IT Security Engineer

Overview

Pattern Energy is a leading renewable energy company that develops, constructs, owns, and operates high-quality wind and solar generation, transmission, and energy storage facilities. Our mission is to transition the world to renewable energy through the sustainable development and responsible operation of facilities with respect for the environment, communities, and cultures where we have a presence. Our approach begins and ends with establishing trust, accountability, and transparency. Our company values of creative spirit, pride of ownership, follow-through, and a team-first attitude drive us to pursue our mission every day. Our culture supports our values by fostering innovative and critical thinking and a deep belief in living up to our promises. Headquartered in the United States, Pattern has a global portfolio of more than 30 power facilities and transmission assets, serving various customers that provide low-cost clean energy to millions of consumers.

Responsibilities

The Senior IT Security Engineer is responsible for developing and executing cybersecurity strategy and architecture while designing, implementing, and continuously improving security controls across Pattern and its subsidiaries’ enterprise IT and cloud environments.

The position serves as a senior technical authority for IT security, translating cybersecurity strategy, risk, and business requirements into scalable security architectures, technical standards, and engineering solutions. The role partners closely with IT Operations, Security

Operations, Business Applications, Enterprise Architecture, and third-party technology and security providers to reduce cyber risk and strengthen the organization’s overall security posture.

KEY ACCOUNTABILITIES

1. Develop and execute Security strategy and roadmap. Identify capability gaps, emerging risks, and opportunities to improve

security maturity, and translate business and cybersecurity objectives into prioritized technical initiatives.

2. Define and maintain security architecture principles, patterns, and reference architectures across cloud and enterprise IT. Lead

security architecture reviews for new technologies, applications, infrastructure, and significant changes, providing risk-based

design requirements and recommendations.

3. Design, implement, and continuously improve security controls across Azure, Microsoft 365, Microsoft Defender, Entra ID, Intune,

endpoints, servers, networks, and other enterprise technologies.

4. Develop and maintain security standards, secure configuration baselines, architecture requirements, hardening guidance, and

engineering documentation. Ensure technical controls align with the organization's security strategy and frameworks such as NIST

Cybersecurity Framework 2.0.

5. Lead vulnerability and security exposure management across enterprise IT systems, including identification, technical risk

assessment, prioritization, mitigation strategy, remediation coordination, and risk tracking. Evaluate emerging vulnerabilities

and threats to determine potential organizational impact.

6. Evaluate security technologies and make recommendations regarding architecture, adoption, configuration, integration, consolidation, and retirement. Ensure security investments provide appropriate risk reduction while balancing operational requirements, integration complexity, and cost.
7. Partner with Security Operations to improve detection, logging,SIEM, EDR/XDR, and security monitoring integrations. Provide

senior technical expertise during significant cybersecurity incidents, including containment, remediation, recovery, and implementation of longer-term corrective controls.

8. Serve as a senior cybersecurity technical authority and trusted advisor to Security, IT Operations, Enterprise Architecture,

Business Applications, and technology leadership. Provide technical direction on complex security issues, mentor other

engineers, influence secure technology decisions, and work with MSSP/MDR, network, cloud, and other external partners to

ensure security requirements are effectively implemented.

Qualifications

• 7+ years of experience in Information Security Engineering, Cybersecurity Engineering, Infrastructure Security or other applicable fields.
• Demonstrated experience developing and executing security strategy, technical roadmaps, and target-state security architectures, including identifying capability gaps and translating organizational risk into prioritized security initiatives.
• Strong experience with security architecture and design, including architecture reviews, threat-informed design, defense-in-depth, Zero Trust principles, reference architectures, security patterns, and development of technical security standards.
• Strong understanding of the Microsoft suite (MS Defender, Intune, Azure/Entra, M365).
• Experience applying recognized cybersecurity frameworks and practices, particularly NIST Cybersecurity Framework (CSF), NIST SP 800-53, CIS Controls, CIS Benchmarks, and Zero Trust architecture principles.
• Experience working with MSSP’s, MSNP’s, or other external SOC/MDR providers.
• Strong documentation, communication, and cross functional collaboration skills.
• Certifications such as CISSP, CCSP, CRISC, CCNA/CCNP, etc are beneficial.

The expected starting pay range for this role is $111,000 - $139,000 USD. This range is an estimate and base pay may be above or below the ranges based on several factors including but not limited to location, work experience, certifications, and education. In addition to base pay, Pattern’s compensation program includes a bonus structure for full-time employees of all levels. We also provide a comprehensive benefits package which includes medical, dental, vision, short and long-term disability, life insurance, voluntary benefits, family care benefits, employee assistance program, paid time off and bonding leave, paid holidays, 401(k)/RRSP retirement savings plan with employer contribution, and employee referral bonuses.

Pattern Energy Group is an Equal Opportunity Employer.