Lead Security Engineer

Title: Lead Security Engineer Duration: 2 Months Location: New York, NY 10007 (Hybrid - 3 Days Onsite and 2 Days Remote/Week) The Security Lead Consultant will perform the following activities: Security Engineering & Implementation (Within OTI Environment): Implement and configure security controls within OTI-managed Azure and SaaS environments for OpenRecords Configure identity, access management, and role-based access controls (RBAC) for applications and infrastructure Implementation of security configurations for encryption, logging, monitoring, and audit controls Review and validate secure configurations across Azure resources (networking, compute, storage, and application services) Identity & Access Management (IAM) Implementation: Configure and validate SSO, MFA, and Active Directory integrations for OpenRecords Implement role-based access models and least privilege access controls Configure privileged access workflows and administrative access controls User provisioning and access lifecycle processes Perform access validation testing and remediation of identity-related issues Vulnerability Management & Security Operations: Configure and operate vulnerability scanning and assessment tools for OpenRecords environments Review vulnerability scan results and coordinate remediation with infrastructure and application teams Configure and validate security logging, alerting, and dashboarding as part of system implementation Configure SIEM, monitoring, and alerting rules for OpenRecords system Track and validate closure of security findings and misconfigurations Security Architecture Implementation: Participate in technical implementation and design sessions for OpenRecords Review and validate security architecture for cloud, SaaS, APIs, and integrations Ensure security-by-design principles are implemented during development and deployment phases Validate implementation of secure network architecture (segmentation, private endpoints, firewalls) Review vendor security configurations and ensure alignment with approved security requirements Security Tooling & Platform Configuration: Configure security tools used in the OpenRecords environment Implementation of endpoint protection, monitoring, and vulnerability management tools Configure logging, alerting, and security telemetry collection in Log Analytics and SIEM platforms Integration of Microsoft security tooling (Defender, Sentinel, M365 security stack where applicable) Configure alerts Technical Documentation: As-built documentation for documenting all configurations made. Deliverables: Configured identity and access management controls (SSO, MFA, RBAC) for OpenRecords Configure security related monitoring, logging, and alerting for OpenRecords system Security configuration baselines for Azure and integrated SaaS components Security readiness assessment and go-live validation report Documentation of security configuration Mandatory Skills/Experience Note: Candidates who do not have the mandatory skills will not be considered Five years plus experience in the following: Azure Security ( Defender for Cloud , Sentinel , security baselines) Identity & Access Management ( Azure AD, SSO, MFA, RBAC, PAM ) Vulnerability management tools (e.g., Rapid7 , Qualys , or equivalent) SIEM and log analytics (Microsoft Sentinel , Log Analytics Workspace ) Cloud security architecture ( Azure networking , private endpoints , segmentation ) Security tooling : CrowdStrike , Microsoft 365 Security Stack, Cisco security tools Incident response and security operations (SOC processes, triage, escalation ) DevSecOps practices and secure CI/CD integration ( Azure DevOps, pipelines ) Encryption , key management (Key Vault), and data protection controls Strong hands-on implementation and troubleshooting experience in cloud environments Compu-Vision Consulting