Enterprise Security Engineer

The Enterprise Security Engineer is responsible for designing, implementing, and maintaining secure enterprise infrastructure across both on-premises and cloud environments. This role establishes security architecture standards, governs identity and access management systems, and ensures segmentation between internal corporate systems and cloud platforms. The engineer will bring deep expertise in enterprise security technologies, cloud security (Azure, GCP), and modern detection/monitoring platforms such as Microsoft Sentinel and CrowdStrike premises and cloud environments. ESSENTIAL TASKS Enterprise Security Architecture: Support the design and maintenance of secure network architectures through the provision of recommendations and best practices for segmentation, firewall policies, and access control standards across corporate back-office infrastructure Establish and maintain enterprise security baselines, system hardening standards, and configuration management policies aligned to industry frameworks Lead security architecture reviews for new and existing systems and provide guidance to engineering teams on secure design principles Cloud Security (Azure & GCP): Design, implement, and maintain cloud security controls in Azure, Google Cloud Platform (GCP), AWS including network security groups, service accounts, workload identity federation, logging, and cloud-native security tooling Support secure integration and connectivity between on-premises environments and cloud-hosted applications and infrastructure Apply cloud hardening standards, ensure proper encryption configurations, and enforce secure deployment patterns. Contribute to cloud security initiatives by applying security best practices for Google Kubernetes Engine (GKE) and supporting the organization’s transition from Windows-based environments to modernized cloud-native deployments Develop and implement secure configurations for Cloud SQL in alignment with evolving cloud database security standards Security Infrastructure & Tooling: Configure, maintain, and develop SIEM and security monitoring technologies including Microsoft Sentinel, CrowdStrike Falcon, and other endpoint, log analytics, or detection platforms Develop and maintain detection rules, alert logic, and automated workflows to strengthen enterprise security posture Manage PKI and security certificates, including lifecycle management, renewal processes, and deployment automation Infrastructure Security: Conduct infrastructure security assessments across servers, networks, applications, and cloud environments to identify vulnerabilities and misconfigurations. Remediate or coordinate remediation of identified issues in collaboration with infrastructure, engineering, and cloud teams. Design and implement secure data handling standards, encryption policies, and key management practices. AI Utilization: Leverage AI-enabled tools and analytics to enhance decision-making, improve efficiency, and…