Cybersecurity Engineer

Cybersecurity Engineer
Alpharetta GA (Onsite)
Contract

We are seeking a Cybersecurity Engineer to provide high-level technical and operational support across our hybrid Azure and On-Premises environments. This is a hands-on role requiring deep expertise in Microsoft cloud security identity management and network infrastructure hardening.
Working closely with internal IT Operations Development teams and our Managed Service Provider (MSP) the Cybersecurity Engineer will be responsible for designing and implementing security controls that continuously harden our posture. This role serves as a primary technical resource for cloud security initiatives and reports directly to the SVP of Information Technology.

Key Responsibilities

• Hybrid Network Security: Implement security best practices and configuration changes on On-Prem Cisco networking equipment to ensure a hardened perimeter and internal segmentation.
• Cloud Security Operations: Lead the implementation and management of security controls across Azure and Microsoft 365 environments.
• Security Posture Management: Proactively improve the Microsoft Secure Score by optimizing configurations within Defender for Cloud and Defender for Office 365.
• Identity & Access Governance: Enhance identity security within Microsoft Entra ID managing Conditional Access policies Multi-Factor Authentication (MFA) and Privileged Identity Management (PIM).
• Endpoint Compliance: Oversee device compliance and security configurations globally through Microsoft Intune.
• Data Protection: Support and refine data governance Data Loss Prevention (DLP) and sensitivity labeling within Microsoft Purview.
• Incident Response: Lead technical investigations and remediation efforts during security incidents coordinating with internal teams and MSP partners.
• Application Security: Manage and optimize Web Application Firewall (WAF) tuning specifically utilizing Imperva technologies.
• Collaboration & Documentation: Maintain detailed technical documentation for security processes and architectural decisions to ensure seamless knowledge transfer.

• 5 years of cybersecurity engineering experience with a heavy focus on cloud-native and hybrid environments.
• Hands-on Networking Expertise: Strong understanding of networking from a cloud perspective combined with practical experience managing and securing On-Prem Cisco switches and equipment.
• Expert-level hands-on experience with the Microsoft Defender suite (Endpoint Office 365 Cloud and Identity).
• Deep technical knowledge of Microsoft Entra ID (formerly Azure AD) including PIM and Identity Protection.
• Proven experience managing Microsoft Intune for endpoint security and device compliance at scale.
• Familiarity with Microsoft Purview for data governance and retention policies.
• Working knowledge of WAF configuration and tuning (Imperva preferred).
• Excellent communication skills with the ability to translate technical risks to senior leadership.

Education / Experience
Bachelors degree (BS/BA) in Computer Science Cybersecurity or a related field is desired.
5 years of related professional experience.
Relevant certifications (e.g. CCNA/CCNP Security AZ 500 MS 500 CISSP) are highly preferred.