information security manager identity remote

LPL Financial Global Capability Center

<div><p><b>Where Ambition Meets Innovation</b></p><p><br>
At LPL&rsquo;s Global Capability Center, you'll find a collaborative culture where your voice matters, integrity guides every decision, and technology fuels progress. Your skills, talents, and ideas will redefine what's possible. LPL's success reflects its exceptional employees, who together pursue one noble purpose: empowering financial advisors to deliver personalized advice for all who need it. We&rsquo;re proud to be expanding and reaching new heights in Hyderabad.</p><p><br>
Join us as we create something extraordinary together.</p><p></p><h2 class="jobSectionHeader"><b>
Job Overview:</b></h2><p>
The End User Computing (EUC) Architect is a senior technical leader responsible for the strategic design, governance, and evolution of the organization's end user technology ecosystem. This role serves as the primary subject matter expert for the Microsoft 365 platform and related productivity, collaboration, and security services &mdash; driving adoption, standardization, and innovation across the enterprise.</p><p>
The EUC Architect partners closely with business stakeholders, IT operations teams, security, and enterprise architecture to ensure the end user environment is modern, resilient, and aligned with organizational objectives. This individual operates at both the strategic and hands-on technical level, owning architectural decisions from concept through implementation.</p><p></p><h2 class="jobSectionHeader"><b>
Responsibilities:</b></h2><ul><li><p>
Own the end-to-end architectural vision and roadmap for the Microsoft 365 tenant, including Exchange Online, SharePoint Online, OneDrive for Business, Microsoft Teams, and the broader M365 suite</p></li><li><p>
Define and enforce tenant configuration standards, governance policies, and design patterns across all M365 workloads</p></li><li><p>
Lead architectural decisions for Microsoft Copilot adoption, including readiness assessments, data governance prerequisites, and rollout strategy</p></li><li><p>
Design and maintain identity and access architecture in partnership with the IAM team, including Entra ID (Azure AD) Conditional Access, SSPR, MFA, and hybrid identity models</p></li><li><p>
Architect Microsoft Intune and Endpoint Manager solutions for device management, compliance policies, application delivery, and Autopilot provisioning</p></li><li><p>
Establish architecture for Microsoft Purview (Information Protection, Data Loss Prevention, eDiscovery, Compliance Manager) and advise on data governance posture</p></li><li><p>
Drive the strategy for Microsoft Viva, Power Platform (Power Apps, Power Automate, Power BI), and low-code/no-code citizen development governance</p></li></ul><p></p><h2 class="jobSectionHeader"><b>
End User Computing Strategy</b></h2><ul><li><p>
Define the long-term EUC strategy spanning physical endpoints (Windows, macOS), virtual desktop infrastructure (Azure Virtual Desktop, Windows 365), and mobile platforms (iOS, Android) via Microsoft Intune</p></li><li><p>
Lead endpoint lifecycle architecture including OS imaging, patching strategy, hardware standards, and Windows 11 migration planning</p></li><li><p>
Architect solutions for remote and hybrid work scenarios, ensuring performance, security, and user experience parity regardless of location</p></li><li><p>
Evaluate emerging Microsoft technologies and communicate business value and architectural impact to leadership</p></li></ul><p></p><h2 class="jobSectionHeader"><b>
Governance &amp; Standards</b></h2><ul><li><p>
Develop and maintain EUC architecture standards, reference architectures, and design documentation</p></li><li><p>
Establish M365 governance frameworks including tenant policies, external sharing controls, Teams provisioning governance, and data residency requirements</p></li><li><p>
Define and socialize naming conventions, RBAC models, licensing optimization strategies, and change management processes</p></li><li><p>
Conduct architecture reviews for EUC-impacting projects and provide design authority sign-off</p></li></ul><p></p><h2 class="jobSectionHeader"><b>
Security &amp; Compliance</b></h2><ul><li><p>
Partner with the Information Security team to integrate Zero Trust principles throughout the EUC environment</p></li><li><p>
Architect solutions leveraging Microsoft Defender for Endpoint, Microsoft Defender for Office 365, and the broader Microsoft Defender XDR suite</p></li><li><p>
Ensure EUC architecture aligns with regulatory and compliance requirements (e.g., SOX, HIPAA, FINRA, GDPR) as applicable to the business</p></li></ul><p></p><h2 class="jobSectionHeader"><b>
Stakeholder Engagement &amp; Leadership</b></h2><ul><li><p>
Act as a trusted advisor to business and IT leadership on EUC and M365 capabilities, roadmap, and investment priorities</p></li><li><p>
Collaborate with enterprise architecture, infrastructure, networking, and application teams to ensure integrated, cohesive solutions</p></li><li><p>
Mentor and provide technical guidance to EUC engineers and administrators</p></li><li><p>
Represent EUC architecture in governance forums, architecture review boards, and vendor engagements</p></li><li><p>
Partner with Microsoft account teams and FastTrack resources to leverage available programs and stay ahead of platform changes</p></li></ul><p></p><h2 class="jobSectionHeader"><b>
What are we looking for?</b></h2><p>
We&rsquo;re looking for strong collaborators who deliver exceptional client experiences and thrive in fast-paced, team-oriented environments. Our ideal candidates <b>pursue greatness</b>, <b>act with integrity</b>, and are <b>driven to help our clients succeed</b>. We value those who embrace creativity, continuous improvement, and contribute to a culture where we <b>win together</b> and <b>create and share joy</b> in our work</p><p></p><h2 class="jobSectionHeader"><b>
Requirements:</b></h2><ul><li><p>
10+ years of progressive IT experience, with at least 5 years in an architecture or senior engineering role focused on end user computing or Microsoft 365.</p></li><li><p>
Deep, hands-on expertise across the core Microsoft 365 workloads:</p><ul><li><p><b>
Collaboration &amp; Productivity:</b> Microsoft Teams, Exchange Online, SharePoint Online, OneDrive for Business, Viva</p></li><li><p><b>
Identity &amp; Access:</b> Microsoft Entra ID (Azure AD), Conditional Access, MFA, Privileged Identity Management</p></li><li><p><b>
Device Management:</b> Microsoft Intune, Endpoint Configuration Manager (MECM/SCCM), Windows Autopilot</p></li><li><p><b>
Security:</b> Microsoft Defender XDR, Defender for Endpoint, Defender for Office 365</p></li><li><p><b>
Compliance:</b> Microsoft Purview, Information Protection, DLP, eDiscovery</p></li><li><p><b>
Automation &amp; Platform:</b> Power Platform, Microsoft Graph API</p></li></ul></li><li><p>
Demonstrated experience designing and implementing M365 tenant architecture in large, complex enterprise environments</p></li><li><p>
Strong understanding of hybrid identity models, Azure AD Connect, and cloud-only identity scenarios</p></li><li><p>
Experience with virtual desktop technologies (Azure Virtual Desktop, Windows 365, or equivalent)</p></li><li><p>
Familiarity with ITSM platforms and their integration with M365 tooling (e.g., ServiceNow)</p></li><li><p>
Strong documentation skills with ability to produce architecture diagrams, reference designs, and decision records</p></li></ul><p></p><h2 class="jobSectionHeader"><b>
Core Competencies:</b></h2><ul><li><p><b>
Technical Depth: </b>Expert-level command of M365 platform capabilities, limitations, and integration patterns</p></li><li><p><b>
Strategic Vision: </b>Ability to translate business requirements into a coherent, future-state EUC architecture</p></li><li><p><b>
Communication: </b>Clear and compelling communicator to both technical and executive audiences</p></li><li><p><b>
Problem Solving: </b>Structured thinker who can diagnose complex, cross-domain issues and drive resolution</p></li><li><p><b>
Collaboration: </b>Builds trust across teams; effective in cross-functional and matrixed environments</p></li><li><p><b>
Governance Mindset: </b>Proactively establishes guardrails and standards without creating unnecessary friction</p></li></ul><p></p><h2 class="jobSectionHeader"><b>
Preferences:</b></h2><ul><li><p>
Microsoft certifications, including one or more of:</p><ul><li><p>
Microsoft 365 Certified: Enterprise Administrator Expert</p></li><li><p>
Microsoft Certified: Identity and Access Administrator Associate</p></li><li><p>
Microsoft Certified: Information Protection and Compliance Administrator Associate</p></li><li><p>
Microsoft Certified: Endpoint Administrator Associate</p></li><li><p>
Microsoft Certified: Azure Solutions Architect Expert</p></li></ul></li><li><p>
Experience with Microsoft Copilot for M365 deployment planning and AI-readiness assessments</p></li><li><p>
Familiarity with ITIL frameworks and their application in enterprise EUC environments</p></li><li><p>
Experience in regulated industries (financial services, healthcare, etc.)</p></li><li><p>
Background in enterprise architecture frameworks (TOGAF, Zachman)</p></li></ul><p>
LPL Global Business Services, LLP - PRIVACY POLICY</p></div>

M365 End User Computing Architect

General Dynamics Information Technology

<div></div><div><div><div>Clearance Level
<div>Secret</div>
</div><div></div><div>Category
<div>IT Infrastructure and Operations</div>
</div><div></div><div>Location
<div>Fort Meade, Maryland</div>
<i>(</i><i>Hybrid Workplace</i><i>)</i>
</div><div>
</div></div><div><div>Key Skills For Success
</div><div><p>Cloud Based Services</p>
</div><div><p>DISA STIG</p>
</div><div><p>Microsoft Windows</p>
</div><div><p>Vulnerability Mitigation</p>
</div><div><p>Windows Azure Cloud</p>
</div></div><div></div><div><div><div><div><div><div>
</div></div></div><div><h5 class="jobSectionHeader"><b>REQ#:</b><b> </b><b>RQ227278</b></h5>
<h5 class="jobSectionHeader"><b>Public Trust:</b><b> </b><b>None</b></h5>
<h5 class="jobSectionHeader"><b>Requisition Type:</b><b> </b><b>Regular</b></h5>
<h5 class="jobSectionHeader"><b>Your Impact</b></h5>
<p>Own your opportunity to support our nation's defense. Make an impact by connecting and securing critical operations across the globe, keeping our country safe and secure.</p>
<h2 class="jobSectionHeader"><b>Job Description</b></h2>
<div><p>SYSTEMS ENGINEER PRINCIPAL</p>
<p></p><p>General Dynamics Information Technology (GDIT) is seeking a Systems Engineer Sr Principal with a strong cyber and vulnerability management background to support a mission-critical environment. This role will focus on end-to-end vulnerability management, including patching, STIG implementation, and sustainment of virtual machines, network devices, and containers in highly secure environments.</p>
<p></p><p>As a senior principal systems engineer, you will apply deep expertise in security configuration baselines, vulnerability assessment tooling, and remediation strategies to reduce risk and improve the security posture of enterprise systems.</p>
<p></p><p>This is hybrid position and requires regular on-site support and remote work.</p>
Responsibilities
<ul><li>Lead the design, implementation, and optimization of vulnerability management and patching strategies for virtualized infrastructures, network devices, and containerized workloads.</li>
<li>Interpret and implement DoD/DISA STIGs, CIS benchmarks, and other security baselines across operating systems, applications, networks, and container platforms.</li>
<li>Own the lifecycle of patch management (assessment, planning, testing, deployment, and verification) to ensure timely and compliant remediation of vulnerabilities.</li>
<li>Maintain and harden virtual machine environments (e.g., cloud-native VMs), ensuring availability, performance, and security.</li>
<li>Configure and maintain network devices (e.g., routers, switches, firewalls) in accordance with security policies, STIGs, and best practices.</li>
<li>Deploy and maintain container platforms (e.g., Docker, Kubernetes/OpenShift) with a focus on secure configuration, image scanning, and vulnerability remediation.</li>
<li>Integrate and leverage vulnerability scanning tools (e.g., Tenable, Qualys, Rapid7, ACAS) and configuration/compliance tools to identify, track, and remediate findings.</li>
<li>Collaborate with cross-functional teams (cybersecurity, network engineering, systems administration, DevSecOps) to ensure cohesive and secure designs and operations.</li>
<li>Participate in incident response and root cause analysis related to vulnerabilities, misconfigurations, and system security issues, driving corrective and preventive actions.</li>
<li>Ensure solutions meet applicable contractual, regulatory, and compliance requirements (e.g., DoD directives, RMF/ATO, NIST SP 800-53).</li>
</ul>Required Qualifications
<ul><li>Active DoD Security Clearance of SECRET, or higher</li>
<li>8+ years of relevant systems engineering experience, including work in secure or mission-critical environments.</li>
<li>Compliance with DoD 8570/8140 requirements (e.g., CCSP, Security+ CE, CISSP, Security X/CASP+, or equivalent baseline certification).</li>
<li>Demonstrated experience leading vulnerability management and patching activities across complex, multi-platform environments.</li>
<li>Experience with Microsoft Azure Cloud services such as virtual machines, storage, resource manager, etc.</li>
<li>Experience with implementing PKI and PIV standards, Active Directory or LDAP</li>
<li>Experience with Group Policy Objects and management</li>
<li>Hands-on experience implementing STIGs and security baselines for:
<ul><li>Operating systems (e.g., Windows Server, RHEL Linux, Ubuntu)</li>
<li>Network devices (e.g., Cisco, Juniper, firewalls)</li>
<li>Virtualization platforms and/or container platforms</li>
</ul></li><li>Experience maintaining and securing virtual machine infrastructures (e.g. cloud-based VMs).</li>
<li>Experience supporting network infrastructure including configuration, hardening, and troubleshooting of routers, switches, and firewalls.</li>
<li>Experience deploying and maintaining container-based environments (e.g., Docker, Kubernetes) with an emphasis on secure configuration and image management.</li>
<li>Expertise with vulnerability scanning and compliance tools (e.g., Tenable.sc/Nessus ACAS or similar), including interpreting results and driving remediation.</li>
<li>Proficiency with automation and scripting (e.g., Ansible, PowerShell, Python, Bash) for patching, configuration management, and reporting.</li>
<li>Strong understanding of networking fundamentals (TCP/IP, routing, witching, DNS, DHCP, VLANs, VPNs) and how they intersect with security best practices.</li>
<li>Solid understanding of cybersecurity principles, controls, and frameworks, such as NIST, RMF, and defense-in-depth strategies</li>
<li>Strong written and verbal communication skills, including the ability to translate technical risk and remediation plans into language stakeholders understand.</li>
<li>Demonstrated ability to work collaboratively across engineering, cybersecurity, operations, and customer teams.</li>
</ul>Desired Qualifications
<ul><li>Bachelor&rsquo;s degree in Computer Science, Information Systems, Engineering, Cybersecurity, or related field;</li>
</ul><ul><li>Experience in Microsoft Azure Cloud security implementations</li>
</ul><ul><li>Familiarity with NIST 800-207 Zero Trust Architecture</li>
</ul><ul><li>Familiarity with NIST 800-144 Guidelines on Security and Privacy in Public Cloud Computing</li>
</ul></div></div><div><div><div><h3 class="jobSectionHeader"><b>Work Requirements</b></h3>
</div></div><div></div><div><div>Years of Experience
<p>8 + years of related experience</p>
<ul><li>may vary based on technical training, certification(s), <b><i>or</i></b> degree</li></ul>
</div><div></div><div>Certification
<p>CompTIA SecurityX CE | CompTIA - CompTIA</p>
<p>Certified Information Systems Security Professional (CISSP) | International Information System Security Certification Consortium (ISC2) - International Information System Security Certification Consortium (ISC2)</p>
<p>Certified Cloud Security Professional (CCSP) | International Information System Security Certification Consortium (ISC2) - International Information System Security Certification Consortium (ISC2)</p>
<p>CompTIA Security+ CE | CompTIA - CompTIA</p>
</div><div></div><div>Travel Required
<p>25-50%</p>
</div><div></div><div>Citizenship
<p>U.S. Citizenship Required</p>
</div></div></div></div><div><h3 class="jobSectionHeader"><b>Salary and Benefit Information</b></h3>
<p>The likely salary range for this position is $133,450 - $180,550. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.
</p>
<h3 class="jobSectionHeader"><b>Our Identity Verification Process</b></h3>
<p>As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes.</p>
<h3 class="jobSectionHeader"><b>About Our Work</b></h3>
<div></div><p>We are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission-ready capabilities in AI, cloud, cyber and software development.</p>
<p>Join our Talent Community to stay up to date on our career opportunities and events at gdit.com/tc.</p>
<p><i>Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans</i></p></div></div></div></div>

System Engineer Sr Principal

Brookfield Properties

<div><p><b>Location
</b></p><p></p>US TN - Remote
<p></p><p><b>Job Description
</b></p><p></p><p>The Staff Security Engineer, Cloud &amp; AI Platform is a deeply technical, hands-on role responsible for making Brookfield Real Estate&rsquo;s cloud and AI platforms secure by design. You will lead security architecture and implementation across AWS, Infrastructure as Code, software delivery, internally developed applications, and AI/agent systems.</p>
<p></p><p>This is a builder role. You will threat-model a design, review the underlying Terraform and application code, implement the control, instrument it, and help teams adopt it without unnecessary friction. Security requirements become reusable modules, automated checks, secure defaults, and clear engineering guidance rather than documents and findings lists.</p>
<p></p><p>You will partner closely with Cloud Solutions, application engineering, AI engineering, Identity, CyberOps, and GRC/Privacy. Platform engineering continues to own general platform uptime, capacity, and deployment mechanics, and CyberOps continues to own alert triage; this role owns the architecture, controls, tooling, and assurance mechanisms that make those systems safe.</p>
<p></p><div><h1 class="jobSectionHeader"><b>Role &amp; Responsibilities:
</b></h1></div><p>Leadership &amp; Security Architecture</p>
<ul><li><p>Help define security architecture for the cloud and AI platforms: set direction, write specs, and steward secure-by-default patterns across teams</p>
</li><li><p>Define security engineering standards and paved roads, document important decisions, and communicate risk and trade-offs to engineering and business leadership</p>
</li><li><p>Review infrastructure and application designs for authorization, network, data-protection, secrets, and tenant-isolation risks</p>
</li><li><p>Mentor engineers and raise the organization&rsquo;s ability to make sound security decisions independently</p>
</li><li><p>Partner with Cloud Solutions, application engineering, AI engineering, Identity, CyberOps, and GRC/Privacy to prioritize work and drive adoption</p>
</li></ul><p>Cloud &amp; Identity Security</p>
<ul><li><p>Own and evolve security architecture for a multi-account AWS organization &mdash; account boundaries, service control policies, IAM Identity Center, delegated security services, KMS, VPC controls, and WAF</p>
</li><li><p>Design least-privilege human and workload access across AWS, Okta, GitHub Actions, and Infrastructure as Code platforms using federation and short-lived credentials</p>
</li><li><p>Build and maintain reusable security controls in Terraform or OpenTofu, with safe rollout, testing, monitoring, and recovery patterns</p>
</li><li><p>Strengthen centralized logging and evidence &mdash; CloudTrail, Config, GuardDuty, Security Hub, Macie, and CloudWatch &mdash; and keep guardrails current as the environment grows</p>
</li></ul><p>Secure Software Delivery</p>
<ul><li><p>Establish secure GitHub Actions and runner patterns, including OIDC trust, environment separation, workflow protection, action pinning, artifact integrity, and least-privilege deployment roles</p>
</li><li><p>Integrate practical security checks into developer workflows &mdash; secrets detection, dependency and container scanning, SBOMs, Infrastructure as Code analysis, code scanning, and risk-based release gates</p>
</li><li><p>Support vulnerability management for internally developed software, from detection and prioritization through remediation evidence and exception handling. Partner with the Vulnerability Manager to establish prioritization and reduce false positives</p>
</li><li><p>Improve controls with engineers rather than around them, avoiding noisy or easily bypassed gates</p>
</li></ul><p>Application &amp; AI Security</p>
<ul><li><p>Lead threat modeling and security design reviews for web applications, APIs, data ingestion, authentication and authorization flows, and agentic systems</p>
</li><li><p>Define secure patterns for Amazon Bedrock and other model platforms, including model access, guardrail lifecycle, invocation logging, usage attribution, and sensitive-data controls</p>
</li><li><p>Harden agent tools, MCP servers, gateways, sandboxes, and code-execution environments against prompt injection, confused-deputy attacks, excessive agency, secret disclosure, data exfiltration, and cross-tenant access</p>
</li><li><p>Build repeatable security evaluations and adversarial tests for AI-enabled features and connect findings to engineering remediation</p>
</li></ul><p>Detection, Response &amp; Assurance</p>
<ul><li><p>Translate cloud and application telemetry into actionable detections, runbooks, ownership, and escalation paths in partnership with CyberOps</p>
</li><li><p>Lead technical response and root-cause remediation for cloud, identity, software supply chain, and AI security incidents</p>
</li><li><p>Establish severity and ownership standards for cloud findings, software vulnerabilities, and AI security issues, with clear remediation expectations</p>
</li><li><p>Produce the control evidence GRC and Privacy need, without turning engineering work into manual reporting</p>
</li></ul><p></p><div><h1 class="jobSectionHeader"><b>Your Qualifications:
</b></h1></div><ul><li><p>8+ years Experience</p>
</li><li><p>Demonstrated senior or Staff-level ownership of production security or platform systems, including architecture decisions others build on</p>
</li><li><p>Deep AWS security experience across IAM, multi-account or AWS Organizations environments, logging and detection, KMS, networking, and service-to-service authorization</p>
</li><li><p>Strong Terraform or OpenTofu skills, including modular design, remote execution, policy controls, and safe state-aware changes</p>
</li><li><p>Experience securing CI/CD systems such as GitHub Actions, including OIDC federation, runner trust boundaries, secrets, artifacts, and deployment permissions</p>
</li><li><p>Working knowledge of application security fundamentals: threat modeling, authentication and authorization, secure API design, secrets handling, dependency risk, and vulnerability remediation</p>
</li><li><p>Ability to read and write production-quality automation or application code in Python, Go, Ruby, or a comparable language</p>
</li><li><p>Demonstrated ability to influence teams you do not manage, make pragmatic risk decisions, and turn ambiguous security needs into implemented controls</p>
</li></ul><p>Nice to Have</p>
<ul><li><p>Experience with Amazon Bedrock, AgentCore, MCP, LLM gateways, AI guardrails, or production agentic systems</p>
</li><li><p>Container and orchestration security &mdash; ECS/Fargate or EKS, image supply chains, runtime isolation, and egress control</p>
</li><li><p>Identity platform depth: IAM Identity Center, Okta, Delinea, SAML, OIDC, OAuth, SCIM, ABAC, and enterprise entitlement systems</p>
</li><li><p>Experience with Scalr, Terraform Cloud, or another remote Infrastructure as Code platform</p>
</li><li><p>Familiarity with CrowdStrike Falcon Cloud Security, Datadog, CloudWatch, or comparable security and observability tooling</p>
</li><li><p>Data platform and sensitive-data controls involving S3, Snowflake, PostgreSQL/Aurora, or vendor data ingestion</p>
</li><li><p>AI threat modeling, red teaming, or security evaluation experience</p>
</li></ul><p></p><div><h1 class="jobSectionHeader"><b>Your Career @ Brookfield:
</b></h1></div><p>At Brookfield, your career progression is important to us. As a successful employee, you will have the opportunity to grow within your team, department, and across the Brookfield organization. Our leadership teams are dedicated to the accomplishments of their employees. We also invest time into training and developing our people.</p>
<p></p><p>End your job search and find your career today, at Brookfield.</p>
<p></p><div><h1 class="jobSectionHeader"><b>Why Brookfield?
</b></h1></div><p>We imagine, create, and operate on a foundation of values to build a better world, together. Brookfield strives to create spaces where going to work never feels routine. As a Brookfield employee, you will enjoy many benefits such as 401K matching, tuition reimbursement, summer Fridays, paid maternity leave and more. There is also a generous employee referral program because we want our existing team members to help us build a more diverse workplace through their networks.</p>
<p></p>We are proud to create a diverse environment and are proud to be an equal opportunity employer. We are grateful for your interest in this position, however, only candidates selected for pre-screening will be contacted.</div>

Staff Security Engineer, Cloud & AI Platform

<div><div><div><div><div>Location: Atlanta
</div></div></div></div><div><div><div><div>Other locations: Anywhere in Country
</div></div></div></div><div><div><div><div><div>Salary: Competitive
</div></div></div></div></div><div><div><div><div>Date: Aug 27, 2026
</div></div></div></div><div><div><div><h2 class="jobSectionHeader"><b>Job description</b></h2>
</div></div></div><div><div><div><div>Requisition ID: 1738677
</div></div></div></div><div><p>Location: Anywhere in Country</p><br>
<p></p>
<p>
At EY, we&rsquo;re all in to shape your future with confidence.</p><br>
<p></p>
<p>
We&rsquo;ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.</p></div><div></div><p><b><br>
The opportunity</b></p>
<p>
We are seeking AI Systems Engineers to own the security and trust fabric of EY&rsquo;s AI-native platform, comprising the identity, secrets, cryptographic, and attestation layer that makes agentic AI workloads deployable in highly regulated environments. This role owns the enforcement mechanisms that allow EY to prove every workload is identity-bound, every secret is protected, every node is trusted, and every deployment is attestable and audit-ready.</p>
<p>
This is the strategic differentiator of the platform. The ability to deploy AI workloads in regulated industries and prove they are secure, economically bounded, and auditable depends on the trust fabric this role builds. It is the technical enforcement layer behind the AI Integrity / Security control authority and much of the platform&rsquo;s governance capabilities, spanning consistently across cloud, on-prem, edge, and air-gapped environments.</p><br>
<p></p>
<p><b>
Your key responsibilities</b></p>
<ul>
<li><b>Own workload identity and secrets management: </b>SPIRE/ODIS, Keycloak/Entra ID (IAM), OpenBao (secrets store), cert-manager (X.509 lifecycle), PKI issuers/roots, and transit encryption &mdash; propagated consistently across every environment and tenant.</li>
<li><b>Build confidential compute environments: </b>TEE (TDX/SEV-SNP/SGX/TrustZone/CCA/NVIDIA CC), Intel TXT boot security, and secure DPU architecture (DOCA), so environments are isolated, attestable, and audit-ready.</li>
<li>Establish the platform-wide identity model so every workload, agent, and service carries a verifiable, propagated identity that flows through telemetry, cost attribution, and policy enforcement end-to-end.</li>
<li>Own the cryptographic lifecycle: issuance, rotation, revocation, and expiry of certificates, keys, and roots, with zero manual, untracked secrets and no long-lived credential sprawl across tenants.</li>
<li>Enforce attestation policy: which nodes, enclaves, and workloads are trusted, how trust is proven at boot and at runtime, and how attestation evidence is captured for audit.</li>
<li>Partner on a dotted-line basis with Enterprise Security / Cloud Platform / SRE to ensure independent review, alignment to enterprise trust standards, and audit readiness in regulated client contexts.</li></ul><br>
<p></p>
<p><b>
Skills and attributes for success</b></p>
<ul>
<li>Deep expertise in workload identity, secrets management, PKI, and cryptographic lifecycle at production scale across multiple environments.</li>
<li>Strong understanding of confidential compute, trusted execution environments, hardware roots of trust, and remote attestation.</li>
<li>A security-first mindset: thinking in terms of provable trust, blast radius, least privilege, and cryptographic attribution rather than perimeter or convenience.</li>
<li>Ability to encode trust and compliance directly into infrastructure so that security is enforced by the platform, not by manual review.</li>
<li>Comfortable operating across cloud, on-prem, edge, and air-gapped environments with consistent identity and trust mechanisms.</li>
<li>Strong communicator able to explain trust, identity, and attestation tradeoffs to engineers, architects, auditors, and leadership.</li>
<li>Orientation toward auditability and evidence: able to translate regulatory expectations into technical controls and demonstrable proof.</li></ul><br>
<p></p>
<p><b>
To qualify you must have</b></p>
<ul>
<li>Bachelor&rsquo;s or Master&rsquo;s degree in Computer Science, Security, or related technical field, or equivalent experience.</li>
<li>8+ years in security engineering, identity/PKI, or trust infrastructure, with hands-on production ownership.</li>
<li>Deep, hands-on expertise with workload identity (SPIRE/SPIFFE), IAM (Keycloak/Entra ID), and secrets management (OpenBao/Vault).</li>
<li>Strong grounding in PKI, X.509 certificate lifecycle (cert-manager), key management, and transit encryption.</li>
<li>Working experience with confidential compute and hardware attestation (TDX, SEV-SNP, SGX, NVIDIA CC, or equivalents) and secure boot (Intel TXT).</li>
<li>Experience delivering identity and secrets consistently across multi-tenant, multi-environment (cloud/on-prem/edge/air-gapped) platforms.</li>
<li>Proven track record operating under compliance, security, or regulatory constraints with audit-grade evidence requirements.</li>
<li>Ability to define clean ownership boundaries and consumption contracts with platform, data, and runtime teams.</li></ul><br>
<p></p>
<p><b>
Ideally, you&rsquo;ll also have</b></p>
<ul>
<li>Familiarity with secure DPU architectures (DOCA) and hardware root-of-trust / boot-chain designs.</li>
<li>Experience integrating identity and attestation into service mesh, policy engines (OPA), and API gateways.</li>
<li>Exposure to AI/ML workloads and the specific trust challenges of confidential AI inference (models/secrets inside enclaves).</li>
<li>Experience producing attestation and compliance evidence for external auditors or regulators.</li>
<li>Relevant certifications (e.g., CISSP, cloud security specialties) or demonstrable equivalent depth.</li>
<li>Exposure to regulated industries (financial services, tax, healthcare, risk).</li></ul><p></p><div><br>
<p><b>
What we offer you</b><br>
At EY, we&rsquo;ll develop you with future-focused skills and equip you with world-class experiences. We&rsquo;ll empower you in a flexible environment, and fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams. Learn more.</p>
<ul>
<li>We offer a comprehensive compensation and benefits package where you&rsquo;ll be rewarded based on your performance and recognized for the value you bring to the business. The base salary range for this job in all geographic locations in the US is $106,900 to $176,500. The base salary range for New York City Metro Area, Washington State and California (excluding Sacramento) is $128,400 to $200,600. Individual salaries within those ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options.</li>
<li>Join us in our team-led and leader-enabled hybrid model. Our expectation is for most people in external, client serving roles to work together in person 40-60% of the time over the course of an engagement, project or year.</li>
<li>Under our flexible vacation policy, you&rsquo;ll decide how much vacation time you need based on your own personal circumstances. You&rsquo;ll also be granted time off for designated EY Paid Holidays, Winter/Summer breaks, Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.</li></ul><br>
<p></p>
<p><b>
Are you ready to shape your future with confidence? Apply today.</b><br>
EY accepts applications for this position on an on-going basis.</p><br>
<p></p>
<p>
For those living in California, please click here for additional information.</p><br>
<p></p>
<p>
EY focuses on high-ethical standards and integrity among its employees and expects all candidates to demonstrate these qualities.</p><br>
<p></p>
<p><b>
EY | Building a better working world</b></p><br>
<p></p>
<p>
EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.</p><br>
<p></p>
<p>
Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.</p><br>
<p></p>
<p>
EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.</p><br>
<p></p>
<p>
EY provides equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity/expression, pregnancy, genetic information, national origin, protected veteran status, disability status, or any other legally protected basis, including arrest and conviction records, in accordance with applicable law.</p><br>
<p></p>
<p>
EY is committed to providing reasonable accommodation to qualified individuals with disabilities including veterans with disabilities. If you have a disability and either need assistance applying online or need to request an accommodation during any part of the application process, please call 1-800-EY-HELP3, select Option 2 for candidate related inquiries, then select Option 1 for candidate queries and finally select Option 2 for candidates with an inquiry which will route you to EY&rsquo;s Talent Shared Services Team (TSS) or email the TSS at ssc.customersupport@ey.com.</p></div></div>

AI Systems Engineer - Secure Execution - Senior

Ultahost, inc

<div><div>UltaHost is looking for a Senior Internal Security &amp; Security Operations Engineer to take ownership of internal security and help strengthen the protection of our workforce, identities, systems, and day-to-day operations.</div><div></div><div><br>
This is a senior, hands-on technical role with responsibility across Identity &amp; Access Management (IAM), internal security, security monitoring, SOC operations, and incident response. The position requires someone who can combine strong technical security expertise with a structured and operational approach to access control, monitoring, investigation, and risk reduction.</div><div></div><div><br>
You will be responsible for securing employee and contractor identities, privileged access, credentials, internal systems, endpoints, VPN and remote access, while ensuring that appropriate security controls are implemented and maintained throughout the account and access lifecycle.</div><div></div><div><br>
A key part of the role will also involve actively monitoring security events and investigating suspicious activity across authentication systems, endpoints, internal applications, and cloud/SaaS environments. You will take an active role in identifying potential threats, investigating security incidents, collecting evidence, containing risks, coordinating remediation, and ensuring corrective actions are followed through to closure.</div><div></div><div><br>
You will work closely with HR, IT, system owners, and other technical teams to improve access governance, strengthen internal security controls, enhance detection and response capabilities, and reduce security risks across UltaHost&rsquo;s internal environment.</div><div></div><div><br>
We are looking for someone who is comfortable taking end-to-end ownership &mdash; from implementing preventive controls and improving security monitoring to investigating real incidents and driving security improvements across the organization.</div><div></div><div><b><br>
What You&rsquo;ll Own</b></div><div><b>
Identity, Access &amp; Credential Security</b></div><ul><li>
Design and maintain RBAC across departments, roles, and critical systems.</li><li>
Manage MFA, SSO, PAM, password vaults, API keys, SSH keys, recovery codes, and secrets.</li><li>
Own security controls around onboarding, role changes, temporary access, contractor access, and offboarding.</li><li>
Identify and remove shared, dormant, unnecessary, and excessively privileged accounts.</li><li>
Conduct regular access reviews and maintain approval and audit evidence.</li></ul><div><b>
Security Monitoring &amp; Incident Response</b></div><ul><li>
Monitor and investigate alerts from SIEM, EDR, IDS/IPS, authentication systems, cloud/SaaS platforms, internal applications, and endpoints.</li><li>
Investigate suspicious logins, compromised accounts, credential leaks, malware, privilege abuse, insider risk, and unauthorized access.</li><li>
Collect evidence, contain threats, coordinate recovery, and drive corrective actions through closure.</li><li>
Maintain detection rules, alert quality, incident records, escalation paths, and response playbooks.</li><li>
Lead internal security incidents and support infrastructure/product incidents involving identities or credentials.</li></ul><div><b>
Internal Systems &amp; Workforce Security</b></div><ul><li>
Define security requirements for laptops, VPN and remote access, email, code repositories, support platforms, finance tools, and administrative systems.</li><li>
Work closely with HR and IT on joiner/mover/leaver processes and internal security investigations.</li><li>
Support security awareness, phishing prevention, and secure handling of sensitive information and credentials.</li></ul><div><b>
What We&rsquo;re Looking For</b></div><ul><li>
5+ years of hands-on experience in internal security, IAM, SOC/security operations, incident response, IT security, or a closely related role.</li><li>
Practical experience with RBAC, MFA, SSO, PAM, identity providers, password management, account lifecycle management, and access auditing.</li><li>
Hands-on experience with SIEM, EDR, IDS/IPS, centralized logging, authentication logs, alert triage, and case management.</li><li>
Proven ability to investigate compromised accounts, malware, credential leaks, suspicious authentication activity, insider risk, and unauthorized access.</li><li>
Strong understanding of Linux access, SSH, VPN, endpoints, cloud/SaaS administration, email security, and remote-workforce security.</li><li>
Strong organizational skills and the ability to enforce security controls while collaborating with HR, IT, managers, and system owners.</li></ul><div><b>
Preferred Background</b></div><div>
Experience in web hosting, cloud infrastructure, data centers, SaaS, fintech, MSSP, or another distributed technology environment is highly valuable. Preferred certifications include Security+, CySA+, GCIH, SC-200, IAM/PAM vendor certifications, CISSP, or equivalent practical expertise. Certifications are a plus &mdash; hands-on experience matters more.</div><div></div><div><b><br>
What Success Looks Like</b></div><div><b>
You will help us improve:</b></div><ul><li>
MFA and privileged-access coverage</li><li>
Joiner/mover/leaver security and access-removal speed</li><li>
Control of shared, dormant, and excessive access</li><li>
Alert response and incident-resolution times</li><li>
Access-review coverage and security evidence</li><li>
Internal security standards, procedures, and playbooks</li></ul><div><b>
Important</b></div><div>
We are not looking for a policy/compliance-only profile. The successful candidate must have real hands-on experience administering access controls, operating security tooling, investigating logs, and responding to security incidents.</div><div>
You will work closely with our second cybersecurity specialist, the Product &amp; Infrastructure Security Engineer, as well as DevOps, Network, Product, Engineering, Support, Abuse, HR, Finance, Legal, and executive management.</div><div>
If you enjoy taking ownership, building security controls, investigating real incidents, and improving security in a large-scale technology environment, we&rsquo;d like to hear from you.</div></div><div></div>

Internal Security & Security Operations Engineer

WGA Consulting, LLC

<p><b>About WGA Advisors</b></p><p>WGA Advisors is a global management consulting firm and a world-class alternative to the big-name consulting firms. We help senior leaders make and execute the decisions that matter most across AI and digital transformation strategy, ESG, growth, culture, operations, and enterprise transformation.</p><p>Our firm focuses on areas of senior management concern, creating enduring value and delivering measurable impact at the intersection of strategy, technology, and operating model design. WGA&rsquo;s AI Workforce Solutions practice is at the forefront of helping global enterprises move from isolated AI experimentation to scaled, business-led agentic AI deployment.</p><p><b>The Opportunity</b></p><p>WGA Advisors is engaging an <b>Azure Security &amp; Governance Engineer &ndash; Microsoft AI Platform</b> to hands-on design, configure, secure, test, and support the production deployment of an enterprise Microsoft AI Agent platform.</p><p>This is a high-impact execution role responsible for implementing the security, identity, governance, networking, data-protection, and monitoring controls surrounding a Microsoft AI environment built using <b>Microsoft Foundry, Microsoft Copilot Studio, Microsoft Power Platform, Microsoft Purview, Microsoft Sentinel, Microsoft Entra ID, Azure Key Vault, and Presidio</b>.</p><p>The Azure Security &amp; Governance Engineer will work directly alongside WGA&rsquo;s Microsoft Azure AI and Power Platform engineering resources, engagement leadership, and enterprise technology and security teams. The role is responsible for turning approved security architecture and governance requirements into configured, tested, documented, and production-ready Microsoft controls.</p><p>A major focus of the environment is the protection of personally identifiable information and sensitive enterprise data used by AI Agents. The architecture requires PII to be detected, tokenized or pseudonymized before applicable data is submitted to large language models, with tightly controlled re-identification where business processes require the original values.</p><p>This role therefore requires more than policy or security advisory experience. The successful candidate must be able to <b>personally configure Azure and Microsoft security services</b>, troubleshoot integrations, validate controls, and work alongside the AI engineering team through deployment.</p><p>This is a temporary project-based engagement structured around platform configuration, security implementation, integration testing, production readiness, deployment, and stabilization. Strong potential for extension based on performance and continued client demand across WGA&rsquo;s AI Workforce Solutions pipeline.</p><p><b>Core Responsibilities</b></p><ul><li>Azure security architecture and configuration</li><li>Configure the Azure security architecture supporting enterprise AI Agents, Microsoft Foundry, Copilot Studio, Power Platform, and related Azure services</li><li>Implement security controls against accepted architecture and production-readiness requirements</li><li>Configure secure service-to-service communication between AI platform components</li><li>Establish least-privilege access patterns across development, test, and production environments</li><li>Configure Azure subscriptions, resource groups, policies, roles, and security boundaries as required by the approved architecture</li><li>Review and remediate inappropriate public exposure of Azure resources</li><li>Configure Azure security controls protecting AI workloads, APIs, data services, tokenization services, and application components</li><li>Support environment separation and controlled promotion between development, test, and production</li><li>Implement production security configurations in accordance with enterprise change-control requirements</li><li>Document configurations so the environment can be transitioned cleanly to enterprise ownership</li></ul><p><b>Microsoft Entra ID and identity security</b></p><ul><li>Configure Microsoft Entra ID identity and access controls supporting users, applications, AI Agents, workflows, and Azure services</li><li>Configure managed identities and service principals wherever appropriate in place of embedded credentials</li><li>Configure application registrations, authentication flows, API permissions, and service-to-service access</li><li>Establish Azure RBAC and other authorization controls using least-privilege principles</li><li>Configure developer, administrator, production-support, application, and service access roles</li><li>Support Conditional Access and related identity-security requirements where applicable</li><li>Validate privileged access and eliminate unnecessary persistent administrative privileges</li><li>Troubleshoot authentication, authorization, token, and managed-identity issues across integrated Microsoft services</li><li>Support controlled access between Copilot Studio, Foundry, Azure-hosted services, APIs, and enterprise data platforms</li></ul><p><b>Azure networking and private connectivity</b></p><ul><li>Design and configure secure Azure network connectivity supporting the AI platform</li><li>Configure Azure Virtual Networks and appropriate network segmentation</li><li>Configure Private Link and private endpoints for supported Azure services</li><li>Restrict public network access where required by the target security architecture</li><li>Configure Network Security Groups and related Azure network controls</li><li>Establish secure communication between application, data, AI, and security services</li><li>Review outbound connectivity and reduce unnecessary public egress</li><li>Validate DNS, private endpoint, routing, firewall, and connectivity configurations</li><li>Work with enterprise network teams to resolve cross-environment connectivity requirements</li><li>Perform network-security validation before production deployment</li></ul><p><b>Azure Key Vault, secrets, and cryptographic controls</b></p><ul><li>Configure Azure Key Vault for centralized protection of secrets, keys, certificates, and sensitive application configuration</li><li>Configure Key Vault RBAC and access controls</li><li>Integrate Azure services with Key Vault using managed identities wherever technically appropriate</li><li>Ensure credentials, API keys, certificates, and encryption keys are not hard-coded into applications, workflows, agents, or configuration files</li><li>Establish key and secret rotation practices</li><li>Support encryption requirements associated with sensitive information and PII protection</li><li>Protect keys and mapping information used for tokenization, pseudonymization, and controlled re-identification</li><li>Validate that AI Agents and LLM services cannot access protected token mappings or re-identification capabilities unless explicitly authorized</li></ul><p><b>Microsoft Purview configuration and data governance</b></p><ul><li>Configure Microsoft Purview controls supporting enterprise AI and agentic workflows</li><li>Configure and validate sensitive information classifications relevant to the AI environment</li><li>Configure appropriate Data Loss Prevention policies and controls</li><li>Establish information-protection and data-handling rules applicable to AI Agents and connected business processes</li><li>Configure auditing and governance controls supporting AI activity</li><li>Review data movement through Copilot Studio, Foundry, Power Platform, APIs, and associated Azure services</li><li>Support creation or extension of custom Sensitive Information Types where business-specific identifiers or patterns require additional classification</li><li>Configure policies designed to prevent inappropriate movement or disclosure of sensitive information</li><li>Validate Purview controls using representative positive and negative test cases</li><li>Document governance rules and support transition to enterprise security and compliance teams</li></ul><p><b>Microsoft Sentinel configuration and monitoring</b></p><ul><li>Configure Microsoft Sentinel to provide centralized security monitoring for the AI environment</li><li>Connect appropriate Azure, Microsoft, identity, application, and security data sources</li><li>Establish security logging requirements across the AI platform</li><li>Configure analytics rules and alerting for relevant security events</li><li>Develop detection logic for suspicious authentication, authorization, administrative, and service activity</li><li>Monitor privileged access and material security configuration changes</li><li>Configure monitoring for abnormal application and service-to-service behavior</li><li>Configure workbooks, dashboards, and operational security views where required</li><li>Establish alerts supporting investigation of security events associated with production AI Agents</li><li>Validate that material AI platform security events are observable, traceable, and auditable</li><li>Support incident investigation and troubleshooting during production testing and stabilization</li></ul><p><b>PII protection and AI security</b></p><ul><li>Work alongside the Azure AI engineer to implement and validate a secure PII-protection architecture surrounding Microsoft Foundry and enterprise LLM processing</li><li>Secure Azure-hosted Presidio analyzer, anonymization, tokenization, and re-identification services</li><li>Validate that designated PII and sensitive information is removed, tokenized, masked, or pseudonymized before applicable content is submitted to an LLM</li><li>Establish access boundaries between raw information, tokenized information, AI-processing services, and re-identification capabilities</li><li>Protect token mappings and other sensitive re-identification data from access by LLM services</li><li>Configure cryptographic and Key Vault controls supporting reversible pseudonymization where required</li><li>Review application, API, security, and diagnostic logging to prevent inadvertent storage of unprotected PII</li><li>Validate security controls through positive and negative test cases</li><li>Ensure failure conditions do not inadvertently bypass the required PII-protection layer</li><li>Support secure deployment of Presidio containers or services within Azure</li><li>Review application architecture for potential paths that could allow unprotected sensitive information to reach an LLM</li></ul><p>The primary Azure AI engineer will own agent and Presidio application development. This role owns the <b>security architecture and enforcement controls surrounding those services</b>.</p><p><b>AI platform production readiness</b></p><ul><li>Perform security reviews of Microsoft Copilot Studio, Microsoft Foundry, Power Platform, Azure AI services, Presidio, Azure Container Apps or equivalent hosting services, Key Vault, storage, databases, APIs, and related platform components</li><li>Validate identity and permissions before production release</li><li>Validate private endpoint and network-security configurations</li><li>Validate secrets-management and encryption controls</li><li>Validate Purview policies and DLP behavior</li><li>Validate Sentinel logging, analytics, and alerts</li><li>Validate PII-processing and tokenization security boundaries</li><li>Review service principals, managed identities, application registrations, and administrative access</li><li>Confirm development, test, and production separation</li><li>Identify security defects, classify severity, and work directly with engineering resources to remediate them</li><li>Execute final production security validation and document outstanding risks or exceptions</li><li>Support production smoke testing and stabilization following deployment</li></ul><p><b>Qualifications</b><br/><b>Education</b></p><ul><li>Bachelor&rsquo;s degree required in a relevant discipline, including but not limited to Computer Science, Cybersecurity, Information Systems, Software Engineering, Engineering, Data Science, or a closely related technical field</li><li>Strong academic record from a recognized institution</li><li>Relevant Microsoft security, Azure, identity, or architecture certifications are a plus</li></ul><p><b>Experience</b></p><ul><li>10+ years of overall professional technology experience, with significant hands-on Azure security engineering experience</li><li>Demonstrated hands-on delivery of enterprise Microsoft Azure security environments</li><li>Experience configuring Azure security controls in production rather than solely providing architecture or governance recommendations</li><li>Strong practical experience with Microsoft Entra ID, Azure RBAC, managed identities, Azure Key Vault, Azure networking, and private connectivity</li><li>Demonstrated experience with Microsoft Purview and/or Microsoft Sentinel in enterprise environments</li><li>Experience securing Azure PaaS applications, APIs, data services, and distributed cloud architectures</li><li>Experience working directly with application and platform engineering teams through build, testing, remediation, and production deployment</li><li>Track record of client-facing delivery under structured acceptance criteria, change control, tight timelines, and enterprise security standards</li><li>Experience supporting large enterprise or tier-one consulting environments strongly preferred</li></ul><p><b>Required Expert Skills</b></p><ul><li>Hands-on configuration of Microsoft Entra ID, managed identities, service principals, application registrations, authentication, and Azure RBAC</li><li>Azure Virtual Networks, Private Link, private endpoints, Network Security Groups, routing, and secure PaaS connectivity</li><li>Azure Key Vault and secure management of application secrets, keys, certificates, and cryptographic material</li><li>Microsoft Purview information protection, sensitive information classification, DLP, governance, and audit capabilities</li><li>Microsoft Sentinel data connectors, analytics rules, alerting, monitoring, and security investigation</li><li>Securing Azure-hosted APIs, application services, containers, databases, storage, and AI services</li><li>Implementing least-privilege and Zero Trust security principles within Microsoft cloud environments</li><li>Diagnosing and resolving identity, authorization, connectivity, security-policy, and logging issues</li><li>Conducting technical security reviews and personally implementing identified remediation</li></ul><p><b>Technical Fluency</b></p><ul><li>Strong command of Azure security architecture and Microsoft cloud security controls</li><li>Working knowledge of Microsoft Foundry and enterprise generative AI architectures</li><li>Working knowledge of Microsoft Copilot Studio and Power Platform security models</li><li>Understanding of AI Agent architectures, tool invocation, API integration, and enterprise LLM deployment</li><li>Understanding of PII detection, anonymization, tokenization, masking, and pseudonymization concepts</li><li>Familiarity with Presidio or comparable PII-detection and anonymization frameworks preferred</li><li>Familiarity with Azure Container Apps, Kubernetes, App Service, or comparable container/application hosting</li><li>Familiarity with Azure API Management and secure API architecture</li><li>Understanding of encryption at rest, encryption in transit, cryptographic-key management, and secrets management</li><li>Understanding of security logging and the risk of sensitive information appearing in logs, traces, prompts, or diagnostic data</li><li>Familiarity with secure software-development and DevSecOps practices</li><li>Familiarity with the broader agentic AI landscape and enterprise AI-security considerations</li></ul><p><b>Preferred Microsoft Certifications</b></p><p>Relevant certifications are preferred but are not a substitute for demonstrated hands-on delivery experience.</p><ul><li><b>AB-100</b> - Agentic AI Business Solutions Architect Expert</li><li><b>AI-103</b> &ndash; Azure AI Apps and Agents Developer Associate</li><li><b>AB-620</b> &ndash; AI Agent Builder Associate</li><li><b>AB-410</b> &ndash; Intelligent Applications Builder Associate</li><li><b>SC-401</b> &ndash; Information Security Administrator Associate</li><li><b>SC-200</b> &ndash; Security Operations Analyst Associate</li><li><b>SC-300</b> &ndash; Identity and Access Administrator Associate</li><li><b>SC-500</b> &ndash; Cloud and AI Security Engineer Associate</li></ul><p><b>Communication and Execution</b></p><ul><li>Clear written and verbal communication, including the ability to explain security architecture and technical controls to both business and technical audiences</li><li>Ability to work closely with AI engineers, application developers, enterprise architects, security teams, and engagement leadership</li><li>Proven ability to deliver against a structured implementation schedule with iterative feedback, tight timelines, and high quality standards</li><li>Demonstrated ownership, follow-through, and ability to independently drive security workstreams to completion</li><li>Ability to distinguish material production security risks from theoretical or low-impact concerns</li><li>Strong troubleshooting skills and willingness to work directly within the environment rather than limiting involvement to architecture recommendations</li><li>Ability to document configuration decisions, security controls, testing results, and operating procedures to a standard suitable for enterprise transition</li></ul><p><b>Engagement Details</b></p><ul><li><b>Hourly Rate:</b> $90&ndash;$120/hour, commensurate with experience and demonstrated Microsoft security expertise</li><li><b>Engagement Type:</b> Temporary / Independent Contractor / Project-Based</li><li><b>Schedule:</b> 40 hours week/6 month project</li><li><b>Duration:</b> Project-based engagement spanning platform configuration, testing, deployment, and production stabilization, with potential for extension based on performance and continued client demand</li><li><b>Work Location:</b> Remote; collaboration with WGA and client technology teams as required by the implementation and testing cadence</li><li><b>Travel:</b> There will be a single 8-day trip to Singapore, travel is reimbursed per travel policy, travel to/from paid up to 8 hours per travel day.</li><li><b>Authorization:</b> Must be based in the United States and currently authorized to work in the United States</li></ul><p>This role is designed to work alongside WGA&rsquo;s primary Microsoft Azure AI &amp; Power Platform engineering resource. It is therefore particularly well suited to a senior Microsoft security engineer who can provide focused technical expertise during architecture, configuration, validation, and production deployment.</p><p>WGA Advisors is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard</p><p>Pay: $90.00 - $120.00 per hour</p><p>Benefits:</p><ul><li>Flexible schedule</li></ul><p>Experience:</p><ul><li>Microsoft Presidio: 3 years (Required)</li><li>Microsoft Foundry: 3 years (Required)</li><li>Microsoft Purview: 3 years (Required)</li><li>Azure Key Vault: 3 years (Required)</li><li>Microsoft Copilot Studio: 3 years (Required)</li><li>Microsoft Sentinel: 3 years (Required)</li></ul><p>Language:</p><ul><li>English (Required)</li></ul><p>Willingness to travel:</p><ul><li>25% (Required)</li></ul><p>Work Location: Remote</p>

Azure Security & Governance Engineer – Microsoft AI Platform

<div></div><div><div><div>Clearance Level
<div>Secret</div>
</div><div></div><div>Category
<div>Cyber and IT Risk Management</div>
</div><div></div><div>Location
<div>Fort Meade, Maryland</div>
<i>(</i><i>Hybrid Workplace</i><i>)</i>
</div><div>
</div></div><div><div>Key Skills For Success
</div><div><p>Cybersecurity</p>
</div><div><p>Information Security</p>
</div><div><p>RMF</p>
</div><div><p>Security Requirements</p>
</div><div><p>System Security</p>
</div></div><div></div><div><div><div><div><div><div>
</div></div></div><div><h5 class="jobSectionHeader"><b>REQ#:</b><b> </b><b>RQ227262</b></h5>
<h5 class="jobSectionHeader"><b>Public Trust:</b><b> </b><b>None</b></h5>
<h5 class="jobSectionHeader"><b>Requisition Type:</b><b> </b><b>Regular</b></h5>
<h5 class="jobSectionHeader"><b>Your Impact</b></h5>
<p>Own your opportunity to support our nation's defense. Make an impact by connecting and securing critical operations across the globe, keeping our country safe and secure.</p>
<h2 class="jobSectionHeader"><b>Job Description</b></h2>
<div><p>As an Information Security Analyst Sr Principal, you will be responsible for the ICAM program&rsquo;s network accreditation on both unclassified and classified networks. You will also be responsible for executing and reviewing security assessments of computing environments to identify points of vulnerability, non-compliance with established IA standards and regulations, and recommend mitigation strategies.</p>
<p><b>In this role, a typical day will include:</b></p>
<ul><li>Execute success in obtaining an accreditation and maintaining the accreditation for ICAM on a classified network.</li>
<li>Perform Risk Management Framework (RMF) actions in eMASS such as control assessments, PPSM, upload and manage ICAM assets in hardware/software list, upload STIG checklists and ACAS vulnerability reports.</li>
<li>Define, draft, publish, and maintain Information Security policies, standards, and guidelines such as Access Control Plan, Identification and Authentication Plan, Auditing and Accountability Plan, Contingency Plan, Incident Response Plan, Vulnerability Management, Continuous Monitoring, Backup and Recovery, System Integrity Plan, Key Management, Media Protection, etc.</li>
<li>Develop and finalize RMF documentation to include Security Plans, Implementation Plans, Plans of Action and Milestones (POA&amp;Ms), and Risk Assessment Reports</li>
<li>Assess system compliance against NIST, DoD, and DHA security requirements to include the NIST 800-53 controls, and DISA Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs).</li>
<li>Spearhead support government compliance assessments such as penetration testing and accreditation and compliance inspections assessments and mitigations to system security threats/risks throughout the program life cycle.</li>
<li>Work with the internal and external stakeholders to resolve compliance or audit issues in a timely manner. Enforce the design and implementation of trusted relations among external systems and architectures.</li>
<li>Ensure system security needs are established and maintained for operations development, security requirements definition, security risk assessment, systems analysis, systems design, security test and evaluation, certification and accreditation, systems hardening, vulnerability, testing and scanning, incident response, disaster recovery, and business continuity planning; and provides analytical support for security policy development and analysis.</li>
<li>Other related work as directed.</li>
</ul><p></p><p><b>Required Qualifications:</b></p>
<ul><li>Active DoD Security Clearance of SECRET, or higher</li>
<li>Minimum eight (8) + years&rsquo; experience and proven track record supporting IT customers as part of an enterprise environment.</li>
<li>BA/BS and 8+ years of Computer Science or equivalent experience</li>
<li>CISSP, CASP, CISA, CISM or similar for IAM Level III DoD 8570/8140 certification</li>
<li>Experience with FedRAMP Cloud processes</li>
<li>Knowledge of the DoD cybersecurity and policy requirements set forth in DoDI 8500.01 &ldquo;Cybersecurity&rdquo;, NIST 800-53v5 Assessing Privacy and Security Controls and DoDI 8510.01 &ldquo;Risk Management Framework</li>
<li>Extensive and experience in NIST 800-53, Risk Framework security controls in eMASS</li>
<li>Ability to lead in highly collaborative, fast-paced, growth-focused environment.</li>
<li>Experience and knowledge in cybersecurity tools such as Nessus ACAS, Microsoft Defender Endpoint, McAfee</li>
<li>Extensive experience and knowledge with Incident Response testing/plans and Contingency testing/plans</li>
<li>Experience with systems that deploy API gateways, firewalls, access control lists, IP subnetting, NAT and other network device in Cloud.</li>
<li>Experience communicating with and coordinating across multiple stakeholders and teams to align to and execute unified goals and plans.</li>
<li>The ability to effectively communicate with people ranging from non-technical to engineering level.</li>
</ul><p></p><p><b>Desired Qualifications:</b></p>
<ul><li>Familiarization with DoD enterprise environments</li>
<li>Familiarization with Agile work environments</li>
<li>Familiarization with Microsoft Azure Cloud environment</li>
</ul></div></div><p></p><div><div><div><h3 class="jobSectionHeader"><b>Work Requirements</b></h3>
</div></div><div></div><div><div>Years of Experience
<p>8 + years of related experience</p>
<ul><li>may vary based on technical training, certification(s), <b><i>or</i></b> degree</li></ul>
</div><div></div><div>Certification
<p>GIAC Security Essentials (GSEC) | Global Information Assurance Certification (GIAC) - Global Information Assurance Certification (GIAC)</p>
<p>CompTIA Security+ CE | CompTIA - CompTIA</p>
<p>CompTIA SecurityX CE | CompTIA - CompTIA</p>
<p>Certified Information Security Manager (CISM) | Information Systems Audit and Control Association (ISACA) - Information Systems Audit and Control Association (ISACA)</p>
<p>Certified Information Systems Security Professional (CISSP) | International Information System Security Certification Consortium (ISC2) - International Information System Security Certification Consortium (ISC2)</p>
</div><div></div><div>Travel Required
<p>25-50%</p>
</div><div></div><div>Citizenship
<p>U.S. Citizenship Required</p>
</div></div></div></div><div><h3 class="jobSectionHeader"><b>Salary and Benefit Information</b></h3>
<p>The likely salary range for this position is $142,792 - $184,000. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.
</p>
<h3 class="jobSectionHeader"><b>Our Identity Verification Process</b></h3>
<p>As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes.</p>
<h3 class="jobSectionHeader"><b>About Our Work</b></h3>
<div></div><p>We are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission-ready capabilities in AI, cloud, cyber and software development.</p>
<p>Join our Talent Community to stay up to date on our career opportunities and events at gdit.com/tc.</p>
<p><i>Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans</i></p></div></div></div></div>

Information Security Analyst Sr Principal - Cloud - Hybrid

Search 3145+ Information security manager identity remote jobs near you this September. New roles added regularly across leading industries. Apply today.