Sr Cybersecurity Engineer

Sr Cybersecurity Engineer

As a CBRE Sr Cybersecurity Engineer, you will support and secure global enterprise scale Active Directory (AD), Entra ID (Azure AD), and their underlying components in a hybrid environment. You will play a key role in authentication, automation, and monitoring, ensuring the integrity and availability of directory services for our organization. This job is part of the Cybersecurity job function. They are responsible for identifying security risks and developing procedures to prevent future incidents.

What You'll Do:

• Architect, implement, and maintain secure directory systems, including AD and Entra ID environments (on-premises and cloud).
• Serve as a subject matter expert for authentication and directory facilitated authorization.
• Investigate and resolve security vulnerabilities related to directory system components.
• Lead and contribute to global projects enabling and supporting directory services.
• Develop and maintain automated solutions for monitoring and managing directory service components at scale.
• Provide L3 support for critical directory service components, including troubleshooting and resolving complex authentication and directory issues.
• Collaborate with a globally distributed team, with members located in different regions.
• Manage and provide guidance related to permissions, group policies, and access controls for AD and Entra ID.
• Collaborate with IT and security teams to ensure compliance and best practices.
• Document processes, configurations, and incident responses.
• Lead by example and model behaviors that are consistent with CBRE RISE values.
• Impact the achievement of customer, operational, project, or service objectives across multi-discipline teams.
• Work is guided by functional policies which impact the design of procedures and policies.
• Communicate difficult and complex ideas with the ability to influence.

What You'll Need:

To perform this job successfully, an individual will need to perform each crucial duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform essential functions.

• Bachelor's Degree preferred with 8-10 years of relevant experience with 3+ years supporting enterprise or government-level directory services (AD, Entra ID/Azure AD). In lieu of a degree, a combination of experience and education will be considered.
• In depth understanding of AD and Entra ID architecture, permissions, and security best practices.
• Expertise with Active Directory, Entra ID, Azure, AWS, GCP, DNS, Entra Conditional Access, Entra Connect, and Federation.
• Strong scripting and automation skills (PowerShell, Python, or similar).
• Expertise in authentication protocols (Kerberos, SAML, OAuth, etc.).
• Experience with monitoring tools and SIEM platforms.
• Excellent troubleshooting, communication, and documentation skills.
• Relevant certifications (preferred): Microsoft Certified, CISSP, etc.
• The innovative mentality to develop methods that go beyond existing solutions.
• Ability to solve unique problems using standard and innovative solutions having a broad impact on the business.
• Expert organizational skills with an advanced inquisitive mindset.

Why CBRE:

When you join CBRE, you become part of the global leader in commercial real estate services and investment that helps businesses and people thrive. We are dynamic problem solvers and forward-thinking professionals who create significant impact. Our collaborative culture is built on our shared values — respect, integrity, service and excellence — and we value the diverse perspectives, backgrounds and skillsets of our people. At CBRE, you have the opportunity to chart your own course and realize your potential. We welcome all applicants.

Our Values in Hiring:

At CBRE, we are committed to fostering a culture where everyone feels they belong. We value diverse perspectives and experiences, and we welcome all applications.

Disclaimers:

Applicants must be currently authorized to work in the United States without the need for visa sponsorship now or in the future.

Applicant AI Use Disclosure:

We value human interaction to understand each candidate's unique experience, skills and aspirations. We do not use artificial intelligence (AI) tools to make hiring decisions, and we ask that candidates disclose any use of AI in the application and interview process.

About CBRE Group, Inc.

CBRE Group, Inc. (NYSE:CBRE), a Fortune 500 and S&P 500 company headquartered in Dallas, is the world's largest commercial real estate services and investment firm (based on 2024 revenue). The company has more than 140,000 employees (including Turner & Townsend employees) serving clients in more than 100 countries. CBRE serves clients through four business segments: Advisory (leasing, sales, debt origination, mortgage serving, valuations); Building Operations & Experience (facilities management, property management, flex space & experience); Project Management (program management, project management, cost consulting); Real Estate Investments (investment management, development). Please visit our website at

Equal Employment Opportunity:

CBRE has a long-standing commitment to providing equal employment opportunity to all qualified applicants regardless of race, color, religion, national origin, sex, sexual orientation, gender identity, pregnancy, age, citizenship, marital status, disability, veteran status, political belief, or any other basis protected by applicable law.

Candidate Accommodations:

CBRE values the differences of all current and prospective employees and recognizes how every employee contributes to our company's success. CBRE provides reasonable accommodations in job application procedures for individuals with disabilities. If you require assistance due to a disability in the application or recruitment process, please submit a request via email at View email address on click.appcast.io or via telephone at View phone number on click.appcast.io (U.S.) and View phone number on click.appcast.io (Canada).