About the Role The Information Security team is responsible for the oversight and execution of the Enterprise’s Information Security, Business Continuity and Risk Management programs to support our business goals. This includes, but is not limited to security operations, vulnerability and patch management, incident response, disaster recovery, business continuity, risk identification and mitigation planning / implementation, identity management, network security, privacy, and compliance. The position of Security Engineer will report directly to the Chief Information Security Officer and is responsible for architecting, deploying, and overseeing the management of Enterprise-wide security tooling and executing against the company’s Information Security and Compliance roadmap. In addition, this resource will serve as a technical Security Subject Matter Expert providing architecture review and guidance across all technology projects. Working closely with technology partners, he or she will also guide the selection, implementation, and integration of various security solutions. This position has significant organizational impact, requiring deep technical expertise, Enterprise perspective, and change management skills. Responsibilities: Design and implement multi-cloud data center security architecture. Develop, execute and measure the performance of security measures to protect information and network infrastructure and computer systems. Oversee and directly participate in the installation, configuration, and management of information security technologies Manages information security projects as assigned Manage security tooling in the domains of network security, identity and access management, continuous monitoring, vulnerability and cloud security posture management, asset management, and other cybersecurity tooling / solutions Develop automations that drive security remediations and outcomes Conduct regular technical risk assessments of systems and infrastructure Work with developers to implement DevSecOps solutions and design and implement a security focused SDLC Configure, troubleshoot and maintain security infrastructure software and hardware Identify, define and document system security requirements and recommend solutions to management. Keep current on industry trends and the direction our competitors are heading with respect to business capabilities and technology. Perform research, formal evaluation and prototyping of leading/emerging technologies without oversite Requirements and Qualifications: Bachelor’s degree in Computer Science, Information Security, or a related field. 7-10 years of experience in an Infrastructure or Security Engineering role Experience with software and security architectures in cloud and data center environments Experience building and securing Kubernetes environments Networking technology proficiency (firewall configuration and maintenance, DNS, traffic analysis) Microsoft 365 (E5) and Azure background, including experience architecting security across multi-tenant environments Technical skills to design and implement M365 Security services with hands on experience on several of the items outlined below: Authentication Methods (sign-on security, multi-factor authentication (MFA), self-service password reset) Microsoft Entra ID Defender for O365 (Anti-phishing protection, anti-spoofing, anti-spam protection, Safe-Attachments, Safe Links, anti-malware solution) Azure Information Protection (Azure Rights Management, DLP, Sensitivity Labels) Azure Arc to integrate data center resources into cloud management Defender for Cloud (Plan implementation and configuration) Data governance and retention (Retention policies, data governance reports and dashboards, Information holds, import data in the Security and Compliance Center, manage inactive mailboxes) Data privacy regulation compliance (Regulatory compliance in Microsoft 365, review and interpret GDPR dashboards and reports, Compliance Manager reports) Microsoft Intune and Attack Surface Reduction rules Azure Lighthouse Experience in applying security to cloud technologies (managing secrets, Securing CI/CD pipelines, Infrastructure as Code, Container Security) Experience in implementing enterprise-wide vulnerability management solutions, including container-based vulnerability management. Possession of or ability to obtain professional certifications in information security or risk management, such as a CISSP, CISM, or Microsoft / Azure Security Certifications Strong knowledge of security, regulatory, and control frameworks, such as ISO270001, HIPAA, GDPR, NIST, and CIS. Self-starter who demonstrates strong ownership of their domain Interpersonal and collaborative skills and the ability to communicate security and risk-related concepts to technical and nontechnical audiences. High level of personal integrity, and the ability to professionally handle confidential matters. Natural passion for security and strong drive to see both projects and investigations to completion. It is impossible to list every requirement for, or responsibility of, any position. Similarly, we cannot identify all the skills a position may require since job responsibilities and the Company’s needs may change over time. Therefore, the above job description is not comprehensive or exhaustive. The Company reserves the right to adjust, add to or eliminate any aspect of the above description. The Company also retains the right to require all employees to undertake additional or different job responsibilities when necessary to meet business needs. Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future. Benefits & Perks: Time Off: 25 days of PTO for full-time employees and 12 company holidays. Company Paid Benefits: Life insurance, Short-term disability, Long-term disability, Paid parental leave, Employee Assistance Program, and medical insurance in our high deductible health plan. Optional Employee Paid Benefits: Medical insurance in our EPO plan, Dental benefits, and Vision benefits. We also offer Health Savings Accounts, Flexible Spending Accounts, Supplemental Life insurance, and more. 401(k): Eligible after 60 days. Discretionary company match of 50% up to the first 6% of contributions. EQUAL OPPORTUNITY EMPLOYER ALCORITY IS AN EQUAL EMPLOYMENT OPPORTUNITY EMPLOYER. THE COMPANY'S POLICY IS NOT TO DISCRIMINATE AGAINST ANY APPLICANT OR EMPLOYEE BASED ON RACE, COLOR, RELIGION, NATIONAL ORIGIN, GENDER, AGE, SEXUAL ORIENTATION, GENDER IDENTITY OR EXPRESSION, MARITAL STATUS, MENTAL OR PHYSICAL DISABILITY, AND GENETIC INFORMATION, OR ANY OTHER BASIS PROTECTED BY APPLICABLE LAW. THE FIRM ALSO PROHIBITS HARASSMENT OF APPLICANTS OR EMPLOYEES BASED ON ANY OF THESE PROTECTED CATEGORIES. We enable our customers to rapidly modernize and scale their businesses, creating unique opportunities for our people to realize their own potential. Our simple foundational values, shared by everyone in the company, are three-fold. We’re results-driven, always focused on making a tangible difference for our customers. We believe in building long-term relationships with those who rely on our know-how and expertise. And we’re humble about our own achievements, because we only succeed when our customers do. We’re open You’ll find us welcoming, helpful and approachable. We listen and trust each other to build strong relationships with our colleagues, customers and partners. We’re irrepressible There’s a constant buzz of energy and enthusiasm for what we do. The spirit of, and passion for, entrepreneurship runs deeply through our organization. We’re aware We are always keeping on emerging practices and technologies in the market, while also investing in deepening our understanding of our customers’ businesses and unique challenges We have integrity We bring our real selves to work, respect each other and put the team first. Everything we do is considered and for the benefit of the companies we support.