Senior Security Engineer (Contract)

Worldwide Clinical Trials; Charlotte (NC); Remote; USD 122,000 - 241,000; Full time

Job summary

Worldwide Clinical Trials seeks a Senior Security Engineer to strengthen security foundations across identity, endpoint, cloud, and network environments. You will own Azure Key Vault governance, implement Entra ID-based Privileged Access, and drive automation and secure configurations at scale.

You will partner with Security Operations and IAM teams to reduce risk, define standards, and shape operational readiness. This role is remote for US-based candidates with global collaboration.

Qualifications

• Bachelor’s degree in Computer Science, IT, or related field; 5+ years enterprise security engineering.
• Hands-on experience with Zscaler ZIA, ZPA, ZDX; Zscaler certs desired.
• Strong knowledge of cloud security, identity management, and Zero Trust.

Responsibilities

• Own and mature the enterprise secrets-management service in Azure Key Vault.
• Engineer Azure privileged-access controls across RBAC, PIM, and access reviews.
• Establish and improve Azure security baselines across tenants, subscriptions, and workloads.
• Strengthen endpoint security through application control and PowerShell hardening.
• Develop Microsoft Sentinel detections and automation for privileged-access and high-risk events.
• Advance automation and Infrastructure-as-Code practices for secure config.
• Provide design reviews, production-readiness, and runbook documentation.

Skills

Cloud security

Zero Trust

Identity management

Active Directory

PowerShell security

Automation

Code signing

English proficiency

Education

Bachelor’s degree in CS/IT or related field

5+ years enterprise security engineering

Tools

Zscaler ZIA

Zscaler ZPA

Zscaler ZDX

Azure Key Vault

Microsoft Sentinel

Job description

Who we are

We’re a global, midsize CRO that pushes boundaries, innovates and invents because the path to a cure for the world’s most persistent diseases is not paved by those who play it safe. It is built by those who take pioneering, creative approaches and implement them with quality and excellence.We are Worldwide Clinical Trials, and we are a global team of over 3,500+ experts, bright thinkers, dreamers and doers and, together, we are changing the way the world experiences CROs – in the best possible way.Our mission is to work with passion and purpose every day to improve lives and we are looking for others who value this same pursuit.

Why Worldwide

We believe everyone plays an important role in making a world of difference for patients and their caregivers. From our hands‑on, accessible leaders, to our cohesive and supportive teams, we are committed to enabling professionals from all backgrounds and experiences to succeed. We prioritize cultivating a diverse and inclusive environment that continues to promote collaboration and creativity. We are proud to be a workplace where people thrive by being themselves and are inspired to do their best work every day. Join us!

Make an Impact as a Senior Security Engineer at Worldwide

Help strengthen the security foundations that protect Worldwide’s identity, endpoint, cloud, and network environments. As a Senior Security Engineer, you’ll take ownership of critical Microsoft and Azure security capabilities, with a particular focus on Microsoft Entra ID and privileged access, Azure Key Vault, endpoint application control, and Microsoft Sentinel.

As a senior individual contributor and subject‑matter expert, you’ll engineer security services designed to operate reliably at scale as Worldwide advances its Zero Trust, cloud‑native model. You’ll partner closely with Security Operations, Identity and Access Management, endpoint engineering, application teams, and service owners to reduce risk and strengthen security across the environment.

Beyond building and operating these capabilities, you’ll help shape engineering standards, technical direction, automation practices, and operational readiness, creating secure foundations the wider team can confidently support for years to come.

Where You’ll Work

This is a remote role open to candidates based in US. You will collaborate with global teams across multiple time zones.

What You’ll Do

• Own and mature the enterprise secrets‑management service in Azure Key Vault, including provisioning, access governance, rotation, recovery, separation of duties, and lifecycle management.
• Engineer Azure privileged‑access controls across RBAC, PIM, restricted administration, approvals, and access reviews, aligning with Entra ID and Conditional Access practices to reduce escalation risk.
• Establish and continuously improve Azure security baselines across tenants, subscriptions, and workloads, covering identity, logging and monitoring, network segmentation, encryption, and security posture.
• Strengthen endpoint security through application control, PowerShell hardening, exception management, and ongoing tuning in partnership with endpoint engineering and application owners.
• Develop Microsoft Sentinel detections and automation for privileged‑access, Active Directory, and high‑risk Azure events, expanding analytics and playbooks alongside Security Operations response processes.
• Advance automation and Infrastructure‑as‑Code practices that make secure, policy‑based configuration the default and reduce manual effort.
• Provide technical direction through design reviews, production‑readiness and rollback standards, documentation, and operational runbooks that enable reliable ongoing support.
• Perform other duties as assigned in line with the scope and level of the role.

What You’ll Bring

• Bachelor’s degree in Computer Science, Information Technology, or a related field with at least 5 years of enterprise security engineering experience, including at least 2 years directly supporting Zscaler solutions; or a high school diploma/GED with at least 7 years of enterprise security engineering experience, including at least 2 years directly supporting Zscaler solutions.
• Hands‑on production experience with Zscaler ZIA, ZPA, and ZDX, with Zscaler certifications such as ZCCA‑IA, ZCCA‑PA, or ZCCP highly desirable.
• Strong knowledge of cloud security, identity management, Zero Trust principles, and Active Directory.
• Depth in endpoint application control, PowerShell security, and code signing.
• Experience automating security operations and policy management using APIs.
• Experience in a GxP‑regulated, clinical research, healthcare, or pharmaceutical environment.
• Microsoft AZ‑500 or SC‑300 certification, with CISSP or CCSP considered a plus.
• Proficiency in English.

The salary range for this position is annually (For hourly paid positions, the stated salary range reflects hourly rates):

United States of America - $121,500.00 - $240,500.00

The salary range provided is intended to give candidates an understanding of potential earnings. Compensation will fall within the provided range, and it not a guarantee of exact salary. The final salary will be determined based on relevant experience, performance, education, and internal equity.

In addition to base salary, we offer a competitive benefits package depending on location. We ensure pay equity and transparency and comply with all applicable labor laws. Salary information will be discussed during the interview process, and we encourage candidates to inquire about compensation at any stage.

We love knowing that someone is going to have a better life because of the work we do.

Discover a world of difference at Worldwide!

For more information on Worldwide, visit

or connect with us on LinkedIn.