 of the Farm Credit Act of 1971, supports Farm Credit lending institutions. We provide services, including Loan Servicing, General Ledger, Financial Reporting, Data & Analytics, Technology & Security, and Business Services to support farmers, ranchers, and rural communities.

SunStream is committed to equal opportunity employment and will not discriminate against any employee or applicant for employment because of his or her race, color, religion, sex, or national origin, disability status or protected veteran status.

Apply Now

If you are dedicated to fostering trust, driving operational excellence, and delight in unmatched customer success, we invite you to apply for the IT Security Engineer position at SunStream Business Services.