Note: The job is a remote job and is open to candidates in USA. Worldwide Clinical Trials is a global clinical research organization focused on improving lives through innovative, high-quality clinical research. The Senior Security Engineer will own and mature Microsoft and Azure security capabilities across identity, endpoints, cloud, and networks, with a focus on Entra ID, privileged access, Azure Key Vault, endpoint application control, and Microsoft Sentinel. The role will also provide technical direction, automation, infrastructure-as-code, and operational standards as a senior individual contributor.
Responsibilities
- The enterprise secrets-management service on Azure Key Vault. Provisioning, access governance, rotation and recovery, separation of duties, and lifecycle. Kept healthy and audit-ready as the environment grows
- Azure privileged-access controls end to end: RBAC, PIM, restricted administration, approvals, and access reviews, evolving them alongside IAM's Entra ID and Conditional Access direction to keep escalation risk low as the tenant scales
- Azure security baselines across tenants, subscriptions, and workloads including identity, logging and monitoring, network segmentation, encryption, and posture. Maintained and improved as new services come online
- The endpoint application-control and PowerShell-hardening capability, from standards and work instructions through exception handling and ongoing tuning, in partnership with endpoint engineering and application owners
- Developing Microsoft Sentinel detection and automation for privileged-access, Active Directory, and Azure high-risk events, growing the analytics and playbook library in step with Security Operations' runbooks and response processes
- Automation and Infrastructure-as-Code practices that make secure, policy-based configuration the default and reduce manual effort over time
- Technical direction for your services: design reviews, production-readiness and rollback standards, documentation, and the operational runbooks that let the wider team support what you build
- Undefined
- Perform other duties as assigned. The duties and responsibilities listed above are representative of the nature and level of work assigned and are not necessarily all-inclusive
Skills
- Endpoint application control, PowerShell security, and code-signing depth
- Experience with Active Directory
- Experience with Zscaler (ZIA, ZPA, or ZDX)
- Experience in a GxP-regulated, clinical-research, healthcare, or pharmaceutical environment
- Microsoft AZ-500 or SC-300 certification; CISSP or CCSP a plus
- Bachelor's degree in Computer Science, Information Technology, or related field with a minimum of 5 years of experience in enterprise security engineering, with at least 2 years directly supporting Zscaler solutions or high school diploma/GED with a minimum of 7 years of experience in enterprise security engineering, with at least 2 years directly supporting Zscaler solutions
- Hands-on experience with ZIA, ZPA, and ZDX in a production environment
- Strong understanding of cloud security concepts, identity management, and Zero Trust principles
- Experience with automation for security operations and policy management using APIs
- Zscaler certifications (ZCCA-IA, ZCCA-PA, ZCCP) are highly desirable
Benefits
- Remote work arrangement
- In addition to base salary, we offer a competitive benefits package depending on location.
Company Overview
Company H1B Sponsorship