Sr. Cybersecurity Engineer

Senior Cybersecurity Engineer

Mativ is a global leader in specialty materials headquartered in Alpharetta, Georgia. The Company offers a wide range of critical components and engineered solutions that connect, protect, and purify our world.

Location

Alpharetta, GA (Hybrid Preferred)

Position Summary

The Senior Cybersecurity Engineer is responsible for designing, implementing, and operating cybersecurity solutions that reduce enterprise risk while enabling business transformation. This role serves as the technical lead for Identity & Access Management (IAM), Microsoft Azure/Entra security, Data Loss Prevention (DLP), and cloud security initiatives.

The engineer partners with Infrastructure, Enterprise Architecture, IT Operations, and Business stakeholders to deliver secure, scalable, and compliant solutions aligned with Zero Trust principles.

This is a hands-on engineering role that includes architecture, implementation, operational support, and strategic planning responsibilities.

Key Responsibilities

Identity & Access Management (IAM)

• Lead enterprise IAM initiatives across Microsoft Entra ID, Active Directory, SSO, MFA, Conditional Access, and Privileged Identity Management (PIM).
• Design and maintain role-based access control (RBAC) models.
• Develop contractor, vendor, and third-party identity governance processes.
• Support joiner, mover, and leaver automation initiatives.
• Drive identity modernization and cloud-first identity strategies.

Microsoft Azure & Cloud Security

• Implement and maintain Azure security controls and governance standards.
• Partner with infrastructure teams on secure cloud architecture.
• Review Azure configurations for compliance with Zero Trust principles.
• Support cloud security posture management and risk reduction efforts.
• Assist with cloud migration security reviews and architecture assessments.

Data Protection & DLP

• Design and administer Microsoft Purview and DLP policies.
• Support data classification, labeling, and protection programs.
• Investigate and remediate DLP incidents.
• Partner with Legal, Compliance, HR, and business leaders on sensitive data protection requirements.
• Develop data protection metrics and reporting.

Security Engineering

• Design and implement security controls across endpoint, identity, cloud, and SaaS platforms.
• Support implementation and administration of:
  • Microsoft Defender
  • Microsoft Intune
  • Varonis
  • BeyondTrust
  • Rapid7
  • Automox
• Develop automation to improve control effectiveness and operational efficiency.
• Participate in architecture reviews and project security assessments.

Risk & Compliance

• Support regulatory and audit initiatives.
• Document security standards, procedures, and technical controls.
• Partner with GRC teams to address audit findings and risk treatment plans.
• Assist with cyber insurance and security assessment activities.

Incident Response & Operations

• Participate in security investigations and incident response activities.
• Recommend and implement corrective actions following incidents.
• Support threat mitigation efforts through engineering improvements.
• Collaborate with Security Operations on detection and response enhancements.

Leadership & Mentorship

• Provide technical guidance to junior engineers and analysts.
• Lead cybersecurity projects and workstreams.
• Act as a subject matter expert for IAM, Azure security, and DLP.
• Contribute to cybersecurity roadmap development and execution.

Required Qualifications

• 5-8+ years of cybersecurity engineering experience.
• Strong experience with:
  • Microsoft Entra ID (Azure AD)
  • Active Directory
  • Single Sign-On (SSO)
  • Multi-Factor Authentication (MFA)
  • Conditional Access
  • Microsoft Azure
  • Microsoft Purview / DLP
• Experience implementing Zero Trust security controls.
• Experience with identity governance and access management.
• Strong understanding of security frameworks such as:
  • NIST CSF
  • CIS Controls
  • Zero Trust Architecture
• Experience managing cybersecurity technologies and SaaS integrations.
• Strong communication and stakeholder management skills.

Preferred Qualifications

• CISSP
• AZ-500
• SC-100
• SC-300
• Microsoft Security Certifications
• Experience with:
  • Varonis
  • BeyondTrust
  • Rapid7
  • Intune
  • Defender Suite
  • ServiceNow
  • PowerShell automation
  • Identity governance programs

WHAT WE OFFER

• Medical, dental and vision insurance
• Consumer-Driven Health Plan (CDHP)
• Preferred Provider Organization (PPO)
• Exclusive Provider Organization (EPO)
• Company-paid basic life insurance and Additional voluntary life coverage
• Paid vacation and competitive personal time off
• 401(k) savings plan with company match
• Employee assistance programs - available 24/7 to you and your family
• Wellness and Work Life Support - career development and educational assistance

ABOUT MATIV

Mativ Holdings, Inc. is a global leader in specialty materials headquartered in Alpharetta, Georgia. The company connects, protects, and purifies the world every day through a wide range of critical components and engineered solutions that solve our customers' most complex challenges. We manufacture on three continents and generate sales in nearly 100 countries through our family of business-to-business and consumer product brands. The company's two segments, Filtration & Advanced Materials and Sustainable & Adhesive Solutions, target premium applications across diversified and growing end-markets, from filtration to healthcare to sustainable packaging and more. Our broad portfolio of technologies combines polymers, fibers, and resins to optimize the performance of our customers' products across multiple stages of the value chain. Our leading positions are a testament to our best-in-class global manufacturing, supply chain, and materials science capabilities. We drive innovation and enhance performance, finding potential in the impossible.

Mativ and its subsidiaries are Equal Opportunity Employers. Qualified applicants will be considered without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

#J-18808-Ljbffr