Senior Cloud Security Engineer — Lead Platform & Identity

KPA; Lafayette (CO); On-site; USD 110,000 - 130,000; Full time

Job summary

KPA is seeking a Senior Security Engineer to own security platforms, cloud security, identity, and automation. The role requires a hands-on engineer who can lead complex projects and collaborate with IT Operations and DevOps to improve KPA's security posture.

The successful candidate will manage vulnerability, endpoint, and identity security; lead incident response; and drive compliance with SOC 2 and NIST CSF, while securing Azure, AWS, and M365 environments.

Qualifications

• 5+ years in security engineering or related senior role.
• Experience with Azure, AWS, Microsoft 365 and identity security.
• Familiarity with CI/CD, Kubernetes, container security, and DevSecOps.
• Scripting/automation in PowerShell or Python; REST APIs.
• Experience with SOC 2 and NIST CSF or equivalent.
• Certifications such as CISSP, CCSP, AWS Security are preferred.
• Bachelor’s degree in Computer Science, IT or Cybersecurity or equivalent experience.

Responsibilities

• Own enterprise security platforms and related technologies (CrowdStrike, Rapid7, Cisco, KnowBe4).
• Lead vulnerability management, endpoint security, identity security, and privileged access.
• Own security incident response, investigations, containment and post-incident reviews.
• Maintain SOC 2 controls, security audits, and compliance initiatives.
• Manage cloud/network security and secure cloud connectivity across Azure, AWS, M365.
• Strengthen identity governance across Entra ID, AWS Identity Center, Auth0, SSO, PIM.
• Integrate security into CI/CD pipelines and IaC, containers, Kubernetes, and cloud workloads.
• Improve cloud security posture management, logging, detection, and remediation.
• Manage email security (Microsoft 365, SendGrid, SES) and phishing protection.
• Build security automation using PowerShell, Python, Graph, REST, and AI-assisted tooling.
• Oversee vendor risk management and third-party security assessments.
• Develop and enforce security policies, standards and procedures.
• Support AI security and governance initiatives and security architecture reviews.

Skills

Security engineering

Cloud security

Identity security

Vulnerability management

CI/CD security

Scripting (PowerShell, Python)

DevSecOps

SOC 2/NIST CSF

Zero trust

Communication & leadership

Education

Bachelor's degree in Computer Science / Cybersecurity

Tools

CrowdStrike

Rapid7 InsightIDR

Rapid7 InsightVM

Rapid7 InsightAppSec

Cisco Umbrella

Cisco Duo

KnowBe4

Cisco Meraki

Microsoft Entra ID

AWS Identity Center

Auth0

Snyk

Job description

KPA is seeking a Senior Security Engineer to own security platforms, cloud security, identity, and automation. The role requires a hands-on engineer who can lead complex projects and collaborate with IT Operations and DevOps to improve KPA's security posture.

The successful candidate will manage vulnerability, endpoint, and identity security; lead incident response; and drive compliance with SOC 2 and NIST CSF, while securing Azure, AWS, and M365 environments.