Senior Cloud Security Engineer (IAM & SecOps)

Linuxconfig; Lafayette (CO); On-site; USD 110,000 - 130,000; Full time

Job summary

KPA is seeking a Senior Security Engineer to act as the senior technical counterpart to the Director of Security & Technology. The role owns security platforms, cloud security, identity, automation, and technical security initiatives.

You will lead complex security projects, partner with IT Operations and DevOps, and continuously improve KPA's security posture across Azure, AWS, and on-prem workloads.

Qualifications

• 5+ years of security engineering experience in cloud/infra environments.
• Strong knowledge of identity, endpoint security, vulnerability management and zero trust.
• Experience securing Azure, AWS, M365, Entra ID; Windows and Linux familiarity.
• Familiar with CI/CD, containers, Kubernetes, and DevSecOps practices.
• Automation skills with PowerShell, Python, REST APIs, or similar.

Responsibilities

• Own enterprise security platforms and related technologies (CrowdStrike, Rapid7, Cisco suite).
• Lead vulnerability management, endpoint security, identity security, and privileged access initiatives.
• Lead incident response, containment, and post-incident reviews.
• Oversee SOC 2 controls and security audit requirements.
• Secure cloud connectivity and cloud-native workloads across Azure/AWS/M365.

Skills

Cloud security

Identity security

Vulnerability management

Incident response

Zero trust

Education

Bachelor's degree in Computer Science or Cybersecurity

Tools

CrowdStrike

Rapid7 Suite

Cisco Umbrella

Cisco Duo

KnowBe4

Azure

AWS

Microsoft 365

Entra ID / Active Directory

Auth0

SAST/DAST / Snyk

CI/CD integration

Kubernetes

Job description

KPA is seeking a Senior Security Engineer to act as the senior technical counterpart to the Director of Security & Technology. The role owns security platforms, cloud security, identity, automation, and technical security initiatives.

You will lead complex security projects, partner with IT Operations and DevOps, and continuously improve KPA's security posture across Azure, AWS, and on-prem workloads.