Sr. Cybersecurity Engineer
Hands-on senior cybersecurity engineer at Mativ (Alpharetta, GA, hybrid) acting as technical lead for identity & access management, Microsoft Azure/Entra security, DLP/data protection, and cloud security under Zero Trust principles. Day to day covers architecture, implementation, operational support, incident response, and mentoring junior engineers.
- Compensation
- Not disclosed
- Location
- Not listed
- Work setup
- Not specified
- Seniority
- Senior
- Employment
- Contract
- Experience
- 8+ years
- Category
- Security
- Posted
Skills
Must have
- 5-8+ years of cybersecurity engineering experience
- Strong experience with Microsoft Entra ID (Azure AD)
- Strong experience with Active Directory
- Strong experience with Single Sign-On (SSO)
- Strong experience with Multi-Factor Authentication (MFA)
- Strong experience with Conditional Access
- Strong experience with Microsoft Azure
- Strong experience with Microsoft Purview / DLP
- Experience implementing Zero Trust security controls
- Experience with identity governance and access management
- Strong understanding of security frameworks (NIST CSF, CIS Controls, Zero Trust Architecture)
- Experience managing cybersecurity technologies and SaaS integrations
- Strong communication and stakeholder management skills
Nice to have
- CISSP certification
- AZ-500 certification
- SC-100 certification
- SC-300 certification
- Microsoft Security Certifications
- Experience with Varonis
- Experience with BeyondTrust
- Experience with Rapid7
- Experience with Intune
- Experience with Defender Suite
- Experience with ServiceNow
- Experience with PowerShell automation
- Experience with identity governance programs
Full description
Senior Cybersecurity EngineerLocation: Alpharetta, GA (Hybrid Preferred)
Position Summary
The Senior Cybersecurity Engineer is responsible for designing, implementing, and operating cybersecurity solutions that reduce enterprise risk while enabling business transformation. This role serves as the technical lead for Identity & Access Management (IAM), Microsoft Azure/Entra security, Data Loss Prevention (DLP), and cloud security initiatives.
The engineer partners with Infrastructure, Enterprise Architecture, IT Operations, and Business stakeholders to deliver secure, scalable, and compliant solutions aligned with Zero Trust principles.
This is a hands-on engineering role that includes architecture, implementation, operational support, and strategic planning responsibilities.
Key ResponsibilitiesIdentity & Access Management (IAM)
- Lead enterprise IAM initiatives across Microsoft Entra ID, Active Directory, SSO, MFA, Conditional Access, and Privileged Identity Management (PIM).
- Design and maintain role-based access control (RBAC) models.
- Develop contractor, vendor, and third-party identity governance processes.
- Support joiner, mover, and leaver automation initiatives.
- Drive identity modernization and cloud-first identity strategies.
Microsoft Azure & Cloud Security
- Implement and maintain Azure security controls and governance standards.
- Partner with infrastructure teams on secure cloud architecture.
- Review Azure configurations for compliance with Zero Trust principles.
- Support cloud security posture management and risk reduction efforts.
- Assist with cloud migration security reviews and architecture assessments.
Data Protection & DLP
- Design and administer Microsoft Purview and DLP policies.
- Support data classification, labeling, and protection programs.
- Investigate and remediate DLP incidents.
- Partner with Legal, Compliance, HR, and business leaders on sensitive data protection requirements.
- Develop data protection metrics and reporting.
Security Engineering
- Design and implement security controls across endpoint, identity, cloud, and SaaS platforms.
- Support implementation and administration of:
- Microsoft Defender
- Microsoft Intune
- Varonis
- BeyondTrust