Senior Cloud & Security Engineer
Position Description:
The Senior Cloud & Security Engineer to serve as the senior technical counterpart to the Director of Security & Technology. This role owns KPA 's cloud infrastructure, security platforms, identity, automation, and technical modernization initiatives. The ideal candidate is a hands-on engineer with strong cloud and systems experience, a security-first mindset, and the ability to independently lead complex technical projects that improve KPA 's security, scalability, and operational maturity.
Responsibilities:
Security Engineering
- Own KPA 's enterprise security platforms including CrowdStrike, Rapid7, Cisco Umbrella, Cisco Duo and related technologies.
- Lead vulnerability management & remediation, endpoint security, identity security, privileged access, penetration testing, and security hardening initiatives.
- Investigate and respond to complex security incidents while partnering with the IT Operations team on security and infrastructure escalations.
- Own the technical implementation and ongoing operation of infrastructure-related SOC 2 controls and security audit related requirements.
- Continuously evaluate new technologies and recommend improvements that strengthen KPA 's overall security posture.
Cloud, Identity & Systems Engineering
- Own Microsoft 365, Entra ID, Exchange Online, Exchange Hybrid modernization, identity architecture, and endpoint management.
- Own Azure infrastructure and AWS workloads outside the DevOps application stack. Partner with DevOps where needed as there is a natural crossover between them and this position.
- Own Cisco Meraki networking, VPN infrastructure, and cloud connectivity.
- Lead technical initiatives including cloud modernization, email domain consolidation, phone system replacement, identity modernization, and enterprise platform upgrades.
Automation, Projects & Technical Leadership
- Lead complex security and cloud projects from planning through implementation and post-change validation.
- Build automation using PowerShell, Microsoft Graph, REST APIs, and leverage AI-assisted development and automation to improve engineering efficiency and reduce manual effort.
- Produce clear technical documentation, implementation plans, rollback procedures, and operational handoffs.
- Proactively identify technical debt, security gaps, and opportunities to improve efficiency through automation and modernization.
Qualifications:
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or equivalent experience.
- 7+ years of experience in cloud infrastructure, systems engineering, security engineering, or a related senior technical role.
- Strong experience administering Microsoft 365, Entra ID, Azure, Windows Server, Exchange Online, and hybrid identity.
- Experience with enterprise security platforms such as CrowdStrike, Rapid7, Cisco Umbrella, Duo, or equivalent technologies.
- Strong understanding of identity, networking, endpoint management, vulnerability management, and Zero Trust security principles.
- Experience supporting SOC 2 or similar compliance frameworks.
- Relevant certifications such as Microsoft AZ-104, AZ-500, MS-102, SC-300, CompTIA Security+, CISSP, or equivalent certifications are preferred.
- Excellent communication, documentation, project management, and problem-solving skills.
Success Criteria:
- Work ethic that aligns with KPA 's core values:
-
Trust: earning trust through integrity, expertise, and acting in the client's best interest.
-
Innovation: continuously seeking out ways to better serve clients.
-
Excellence: holding ourselves to high standards in everything we do.
-
Results: moving with purpose to deliver meaningful outcomes.
- Provides technical leadership, sound architectural recommendations, and trusted engineering expertise across cloud, infrastructure, and security initiatives.
- Successfully leads cloud modernization and technical security initiatives that improve