IT Security Engineer

Responsibilities Partner with Security Manager to create and maintain security architecture strategy roadmap. Develop and implement security tools to assist in detection, prevention, and analysis of security threats. Act as subject matter expert for Kleinfelder's identity access management program for both internal and external identities, design, implement, and support IAM best practice configurations. Partner with DevOps and engineering teams to embed security controls into CI/CD pipelines and application architectures, ensuring secure‑by‑design implementations throughout the SDLC. Manage Kleinfelder's vulnerability management program and partner with other IT members to discover and remediate system vulnerabilities, document results, and recommend risk minimization. Act as technical leader for security project implementations requiring compliance with customer and corporate policies and standards. Represent security on the change advisory board (CAB) and software approval board for changes in software, hardware, facilities, telecommunications, and user needs. Monitor, tune, and respond to SIEM security incidents, e.g., system compromise, loss of confidentiality, authentication problems, etc. Conduct internal and external security audits, third‑party risk assessments, and security analyses to align with compliance standards. Document, maintain, and update cybersecurity policies and procedures with internal IT stakeholders. Recommend and install upgrades to security controls to mitigate risks. Research and evaluate new security technology, techniques, and industry best practices to minimize threats and vulnerabilities. Assist with day‑to‑day cybersecurity responsibilities including managing the spam mailbox, security awareness training, and security incident tickets. Support internal audits and customer assessments to identify risks and determine mitigation actions. Participate in incident response, including steps to minimize impact and conduct technical and forensic investigations. Generate monthly security reports demonstrating overall security maturity. Required Skills / Experience Bachelor's degree or equivalent experience. 7+ years of progressive information security experience supporting enterprise environments. 5+ years of hands‑on experience designing, implementing, and supporting Active Directory and Azure Active Directory, including MFA, SSO, conditional access policies, and password security controls. 3+ years of experience supporting security operations, including incident response, investigation, and remediation through a ticketing or helpdesk system. 3+ years’ experience working with DevOps and engineering teams to integrate security into the SDLC rather than performing after‑deployment reviews. 2+ years of experience leading or contributing to technical security initiatives, collaborating across multiple departments and external IT vendors. Hands‑on experience implementing security controls within CI/CD pipelines (e.g., Azure DevOps or Git‑based workflows), including secure build, deployment, and change management practices. Experience designing, reviewing, or securing Infrastructure as Code (IaC) deployments (e.g., ARM, Bicep, Terraform), focusing on preventing misconfiguration and enforcing guardrails. Experience supporting or securing API‑based solutions, including systems using Azure API Management, for authentication, authorization, and traffic control. Experience securing Microsoft Power Platform solutions, including Power Apps, Power Automate, and Dataverse. Strong experience conducting third‑party/vendor risk assessments, communicating technical risks and remediation options. Experience managing, configuring, and supporting Microsoft advanced threat protection and security monitoring technologies. Working knowledge of Microsoft Information Protection, including sensitivity labels, data classification, and Microsoft Compliance Center configurations. Ability to translate security requirements into clear, actionable technical guidance for engineers and IT teams. Excellent organizational and communication skills. Team player, flexible, willing to undertake a variety of challenging tasks. Can work independently with guidance and direction as appropriate. Following an offer, candidates will be required to satisfactorily complete employment reference checks, verification of professional licensure and/or educational credentials, a motor vehicle report (MVR), and a comprehensive background check. Benefits Medical, dental, vision, life insurance, 401(k) plan, and paid holidays. The expected salary range for the position is displayed in accordance with the California Pay Transparency Law. Final agreed upon compensation is based upon individual qualifications and experience. Salary Range: $75,850-$126,585. Equal Opportunity Kleinfelder, and its’ subsidiaries and affiliates, is an Equal Opportunity Employer – Minorities/Women/Disabled/Veterans. (Compliant with the new VEVRAA and Section 503 rules) #J-18808-Ljbffr Kleinfelder