Senior Security Engineer: Azure & Zero-Trust Security Lead

Cyberjobs; Durham, Northern (NC, KY); Hybrid; USD 122,000 - 241,000; Full time

Job summary

Worldwide Clinical Trials is seeking a Senior Security Engineer to own and mature the Microsoft and Azure security capabilities that protect our identity, endpoint, cloud, and network environments. The primary focus is on Microsoft Entra ID and privileged access, Azure Key Vault, endpoint application control, and Microsoft Sentinel.

As we advance our Zero Trust, cloud-native model, this role will engineer security services that need to be built well once and operated reliably for years.

Qualifications

• Experience with ZIA, ZPA, ZDX in production environments.
• GxP-regulated, clinical-research or pharmaceutical experience.
• Microsoft AZ-500 or SC-300; CISSP/CCSP a plus.
• Bachelor’s degree with 5+ years in enterprise security engineering.
• Strong cloud security, identity management and Zero Trust knowledge.

Responsibilities

• Manage Azure Key Vault provisioning, access governance, rotation and recovery.
• End-to-end Azure privileged-access controls: RBAC, PIM, reviews and approvals.
• Maintain Azure security baselines across tenants and workloads.
• Endpoint-control and PowerShell-hardening in collaboration with engineers.
• Develop Microsoft Sentinel detections and automation for high-risk events.
• Adopt IaC practices for secure, policy-based configuration.
• Provide technical direction, design reviews and runbooks.
• Perform other duties as assigned.

Skills

Endpoint security

PowerShell security

Code signing

Active Directory

Zscaler (ZIA/ZPA/ZDX)

GxP/regulatory environment

Azure security

Education

Bachelor’s degree in CS/IT or related field

High School diploma + 7 years in security

Tools

Azure Key Vault

Microsoft Sentinel

Entra ID

PowerShell

Job description

Worldwide Clinical Trials is seeking a Senior Security Engineer to own and mature the Microsoft and Azure security capabilities that protect our identity, endpoint, cloud, and network environments. The primary focus is on Microsoft Entra ID and privileged access, Azure Key Vault, endpoint application control, and Microsoft Sentinel.

As we advance our Zero Trust, cloud-native model, this role will engineer security services that need to be built well once and operated reliably for years.