Position Summary:
The Cloud Security Engineer is responsible for identifying and establishing security controls for cloud-hosted resources. Areas of concentration include Microsoft Azure, Office 365, Azure Active Directory, Microsoft Defender for Identity, Microsoft Defender for Endpoint, Azure MFA, SIEM integration, Data Loss Prevention for Exchange Online, SharePoint Online, OneDrive, and Teams.The Cloud Security Engineer will assist in the development and implementation of security policies and procedures. Identify gaps and propose solutions for improving security posture. Strong written and verbal communication, time management, and organization skills are required.

Qualifications:
CERTIFICATION & LICENSURE REQUIREMENTS
Microsoft Certification Microsoft Certified: Azure Security Engineer Associate within 1 year or Microsoft Certification Microsoft 365 Certified: Security Administrator Associate within 1 year.

EXPERIENCE REQUIREMENTS
Combined Five (5) years IT or cybersecurity experience; preferrederred experience: Office 365, Azure Active Directory, Active Directory, ADFS, PowerShell, Exchange Online, SharePoint Online, SIEM, InTune, Windows OS, DNS and networking principals.Optional experience: network security, virtualization, endpoint protection, incident response, change management

Essential Functions:

• Work with IT and Security teams to assist in design of cloud security controls and requirements
• Recommend, implement and maintain security controls for cloud, Azure and Office 365 resources, including: Azure Active Directory, Exchange Online, SharePoint Online, OneDrive, Microsoft Teams
• Implement information protection and DLP policies for cloud and local resources, including: Exchange, Teams, SharePoint, OneDrive
• Recommend and implement cloud security controls in alignment with security best practices
• Configure 3rd party SSO integration with Azure Active Directory
• Ensure cloud-based security events are ingested and organized into SIEM
• Assist in developing security metrics and analytics program
• Investigate and remediate threats and vulnerabilities in a hybrid enterprise
• Assist with incident response and security investigations
• Work with application teams to develop security standards for cloud-hosted applications and web sites
• Work with IT and security teams to implement controls and policies for MDM, DLP, antivirus and system baselines on workstations, mobile devices and servers
• Work with IT and security teams to establish role-based permissions for cloud-hosted resources
• Assist with audits of cloud security policies and controls
• Work with network security to secure cloud network infrastructure

We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race, color, sex, age, national origin, religion, sexual orientation, gender identity, status as a veteran, and basis of disability or any other federal, state or local protected class. Carle Health participates in E-Verify and may provide the Social Security Administration and, if necessary, the Department of Homeland Security with information from each new employee's Form I-9 to confirm work authorization. | For more information: human.resources@carle.com.

Effective September 20, 2021, the COVID 19 vaccine is required for all new Carle Health team members. Requests for medical or religious exemption will be permitted.