Senior Security Engineer (Contract)

Worldwide Clinical Trials; Clayton (NC); Remote; USD 130,000 - 170,000; Full time

Job summary

Worldwide Clinical Trials is hiring a Senior Security Engineer to own and mature Azure security capabilities, with a focus on Entra ID, privileged access, and Azure Key Vault, in a remote role open to US-based candidates. You will collaborate with Security Operations, Identity and Access Management, endpoint engineering, and service owners to reduce risk, strengthen security, and automate security operations at scale.

This role emphasizes Zero Trust and cloud-native security foundations.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field; 5+ years of enterprise security engineering experience.
• Experience with cloud security, identity management, Zero Trust, and Active Directory.
• Depth in endpoint application control and PowerShell security.

Responsibilities

• Own and mature the enterprise secrets-management service in Azure Key Vault, including provisioning, access governance, rotation, recovery, separation of duties, and lifecycle management.
• Engineer Azure privileged-access controls across RBAC, PIM, restricted administration, approvals, and access reviews.
• Develop Microsoft Sentinel detections and automation for privileged-access, Active Directory, and high-risk Azure events.

Skills

Cloud security

Zero Trust

Active Directory

PowerShell

APIs automation

Education

Bachelor's degree in CS/IT or related field

Tools

Zscaler

Azure Key Vault

Microsoft Sentinel

Entra ID

Job description

It is built by those who take pioneering, creative approaches and implement them with quality and excellence. We are Worldwide Clinical Trials, and we are a global team of over 3,500+ experts, bright thinkers, dreamers and doers and, together, we are changing the way the world experiences CROs – in the best possible way.

Why Worldwide

Make an Impact as a Senior Security Engineer at Worldwide

Help strengthen the security foundations that protect Worldwide’s identity, endpoint, cloud, and network environments. As a Senior Security Engineer, you’ll take ownership of critical Microsoft and Azure security capabilities, with a particular focus on Microsoft Entra ID and privileged access, Azure Key Vault, endpoint application control, and Microsoft Sentinel.

As a senior individual contributor and subject‑matter expert, you’ll engineer security services designed to operate reliably at scale as Worldwide advances its Zero Trust, cloud‑native model. You’ll partner closely with Security Operations, Identity and Access Management, endpoint engineering, application teams, and service owners to reduce risk and strengthen security across the environment.

Beyond building and operating these capabilities, you’ll help shape engineering standards, technical direction, automation practices, and operational readiness, creating secure foundations the wider team can confidently support for years to come.

This is a remote role open to candidates based in US.

Own and mature the enterprise secrets‑management service in Azure Key Vault, including provisioning, access governance, rotation, recovery, separation of duties, and lifecycle management.

Engineer Azure privileged‑access controls across RBAC, PIM, restricted administration, approvals, and access reviews, aligning with Entra ID and Conditional Access practices to reduce escalation risk.

Establish and continuously improve Azure security baselines across tenants, subscriptions, and workloads, covering identity, logging and monitoring, network segmentation, encryption, and security posture.

Strengthen endpoint security through application control, PowerShell hardening, exception management, and ongoing tuning in partnership with endpoint engineering and application owners.

Develop Microsoft Sentinel detections and automation for privileged‑access, Active Directory, and high‑risk Azure events, expanding analytics and playbooks alongside Security Operations response processes.

Advance automation and Infrastructure‑as‑Code practices that make secure, policy‑based configuration the default and reduce manual effort.

Requirements

• Bachelor’s degree in Computer Science, Information Technology, or a related field with at least 5 years of enterprise security engineering experience, including at least 2 years directly supporting Zscaler solutions; or a high school diploma/GED with at least 7 years of enterprise security engineering experience, including at least 2 years directly supporting Zscaler solutions.
• Strong knowledge of cloud security, identity management, Zero Trust principles, and Active Directory.
• Depth in endpoint application control, PowerShell security, and code signing.
• Experience automating security operations and policy management using APIs.
• Experience in a GxP‑regulated, clinical research, healthcare, or pharmaceutical environment.
• Microsoft AZ‑500 or SC‑300 certification, with CISSP or CCSP considered a plus.
• Proficiency in English.

Salary and Benefits

At Worldwide Clinical Trials, we are committed to fostering an inclusive and equitable workplace by providing transparent compensation.

The salary range for this position is annually (For hourly paid positions, the stated salary range reflects hourly rates).