IT - Cybersecurity Engineer

Overview

The Cybersecurity Engineer is focused on hardening infrastructure across servers and networks, as well as Microsoft Defender, Intune, Purview, and Entra ID deployments. This role will involve deploying and tuning SIEM solutions such as Rapid7 and managing Identity Governance and Administration and Privileged Access Management solutions. This role will also be involved in the architecture review of existing solutions and may assist in the design of new solutions. This position is ideal for someone who thrives in a fast-paced, project-driven environment and can bring deep technical expertise to strengthen security, compliance, and resilience.

The Cybersecurity Engineer needs to be an agile, team-focused individual, with proven professionalism, who is comfortable in a rapidly changing environment. The right person is trustworthy with confidential information, highly organized, self-motivated and self-documenting, has excellent communication skills, can think strategically, and works equally as well independently as with a team. Edged strives to maintain smooth operations and achieves this by empowering our people, by providing autonomy and flexibility in the way we work, by developing a habit of constant, open communication, and by creating a culture of excellence, appreciation, trust, and respect.

Key Responsibilities
Include but are not limited to:
Cybersecurity & Monitoring

Design, implement, and optimize co-sourced SIEM solutions (e.g., Rapid7, Arctic Wolf, etc.).
Configure and troubleshoot log ingestion from Azure, Microsoft 365, on-prem servers, and network devices.
Support incident detection, response workflows, and forensic readiness.
Define, implement and manage the Edged vulnerability management program
Manage and refine use of tools in Microsoft 365 security, including Defender, Intune, Purview, and Entra ID.

IAM / IGA

Support, troubleshoot, and guide a modern identity access management and identity governance program, based on Zero-trust principles.
Engineer and support a rollout of PAM, ZTNA, SASE solution(s).

Infrastructure Hardening

Assist, guide, and support IT in hardening Windows/Linux servers, network infrastructure, backups, hypervisor, and Azure environments according to security best practices.
Propose network segmentation, firewall tuning, and secure configuration baselines.
Implement and enforce compliance-aligned controls (SOC 2, ISO 27001, PCI).

Project Leadership

Lead cybersecurity projects such as cloud security enhancements, PAM deployments, SIEM deployments, and disaster recovery implementations.
Work cross-functionally with IT, operations, and physical security teams to align technical solutions with business requirements.

System Engineering

Engineer, manage, and operate servers and applications hosting cybersecurity tooling and services.
Develop scripts and automation to enforce security baselines and streamline configuration, and cybersecurity tooling requirements.
Support secure integration of business applications into Edged infrastructure and identity control planes.

Architecture

Review and assess existing infrastructure and security architectures, identifying areas for improvement.
Contribute to the design of new systems and solutions, ensuring scalability, security, and compliance.
Provide guidance on secure architectures for cloud, on-premises, and hybrid environments.

Skills & Requirements
Education / Experience

7+ years of Cybersecurity engineering experience with a strong focus on Identity, Endpoint protection, and SIEM.
Demonstrated experience with server, Azure, and network hardening and management.
Hands-on experience managing SIEM solutions (Rapid7, Arctic Wolf, or similar) and responding to security events as well as managing Microsoft Defender security.
Proven experience with Identity Access Management and Identity Governance and Administrative programs, including familiarity with Entra ID, Azure, AD, SSO, SCIM, Conditional Access, and PAM implementations.
Strong knowledge of compliance and security frameworks (SOC 2, ISO 27001, PCI).
Bachelor’s degree in Information Technology, Computer Science, or related field preferred (or equivalent experience).
Certifications (e.g., Security+, CISSP, AZ-500) are a plus but not required.
Experience with JIRA and InTune is a plus.

Specific Skills / Abilities

Proficiency in automation and scripting (PowerShell, Python, or Bash).
Ability to design, review, and improve infrastructure and security architectures.
Strong troubleshooting and problem-solving skills across complex IT environments.
Ability to work independently and manage multiple priorities.
Strong written and verbal communication skills, with the ability to collaborate across technical and non-technical teams.
Self-starter with initiative and accountability for delivering results.
Ability to self-document as solutions are engineered and decisions are made.
Ability to communicate technical risks, solutions, and architectural recommendations to both technical and business stakeholders.
Ability to travel up to 10% to data center locations and adapt to a dynamic work environment.
Positive attitude with a proactive approach to addressing challenges.