Security Engineer - Cloud & Identity (Hybrid)

Gotham Technology Group; New York (NY); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Gotham Technology Group in New York is seeking a Security Engineer to build, enforce, and mature security controls across our clients' endpoint, identity, and cloud environments. This is a hands-on engineering role for someone with genuine security depth who understands not just how to configure a platform, but why a control matters and how to validate it.

This position is for someone with a dedicated hands-on security engineering background within an enterprise environment and has developed

Qualifications

• 4+ years in a dedicated information security role.
• Strong understanding of Zero Trust and defense-in-depth concepts.
• Hands-on with Microsoft security technologies (Intune, Defender, Entra ID).
• Familiarity with CIS Benchmarks and MITRE ATT&CK framework.
• Proven ability to secure endpoints, identities, and cloud resources.

Responsibilities

• Design, implement, and maintain endpoint security controls and ASR rules.
• Enforce least-privilege via LAPS and endpoint management solutions.
• Define device compliance with Intune and Conditional Access.
• Manage Entra Conditional Access policies and governance.
• Support phishing-resistant authentication methods (FIDO2, Windows Hello).
• Strengthen Entra ID security and Azure posture with Defender tools.
• Collaborate with MDR/SOC providers and internal teams on remediation.
• Contribute to security standards and repeatable operational processes.

Skills

Zero Trust

Defense in depth

Least privilege

Identity security

ATT&CK techniques

Analytical skills

SOC/MDR collaboration

Security certifications

Tools

Microsoft Intune

Defender for Endpoint

Defender for Office 365

Defender for Cloud

Entra ID / Azure AD

Conditional Access

Job description

Gotham Technology Group in New York is seeking a Security Engineer to build, enforce, and mature security controls across our clients' endpoint, identity, and cloud environments. This is a hands-on engineering role for someone with genuine security depth who understands not just how to configure a platform, but why a control matters and how to validate it.

This position is for someone with a dedicated hands-on security engineering background within an enterprise environment and has developed