Senior Security Engineer

Curate Partners; Boston (MA); On-site; USD 120,000 - 160,000; Full time

Job summary

Curate Partners is seeking an experienced Cyber Security Engineer to serve as a Commonwealth Senior Security Engineering Consultant. You will collaborate with Information Security teams, Helpdesk and business units to design and adopt secure solutions across the organization.

Responsibilities include hands-on Zscaler engineering, IAM/IGA support, data security governance, and incident response participation. Strong communication and cross-functional coordination are essential for success.

Qualifications

• Bachelor’s degree in information systems or related discipline.
• 5+ years of related work experience in a similar position.
• Understanding of business process design and identity management.

Responsibilities

• Provide hands-on Zscaler engineering and operational support for Zscaler Internet Access and Private Access.
• Troubleshoot Zscaler connectivity, authentication, application access, traffic inspection and user access issues.
• Review Zscaler architecture, document current state and identify gaps.
• Support IAM/IGA, access reviews, identity lifecycle, RBAC, SSO, MFA, and PAM initiatives.
• Support data security technologies including data discovery, classification, DLP, and access governance.
• Coordinate implementations, enhancements, testing, and cross-functional teams.
• Support security operations, audit requirements, control testing, metrics, and remediation.
• Participate in security reviews and incident response activities

Skills

Cybersecurity engineering

Requirements gathering

Documentation

Zscaler implementation

Security architecture

Cloud IAM

Stakeholder coordination

Automation opportunities

Incident response coordination

Security operations

Education

Bachelor’s degree in information systems

Tools

Active Directory

Azure AD

ServiceNow

Cloud platforms (AWS/Azure)

Job description

Are you an experienced Cyber Security Engineer with strong security knowledge and technical

expertise? As a Commonwealth Senior Security Engineering Consultant, you will play a crucial role in ensuring the security and integrity of our organization's information security systems. You will work collaboratively with the Information Security teams, Helpdesk and business departments to ensure that solutions and services are designed and adopted effectively.

Key Responsibilities

• Provide hands-on Zscaler engineering and operational support, across Zscaler Internet Access and Private Access and related Zero Trust capabilities.
• Troubleshoot Zscaler connectivity, authentication, application access, traffic inspection and user access issues.
• Review the existing Zscaler architecture and configuration, document current state and identify configuration, resiliency and operational gaps.
• Support IAM/IGA, access reviews, identity lifecycle, RBAC, SSO, MFA, and PAM initiatives.
• Support data security technologies, including data discovery, classification, DLP, and access governance.
• Support endpoint and mobile security, including MDM and device compliance.
• Gather and document business, security, functional and technical requirements.
• Create process flows, architecture documents, SOPs, runbooks and implementation documentation.
• Assess existing processes and identify opportunities for automation.
• Coordinate implementations, enhancements, testing, and cross-functional teams.
• Support security operations, audit requirements, control testing, metrics, and remediation activities.
• Participate in security reviews and incident response activities

Core Strengths

• Strong cybersecurity engineering and problem-solving capabilities
• Strong business analysis, requirements gathering, and documentation skills.
• Experience in Zscaler Zero Trust implementation and operational support
• Ability to work across multiple security technologies and initiatives.
• Strong stakeholder, vendor, and project coordination skills.
• Ability to independently drive initiatives from requirements through implementation.
• Strong understanding of security architecture, risk, and regulatory requirements
• Experience with Active Directory, Azure AD, ServiceNow and Cloud Systems
• Strong understanding of Cloud Identities and Azure, AWS IAM/PIM solutions
• Ability to work on multiple projects simultaneously.

Additional Desirable Skills and Knowledge

• Bachelor's degree in information systems or related discipline, or equivalent training
• 5+ years of related work experience in a similar position
• Understanding of business process design, complex IT security integration and identity management.
• Understanding the best practices, control frameworks, and applicable existing and new legal/regulatory requirements (SEC S-P Rule, FINRA cybersecurity recommendations, data privacy, and breach notification laws, ISO 27001, NIST CSF and SP 800-53, CIS, CSA CCM, PCI DSS, and others)
• Security-related certifications such as CIAM, Microsoft, OSCP, GCIH, CEH or similar certifications