Jobs in the United States

25+ jobs

Group jobs by employerEmail me new jobs Save this search

Added just now
SENIOR DATA ENGINEER
H. Lee Moffitt Cancer Center and Research Institute, Inc.
United States
The Senior Data Engineer, as a member of the Data Engineering team, will provide expertise in the design, deployment, and maintenance of data engineering frameworks that support Enterprise…
Added 1 min ago
Senior Software Engineer (Remote)
Govcio LLC
United States
GovCIO is seeking an experienced Senior Software Engineer to support the Department of Veterans Affairs (VA) Data Modernization initiative. The engineer will lead the design, development,…
Added 1 min ago
Site Reliability Engineer, Lead
Precision Solutions
Chantilly, VA
As a Lead Site Reliability Engineer (SRE) on our team, you’ll be responsible for ensuring the reliability, performance, scalability, and security of critical production systems and…
Added 2 mins ago
Senior Data Engineer
Scenthound Franchising
Palm Beach Gardens, FL
Great growth starts with data people can trust. As our Senior Data Engineer, you will build the foundation that shows us how customers find us, what drives growth, and where to invest next.
Added 2 mins ago
Security Engineer
John Deere
IL · Deer Creek
As a Security Engineer for John Deere World headquarters located Remotely or Moline, IL, you will be:
Added 3 mins ago
Sales Engineer
Airlock Digital
United States
The Sales Engineer serves as a technical resource in the sales process, providing deep cybersecurity expertise, conducting product demonstrations, and supporting proof-of-concept (POC)…
Added 3 mins ago
Sales Engineer
Airlock Digital
United States
The Sales Engineer serves as a technical resource in the sales process, providing deep cybersecurity expertise, conducting product demonstrations, and supporting proof-of-concept (POC)…
Added 3 mins ago
Azure Platform Engineer
ICF Incorporated, LLC
Reston, VA
You will own real infrastructure and operations, building Infrastructure as Code, automation solutions, CI/CD pipelines, security controls, and governance frameworks that keep the platform…
Added 5 mins ago
Journeyman Electrician
GD Information Technology, Inc.
United States
The Electronics Engineer must have: · Valid Journeyman Electrician License Required
Added 5 mins ago
Unified Endpoint Management (UEM) Engineer
GD Information Technology, Inc.
United States
The UEM Engineer must have:
Added 5 mins ago
Sr. F5 Application Delivery Engineer
GD Information Technology, Inc.
United States
Must have F5 Certified Technology Specialist (F5-CTS) Certification
Added 6 mins ago
Lead Service Delivery Engineer
Wells Fargo Bank, N. A.
IRVING, TX · CHARLOTTE, NC
…enablement, CI/CD, service health, technical readiness, performance, security, and self-service capabilities. The Lead Service Delivery Engineer partners across application, platform, and…
Added 6 mins ago
Lead Infrastructure as Code (HashiCorp & Infrastructure Tooling)
Wells Fargo Bank, N. A.
IRVING, TX · CHARLOTTE, NC
Candidates must have intermediate to advanced systems engineering experience in medium to large Enterprise environments · Must have extensive experience with Linux Server operating systems, Red Hat preferred
Added 6 mins ago
Lead Automation Software Engineer
Wells Fargo Bank, N. A.
CONCORD, CA · CHANDLER, AZ · SAN ANTONIO, TX · CHARLOTTE, NC · MCLEAN, VA · IRVING, TX · MENLO PARK, CA
Wells Fargo is seeking a Lead Software Engineer for Network Automation and Software development (e.g., Nautobot, Ansible, Python, APIs, Terraform) and a solid understanding of the…
Added 7 mins ago
C
Desktop Support Engineer
CRi
Chantilly, VA
- $60,000 to $65,000 USD / year
The Desktop Support Engineer provides hands-on technical support and maintenance for CRi’s IT systems, ensuring reliable operation of desktops, laptops, and Microsoft-based infrastructure…
Added 9 mins ago
Go-To-Market Engineer
Automox
Remote, United States
…We’re searching for an innovative, results-driven Go-to-Market Engineer who’s excited to execute hands-on, multi-channel marketing strategies that drive predictable engagement and pipeline…
Added 12 mins ago
Senior Forward Deployed Engineer (FDE Lead
ewminds consulting Services
East Pittsburgh, PA
Partner with architecture, security, compliance, and senior technology leadership to align on strategy and governance.
Added 12 mins ago
Senior Vice President, Infrastructure Engineering (Mainframe Communications Systems Software Engineer
ewminds consulting Services
Jersey City, NJ
(SVP) Senior Vice President, Infrastructure Engineering (Mainframe Communications Systems Software Engineer)
Added 12 mins ago
S
Senior Construction Manager- Federal Projects
SIRIS
Washington, DC
- $120,000 to $130,000 USD / year
We partner with organizations delivering mission-critical infrastructure where safety, reliability, and regulatory compliance are essential. Our teams bring technical expertise, disciplined…
Added 12 mins ago
Principal Cloud Infrastructure Engineer
Fujifilm
United States
Join a high-impact Global I&O team shaping the future of FUJIFILM Biotechnologies' mission-critical cloud infrastructure. As our Principal Cloud Infrastructure Engineer, you will be the…
Added 14 mins ago
Sr. Cyber Security Engineer, Security Validation
CHS
Franklin, TN
As a Senior Cybersecurity Engineer in the Security Validation team, you will be a key member of our Red Team operations, assist in efforts to emulate real-world threat scenarios and…
Added 18 mins ago
S
Forward Deployed Engineer
Skillable
Remote, United States
- $90,000 to $120,000 USD / year
The Forward Deployed Engineer is a technical force multiplier who immerses within the Revenue Technology & Solutions (RevTech), Professional Services and adjacent frontline teams to turn…
Added 18 mins ago
SECURITY ENGINEER
City of Fort Myers
FL
Must possess a valid Florida Driver's License with acceptable driving record · Must possess a valid Florida Driver’s License with acceptable driving record
Added 19 mins ago
Sr. Oracle Cloud Engineer I
MetroStar
Washington, DC
Ability to work onsite in downtown Washington, DC four days per week
Added 19 mins ago
Azure Cloud Engineer
MetroStar
Washington, DC
Ability to work onsite in downtown Washington, DC four days per week

CFGI

Network/Cloud Infrastructure Security Engineer

United States

Apply on jobs.lever.co About employer

Applications open in a new tab.

Job details

Posting language: English
Posted: Nov 10, 2026

Original job description

Position Overview

CFGI is seeking a full-time Network/Cloud Infrastructure Security Engineer to join its corporate Information Technology department, reporting to the Director of Information Technology. This hands-on role owns the identity, access, and cloud foundations behind more than 1,400 users across domestic and international offices, including Microsoft Entra ID, Azure, GitHub, Linear, Jira, and other business-critical applications.

As a professional services firm entrusted with sensitive client financial data, CFGI must meet the security expectations of public companies, private equity sponsors, and auditors, and this role turns those expectations into practical, well-documented controls. The engineer is the primary resource for Identity and Access Management (“IAM”) and infrastructure requests from product development, an escalation point for the IT team, and a partner to IT Service Management and functions across the firm.

Core Responsibilities

Cloud Infrastructure and Architecture

Design, build, and maintain secure Azure environments, including landing zones, subscription structure, networking, and resource governance.
Implement and manage infrastructure as code (Terraform, Bicep) and Azure Policy to keep cloud environments consistent, governed, and auditable.
Plan and execute tenant, domain, and workload migrations, including Microsoft 365 tenant-to-tenant moves related to acquisitions and expansion.
Maintain backup and disaster recovery for critical systems, and plan for future multi-cloud expansion, such as AWS.

Identity and Access Management

Administer and improve Microsoft Entra ID, including Conditional Access, MFA and passwordless authentication, identity protection, and least-privilege RBAC across Azure and Microsoft 365.
Create and manage Entra ID enterprise applications and app registrations, including SAML/OIDC SSO, SCIM provisioning, API permissions and admin consent, app owners, and certificate and secret expiration.
Manage identity and access for GitHub, Linear, and Jira, including Entra ID SSO, SCIM provisioning, team and project permissions, access reviews, and timely offboarding.
Enforce GitHub security best practices, including branch protection, required reviews, secret scanning, OIDC federation from GitHub Actions to Azure, and audit log streaming to Microsoft Sentinel.
Serve as the primary contact for IAM requests from product development and an escalation point for the IT team on infrastructure and IAM tickets, tracked through Zoho ServiceDesk.
Manage guest and external access for client collaboration in Teams and SharePoint, balancing productivity with confidentiality.

Security and Data Protection

Design and improve security controls across Microsoft Defender and Defender for Cloud, and remediate posture findings using Microsoft Secure Score and CIS Benchmarks.
Manage Microsoft Sentinel data connectors and detection rules, and lead incident response for cloud and identity threats alongside the Director of IT and the firm’s managed 24/7 SOC provider.
Secure email, web, and SaaS access through Exchange Online, Mimecast, and Zscaler policy design.
Create and manage Azure Key Vaults, including RBAC-based access, managed identity integration, and rotation and expiration monitoring for secrets, certificates, and keys.
Design SharePoint and OneDrive permissions, Multi-Geo data residency, and Microsoft Purview sensitivity labels, DLP, and retention policies.

Automation and Integration

Automate administrative and security tasks using PowerShell, Microsoft Graph, Python, and the Azure CLI.
Build workflow automations with Power Automate, Logic Apps, and REST APIs across IT and business platforms.
Ensure AI tools and integrations meet CFGI’s identity, data, and security standards.

Compliance and Client Assurance

Provide architecture documentation and technical evidence for SOC 2, ISO 27001, and client-driven security reviews.
Support responses to client security questionnaires and due diligence requests on cloud, identity, and data protection controls.
Evaluate the security of new vendors and SaaS applications before they are connected to CFGI’s identity provider or data.

Documentation and Knowledge Transfer

Maintain architecture diagrams, standards, runbooks, and change records, following change management practices for all environments this role owns.
Train IT Specialists on identity, Intune, and cloud administration.

Qualifications

What you must have

5+ years of experience in cloud infrastructure, systems engineering, identity, or security engineering.
Experience administering and engineering Microsoft 365 and Azure environments, including at least 2 years of hands-on experience.
Working knowledge of information security control frameworks.

What sets you apart

Experience engineering identity and access controls, including conditional access, multifactor authentication, privileged identity management, role-based access, enterprise application integration, and hybrid identity.
Experience administering cloud infrastructure, including networking, compute, storage, and resource governance.
Experience administering source-code hosting organizations, including single sign-on, automated provisioning, team-based permissions, branch protection, secret scanning, and secure credential handling for CI/CD workflows.
Proficiency in administrative scripting and API-based automation.
Experience with infrastructure as code and version control.
Experience with Microsoft Entra ID, including enterprise applications, app registrations, Active Directory, and Entra Connect / Cloud Sync.
Experience administering GitHub organizations and securing GitHub Actions.
Proficiency with PowerShell and Microsoft Graph.
Experience with Terraform, Bicep, or ARM, and Git.
Working knowledge of frameworks such as CIS, NIST CSF, SOC 2, or ISO 27001.
Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field, or equivalent professional experience.

Nice to have

Certifications such as Microsoft SC-300, AZ-104, AZ-500, AZ-305, GitHub Administration, or AWS Solutions Architect – Associate.
Working knowledge of AWS, including IAM, IAM Identity Center federation with Entra ID, AWS Organizations, and core security services such as CloudTrail, GuardDuty, and Security Hub.
Experience administering Jira, including Atlassian Guard, or Linear.
Experience in professional services, accounting, or financial services, including supporting client audits and security questionnaires.

Additional Information

Location

Primarily remote, with in-person work when required.
Eastern Time Zone, in the Northeast or Southeast US.
Occasional travel for projects or company events.

Apply on jobs.lever.co About employer

Report this job

Work requirements

Jobs in the United States