Senior Cloud & Identity Security Engineer

KPA; Lafayette (CO); On-site; USD 110,000 - 150,000; Full time

Job summary

KPA is seeking a Senior Information Security Engineer to own security platforms, cloud security, identity, and automation. The role partners with IT Operations and DevOps to continuously improve KPA's security posture and lead complex security projects.

Ideal candidates bring hands-on cloud/infrastructure security experience, strong collaboration skills, and a track record of driving security improvements across Azure, AWS, and Microsoft 365 environments.

Qualifications

• 5+ years of experience in security engineering, cloud security, or related senior role.
• Strong knowledge of identity security, endpoint security, vulnerability management, and zero trust.
• Experience securing Azure, AWS, Microsoft 365 and Entra ID.
• Familiarity with CI/CD, Kubernetes, container security, and DevSecOps practices.
• Scripting/automation using PowerShell or Python and REST APIs.
• Experience with SOC 2 & NIST CSF or equivalent security/compliance frameworks.
• Bachelor’s degree or equivalent experience; professional certs preferred.

Responsibilities

• Own security platforms and tech initiatives across cloud and on‑prem environments.
• Lead vulnerability management, endpoint security, identity security, and privileged access.
• Lead incident response, investigations, containment, and post‑incident reviews.
• Manage SOC 2 controls, audits, and technical compliance initiatives.
• Secure cloud connectivity and cloud-native workloads with best practices.
• Automate security using PowerShell, Python, REST APIs, and AI-assisted tooling.
• Integrate security into CI/CD, IaC, containers, and Kubernetes pipelines.
• Oversee vendor risk management and security awareness programs.

Skills

Identity security

Endpoint security

Vulnerability management

Zero trust

Cloud security

CI/CD security

Scripting (PowerShell/Python)

Incident response

Security governance

Education

Bachelor's degree in Computer Science, IT or Cybersecurity

CompTIA Security+

CISSP

CCSP

AWS Certified Security

Tools

CrowdStrike

Rapid7

Cisco Umbrella

Cisco Duo

KnowBe4

Azure

AWS

Microsoft Entra ID

Auth0

Snyk

Job description

KPA is seeking a Senior Information Security Engineer to own security platforms, cloud security, identity, and automation. The role partners with IT Operations and DevOps to continuously improve KPA's security posture and lead complex security projects.

Ideal candidates bring hands-on cloud/infrastructure security experience, strong collaboration skills, and a track record of driving security improvements across Azure, AWS, and Microsoft 365 environments.