KPA
Senior Cloud & Security Engineer
Lafayette, CO · Senior
Sponsorship not specifiedDetected 4 days ago
PowerShellAWSAzureCloud PlatformsDevOpsRESTCybersecurityPenetration TestingComplianceProject ManagementSystems EngineeringVPNCiscoZero TrustLeadershipCommunicationProblem SolvingCISSPCompTIA
About the role
- Position Description: The Senior Cloud & Security Engineer to serve as the senior technical counterpart to the Director of Security & Technology.
Responsibilities
- Own KPA's enterprise security platforms including CrowdStrike, Rapid7, Cisco Umbrella, Cisco Duo and related technologies.
- Lead vulnerability management & remediation, endpoint security, identity security, privileged access, penetration testing, and security hardening initiatives.
- Own the technical implementation and ongoing operation of infrastructure-related SOC 2 controls and security audit related requirements.
- Own Azure infrastructure and AWS workloads outside the DevOps application stack. Partner with DevOps where needed as there is a natural crossover between them and this position.
- Own Cisco Meraki networking, VPN infrastructure, and cloud connectivity.
- Lead technical initiatives including cloud modernization, email domain consolidation, phone system replacement, identity modernization, and enterprise platform upgrades.
- Lead complex security and cloud projects from planning through implementation and post-change validation.
- Build automation using PowerShell, Microsoft Graph, REST APIs, and leverage AI-assisted development and automation to improve engineering efficiency and reduce manual effort.
Requirements
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or equivalent experience.
- 7+ years of experience in cloud infrastructure, systems engineering, security engineering, or a related senior technical role.
- Experience with enterprise security platforms such as CrowdStrike, Rapid7, Cisco Umbrella, Duo, or equivalent technologies.
- Strong understanding of identity, networking, endpoint management, vulnerability management, and Zero Trust security principles.
- Strong experience administering Microsoft 365, Entra ID, Azure, Windows Server, Exchange Online, and hybrid identity.
- Experience supporting SOC 2 or similar compliance frameworks.
- Relevant certifications such as Microsoft AZ-104, AZ-500, MS-102, SC-300, CompTIA Security+, CISSP, or equivalent certifications are preferred.
- Excellent communication, documentation, project management, and problem-solving skills.
- Success Criteria:
- Work ethic that aligns with KPA's core values:
- Trust: earning trust through integrity, expertise, and acting in the client's best interest.
- Innovation: continuously seeking out ways to better serve clients.
- Excellence: holding ourselves to high standards in everything we do.
- Results: moving with purpose to deliver meaningful outcomes.
Skills
- Reduces manual effort through automation and modern engineering practices.
- Serves as the senior escalation point for complex cloud, infrastructure, and security issues.
This listing is sourced directly from KPA's careers page and normalized into a canonical job model.