Jobs in the United States

25+ jobs

Group jobs by employerEmail me new jobs Save this search

Added 1 min ago
Sr Machine Learning Engineer - Labor Management Forecasting (Hybrid)
Publix Super Markets, Inc.
Lakeland, FL
From IT security and platform engineering to architecture, software development, and infrastructure, we offer career opportunities at every level - internships through technical leadership.
Added 3 mins ago
PI
Staff Machine Learning Engineer
PayPal, Inc.
San Jose, CA
- $196,833 to $333,500 USD / year
This job will lead the design, development, and implementation of advanced machine learning models and algorithms to solve complex problems. You will work closely with data scientists,…
Added 3 mins ago
Software QA Engineer IV
Applied Materials
Billerica, MA · Billerica
Consults with senior development engineers in resolution of problems.
Added 4 mins ago
Vice President – Full Java Stack Engineer
ewminds consulting Services
Pittsburgh, PA
We are seeking a Vice President – Full Stack Engineer to join a mission-critical engineering team supporting a high-performance, regulated enterprise platform. This is a hands-on…
Added 6 mins ago
AI Research Engineer III
Agility Robotics
or Pittsburgh, PA · Fremont, CA · Pittsburgh, PA · Salem, OR
Applicants must have current authorization to work in the United States
Added 7 mins ago
2027 Optical Payload Engineer Intern
Anduril Industries
Costa Mesa, CA
As an Optical Payload Engineer intern for our Space team, you will facilitate the integration of EO Payloads on our spacecraft platforms from initial concept development through on-orbit…
Added 7 mins ago
Process Integration Engineer
Applied Materials, Inc
Santa Clara, CA · Albany, NY
As a Process Engineer, you'll play a crucial role in designing and optimizing manufacturing processes for display and semiconductor manufacturing technologies. You will collect and analyze…
Added 7 mins ago
Electrical Engineer
Applied Materials, Inc
Santa Clara, CA
This is a 5 days per week in the office role
Added 7 mins ago
Software QA Engineer IV
Applied Materials, Inc
Billerica, MA
Consults with senior development engineers in resolution of problems.
Added 8 mins ago
AI Threat Defense Engineer, Professional Services Organization
Google
New York, NY
…following: network protocols and secure network design, web application security, security assessments and pen testing, authentication and access control, applied cryptography and security…
Added 10 mins ago
Senior Systems Engineer - TeamWork (TWC) and Cameo
BAE Systems
Sterling, VA
Job Description BAE Systems is looking for a Sr. Systems Engineer experienced in configuring, deploying, and maintaining TeamWork Cloud and Cameo (and associated tools like Cassandra DB) as…
Added 10 mins ago
Senior DevSecOps Engineer
BAE Systems
Sterling, VA
Job Description BAE Systems is looking for a Software Engineer/ DevSecOps (Senior) to join our visible technical program driving the Model Based Systems Engineering (MBSE) cloud platform…
Added 11 mins ago
Research Scientist, Soft Matter Simulations
Lila Sciences
Cambridge, MA
…soft matter and molecular simulation expertise with software development and practical scientific impact. You will collaborate with computational scientists, AI researchers, software…
Added 12 mins ago
T
Sr Security Software Specialist - API Security Engineer
TIAA
Dallas, TX · Charlotte, NC
- $160,000 to $210,000 USD / year
Sr Security Software Development Engineer leads the development strategy of the API Security engineering team which is responsible for building horizontal enterprise level security…
Added 13 mins ago
Software Consulting Engineer - Core Systems
Avaya
United States
AI-enabled application development involving tool integration, orchestration, or evaluations.
Added 13 mins ago
Principal Software Engineer (Analytics Platform)
Avaya
United States
…reliable, secure, and useful. We are looking for a hands-on engineer who can lead system design across services, data, and infrastructure, then personally carry critical work through…
Added 14 mins ago
WD
Servo Control Engineer
Western Digital
San Jose, CA
- $119,900 to $159,800 USD / year
Must have experience with Matlab and experience in coding C/C++
Added 14 mins ago
WD
Reliability Integration and Failure Analysis Engineer
Western Digital
San Jose, CA
- $77,900 to $103,800 USD / year
WD is seeking a Drive Failure Analysis and Reliability Integration Engineer to join the Hyperscale HDD Development Team. In this role, you will help identify causes of HAMR and ePMR HDD…
Added 14 mins ago
WD
Software Engineer
Western Digital
San Jose, CA
- $110,900 to $147,800 USD / year
As a System Tools Software Engineer, you'll create the software that powers engineering teams and next-generation products. You'll design, develop, test, and improve tools that make systems…
Added 14 mins ago
WD
Summer 2027 Intern - Software Engineering
Western Digital
San Jose, CA
- $34.52 to $46 USD / hour
As an Applications Software Engineer, you'll develop applications that support employees, customers, and business operations. You'll design, build, test, and improve software used across…
Added 14 mins ago
WD
Hardware Engineer
Western Digital
San Jose, CA
- $91,100 to $121,500 USD / year
As a Hardware Development Engineer, you’ll help develop the technologies that make modern data storage faster, more reliable, and higher capacity. You’ll design, prototype, validate, and…
Added 14 mins ago
WD
Summer 2027 Intern - Hardware Engineering
Western Digital
San Jose, CA
- $34.52 to $46 USD / hour
As a Hardware Development Engineer, you’ll help develop the technologies that make modern data storage faster, more reliable, and higher capacity. You’ll design, prototype, validate, and…
Added 15 mins ago
Sr Software Engineer
ServiceNow
San Diego, CA
It all started when engineer Fred Luddy wrote code that automated a tedious task for his coworker, Phyllis. She cried tears of joy. That moment inspired Fred to build a company that could…
Added 15 mins ago
Sales CRM Account Executive
ServiceNow
Remote, United States
It all started when engineer Fred Luddy wrote code that automated a tedious task for his coworker, Phyllis. She cried tears of joy. That moment inspired Fred to build a company that could…
Added 15 mins ago
Sales CRM Account Executive
ServiceNow
Remote, United States
It all started when engineer Fred Luddy wrote code that automated a tedious task for his coworker, Phyllis. She cried tears of joy. That moment inspired Fred to build a company that could…

CFGI

Network/Cloud Infrastructure Security Engineer

United States

Apply on jobs.lever.co About employer

Applications open in a new tab.

Job details

Posting language: English
Posted: Nov 10, 2026

Original job description

Position Overview

CFGI is seeking a full-time Network/Cloud Infrastructure Security Engineer to join its corporate Information Technology department, reporting to the Director of Information Technology. This hands-on role owns the identity, access, and cloud foundations behind more than 1,400 users across domestic and international offices, including Microsoft Entra ID, Azure, GitHub, Linear, Jira, and other business-critical applications.

As a professional services firm entrusted with sensitive client financial data, CFGI must meet the security expectations of public companies, private equity sponsors, and auditors, and this role turns those expectations into practical, well-documented controls. The engineer is the primary resource for Identity and Access Management (“IAM”) and infrastructure requests from product development, an escalation point for the IT team, and a partner to IT Service Management and functions across the firm.

Core Responsibilities

Cloud Infrastructure and Architecture

Design, build, and maintain secure Azure environments, including landing zones, subscription structure, networking, and resource governance.
Implement and manage infrastructure as code (Terraform, Bicep) and Azure Policy to keep cloud environments consistent, governed, and auditable.
Plan and execute tenant, domain, and workload migrations, including Microsoft 365 tenant-to-tenant moves related to acquisitions and expansion.
Maintain backup and disaster recovery for critical systems, and plan for future multi-cloud expansion, such as AWS.

Identity and Access Management

Administer and improve Microsoft Entra ID, including Conditional Access, MFA and passwordless authentication, identity protection, and least-privilege RBAC across Azure and Microsoft 365.
Create and manage Entra ID enterprise applications and app registrations, including SAML/OIDC SSO, SCIM provisioning, API permissions and admin consent, app owners, and certificate and secret expiration.
Manage identity and access for GitHub, Linear, and Jira, including Entra ID SSO, SCIM provisioning, team and project permissions, access reviews, and timely offboarding.
Enforce GitHub security best practices, including branch protection, required reviews, secret scanning, OIDC federation from GitHub Actions to Azure, and audit log streaming to Microsoft Sentinel.
Serve as the primary contact for IAM requests from product development and an escalation point for the IT team on infrastructure and IAM tickets, tracked through Zoho ServiceDesk.
Manage guest and external access for client collaboration in Teams and SharePoint, balancing productivity with confidentiality.

Security and Data Protection

Design and improve security controls across Microsoft Defender and Defender for Cloud, and remediate posture findings using Microsoft Secure Score and CIS Benchmarks.
Manage Microsoft Sentinel data connectors and detection rules, and lead incident response for cloud and identity threats alongside the Director of IT and the firm’s managed 24/7 SOC provider.
Secure email, web, and SaaS access through Exchange Online, Mimecast, and Zscaler policy design.
Create and manage Azure Key Vaults, including RBAC-based access, managed identity integration, and rotation and expiration monitoring for secrets, certificates, and keys.
Design SharePoint and OneDrive permissions, Multi-Geo data residency, and Microsoft Purview sensitivity labels, DLP, and retention policies.

Automation and Integration

Automate administrative and security tasks using PowerShell, Microsoft Graph, Python, and the Azure CLI.
Build workflow automations with Power Automate, Logic Apps, and REST APIs across IT and business platforms.
Ensure AI tools and integrations meet CFGI’s identity, data, and security standards.

Compliance and Client Assurance

Provide architecture documentation and technical evidence for SOC 2, ISO 27001, and client-driven security reviews.
Support responses to client security questionnaires and due diligence requests on cloud, identity, and data protection controls.
Evaluate the security of new vendors and SaaS applications before they are connected to CFGI’s identity provider or data.

Documentation and Knowledge Transfer

Maintain architecture diagrams, standards, runbooks, and change records, following change management practices for all environments this role owns.
Train IT Specialists on identity, Intune, and cloud administration.

Qualifications

What you must have

5+ years of experience in cloud infrastructure, systems engineering, identity, or security engineering.
Experience administering and engineering Microsoft 365 and Azure environments, including at least 2 years of hands-on experience.
Working knowledge of information security control frameworks.

What sets you apart

Experience engineering identity and access controls, including conditional access, multifactor authentication, privileged identity management, role-based access, enterprise application integration, and hybrid identity.
Experience administering cloud infrastructure, including networking, compute, storage, and resource governance.
Experience administering source-code hosting organizations, including single sign-on, automated provisioning, team-based permissions, branch protection, secret scanning, and secure credential handling for CI/CD workflows.
Proficiency in administrative scripting and API-based automation.
Experience with infrastructure as code and version control.
Experience with Microsoft Entra ID, including enterprise applications, app registrations, Active Directory, and Entra Connect / Cloud Sync.
Experience administering GitHub organizations and securing GitHub Actions.
Proficiency with PowerShell and Microsoft Graph.
Experience with Terraform, Bicep, or ARM, and Git.
Working knowledge of frameworks such as CIS, NIST CSF, SOC 2, or ISO 27001.
Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field, or equivalent professional experience.

Nice to have

Certifications such as Microsoft SC-300, AZ-104, AZ-500, AZ-305, GitHub Administration, or AWS Solutions Architect – Associate.
Working knowledge of AWS, including IAM, IAM Identity Center federation with Entra ID, AWS Organizations, and core security services such as CloudTrail, GuardDuty, and Security Hub.
Experience administering Jira, including Atlassian Guard, or Linear.
Experience in professional services, accounting, or financial services, including supporting client audits and security questionnaires.

Additional Information

Location

Primarily remote, with in-person work when required.
Eastern Time Zone, in the Northeast or Southeast US.
Occasional travel for projects or company events.

Apply on jobs.lever.co About employer

Report this job

Work requirements

Jobs in the United States