Security Engineer: IAM & Cloud Security Champion

CRG; Greensboro (NC); On-site; USD 90,000 - 120,000; Full time

Job summary

CRG in Greensboro, NC is seeking a Security Engineer II to design, implement, and operate core security controls across our infrastructure and cloud platforms. You will own key security tooling and processes, including endpoint protection, logging and monitoring, vulnerability management, and secure configurations.

You will collaborate with Network, Systems, and IAM teams to maintain compliant, efficient operations, support IAM workflows, and contribute to security incident response and audits.

Qualifications

• 3–6 years of IT security or security operations experience with hands-on controls.
• Experience with Windows Server, Microsoft 365, and Entra ID/Azure AD.
• Ability to write and maintain PowerShell scripts for automation.
• Knowledge of least privilege, RBAC, and secure baseline configuration.
• Experience with vulnerability scanning and incident response processes.
• Strong documentation and communication skills with non-technical stakeholders.

Responsibilities

• Design, implement, and maintain security controls for networks, servers, endpoints, and cloud services.
• Own the configuration, operation, and tuning of core security tools (endpoint protection, log collection/monitoring, vulnerability scanning).
• Collaborate with Network Administrators, Network Engineers, and Systems Administrators to enforce security baselines.
• Develop and maintain security standards, diagrams, and technical documentation.
• Monitor security alerts and logs and respond per runbooks.

Skills

Endpoint protection

Azure AD / Entra ID

PowerShell scripting

Vulnerability management

Security monitoring & SIEM

Firewall & VPN security

Education

Bachelor's degree in IT / Cybersecurity

Tools

SIEM tools

Endpoint protection platforms

Vulnerability scanners

Job description

CRG in Greensboro, NC is seeking a Security Engineer II to design, implement, and operate core security controls across our infrastructure and cloud platforms. You will own key security tooling and processes, including endpoint protection, logging and monitoring, vulnerability management, and secure configurations.

You will collaborate with Network, Systems, and IAM teams to maintain compliant, efficient operations, support IAM workflows, and contribute to security incident response and audits.