Security & Development Operations Engineer

Galvanize; New York, San Francisco (NY, CA); Hybrid; USD 130,000 - 170,000; Full time

Benefits offered by this job

Employer-paid health coverage

401(k) with employer match

25 days PTO (incl. vacation, personal,

Wellness benefit

Professional development stipend

Job summary

Galvanize Climate seeks a hands-on DevOps/SecOps Engineer to secure and optimize our cloud-first enterprise environment. You will manage identity, access, endpoint security, and compliance across Microsoft 365, Entra ID, and cloud platforms.

The role requires strong experience with SIEM (Microsoft Sentinel, Splunk), endpoint protection, and API-driven automation. Office presence in New York or San Francisco is expected, four days per week.

Qualifications

• 5+ years IT experience in regulated financial services environment.
• Deep admin of Microsoft 365 & Entra ID (SSO, CA, MFA).
• Hands-on Intune with Windows 11 Autopilot and app deployment.
• Strong networking and VPN/SD-WAN fundamentals.
• Experience with SIEM, EDR, and data protection tools.

Responsibilities

• Administer and secure Microsoft 365, Entra ID, and Google Workspace.
• Configure SSO, SCIM, OIDC, MFA, and BYOD controls.
• Monitor, investigate, and respond to security alerts.
• Maintain endpoint protection and vulnerability management.
• Manage Azure resources, IAM, and cloud networking.
• Develop integrations via APIs and automation platforms.
• Collaborate with vendors and internal teams on security remediations.

Skills

Microsoft 365 & Entra ID

Intune (Windows 11 Autopilot)

Networking fundamentals

SIEM (Microsoft Defender / Splunk)

PowerShell scripting

API integrations & automation

Cloud security & IAM

Endpoint protection

Tools

CrowdStrike Falcon

Microsoft Defender

Purview

Splunk

CI/CD / IaC tools

JAMF for Apple

Job description

Security & Development Operations Engineer

New York or San Francisco

About Galvanize

Galvanize is a global asset manager focused on delivering compelling returns through deep specialization in energy and the business of decarbonization. The firm invests across asset classes including real estate, private credit, venture and growth capital, and public equities to accelerate commercially competitive technology and solutions. Built by investors with proven track records scaling multibillion dollar strategies, Galvanize pairs top-tier institutional investment talent with expertise across technology, science, market development, policy, and geopolitics to identify and execute on investment opportunities across all sectors of the economy. The firm has offices in San Francisco, New York, and London.

Role

Galvanize Climate is seeking a highly skilled and hands-on DevOps / Security Operations (SecOps) Engineer to manage, secure, and optimize our cloud-first enterprise environment. This role combines systems administration, identity and access management, endpoint security, compliance operations, cloud infrastructure, and SaaS application integration to support a secure and scalable technology ecosystem.

The ideal candidate will have strong experience administering Microsoft 365 Workspace environments, implementing security controls, managing endpoint devices, supporting compliance requirements, and integrating enterprise applications through modern authentication and automation technologies.

Identity & Access Management

• Administer and maintain Microsoft 365, Microsoft Entra ID, and Google Workspace


• Configure and maintain Single Sign-On (SSO), SCIM and OIDC provisioning, conditional access policies, and MFA.


• Manage Bring Your Own Device (BYOD) controls and mobile device compliance


• Support enterprise application registration, authentication, and authorization

Security Operations

• Monitor, investigate, and respond to security alerts and


• Administer and optimize CrowdStrike Falcon and other security monitoring


• Implement and maintain endpoint protection, vulnerability management, and threat detection


• Review security posture across cloud and SaaS platforms and recommend


• Partner with internal stakeholders and external vendors to remediate security


• Manage Windows, macOS, and mobile device


• Administer Microsoft Entra-based device management and JAMF for Apple


• Provision and manage Azure resources and cloud


• Maintain networking infrastructure and troubleshoot connectivityManage domain registrations, DNS records, certificates, and cloud networking


• Support LAN/Wi-Fi health (switching, APs, DHCP/DNS, VLANs, QoS for real-time media) and coordinate with providers on circuits and SD-WAN/VPN.


• Manage application security settings, permissions, and data-sharing


• Design and maintain integrations using APIs, connectors, and modern automation


• Support integration of AI-enabled platforms, MCPs (Model Context Protocols), and enterprise


• Experience with Infrastructure-as-Code (IaC), automation, and cloud

Compliance & Governance

• Administer compliance archiving and communications monitoring platforms including SteeleEye and Global Relay.


• Support regulatory, audit, and governance


• Maintain data retention and eDiscovery policies across Microsoft 365, Druva, and other


• Implement and manage Data Loss Prevention (DLP) policies and information protection


• Ensure security configurations align with company policies and compliance

Required Qualifications

• 5+ years of progressive IT experience in a regulated financial services environment (RIA/asset management/venture).


• Deep administration of Microsoft 365 & Entra ID (identity, SSO integrations, Conditional Access, MFA).


• Hands-on Intune expertise for Windows 11: Autopilot, configuration, app deployment, updates,


• Solid networking fundamentals (switching/Wi-Fi, DHCP/DNS, VPN/SD-WAN concepts) and practical troubleshooting.


• Experience with Cisco


• Demonstrated security mindset (least privilege, encryption, EDR, patching, phishing defenses).


• Familiarity with Microsoft Defender security stack and Purview governance/DLP.


• Scripting/automation (PowerShell) for scale and repeatability


• Hands-on experience with Security Information and Event Management (SIEM) platforms such as Microsoft Sentinel, Splunk, or comparable technologies.


• Experience with SaaS Security Posture Management (SSPM) tools and practices, including configuration monitoring, risk assessment, and application governance.


• Knowledge of Digital Forensics and Incident Response (DFIR) methodologies, investigation workflows, evidence preservation, and post-incident remediation.


• Experience provisioning and administering Azure SQL databases, including access management, security controls, performance tuning, backup strategies, and disaster


• Experience assessing and securing enterprise AI, SaaS, and third-party application integrations through APIs, connectors, and automation platforms. Exceptional communication, discretion, and customer service with senior


• In-office presence in NY or SF, 4 days/week; flexibility for early/late coverage around key

Compensation and Benefits

• Estimated base salary, depending on experience: $130,000 - $170,000 per annum


• Role is also eligible for an annual discretionary bonus


• Generous benefits package, including employer-paid health coverage options


• 401(k) plan with employer match


• 25 days of PTO which is inclusive of vacation, personal time and sick leave


• Monthly wellness benefit that covers a broad range of activities


• Annual stipend for employer-sponsored professional development opportunities


• 16 weeks paid parental leave for parents of any gender