Logo for KPA

Senior Cloud & Security Engineer

KPA

Role overview

Qualifications

  • Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or equivalent experience
  • 7+ years of experience in cloud infrastructure, systems engineering, security engineering, or a related senior technical role
  • Strong experience administering Microsoft 365, Entra ID, Azure, Windows Server, Exchange Online, and hybrid identity
  • Relevant certifications such as Microsoft AZ-104, AZ-500, MS-102, SC-300, CompTIA Security+, CISSP, or equivalent certifications are preferred

Responsibilities

  • Own KPA's enterprise security platforms including CrowdStrike, Rapid7, Cisco Umbrella, Cisco Duo and related technologies
  • Lead vulnerability management remediation, endpoint security, identity security, privileged access, penetration testing, and security hardening initiatives
  • Investigate and respond to complex security incidents while partnering with the IT Operations team on security and infrastructure escalations
  • Lead technical initiatives including cloud modernization, email domain consolidation, phone system replacement, identity modernization, and enterprise platform upgrades

About the company

KPA logo

KPA

RegTech (Regulatory & Compliance Technology)

KPA is a leading provider of Safety Management and Workforce Compliance software and services for a wide range of businesses. KPA solutions enable clients to identify, remedy, and prevent workplace safety and compliance problems across their entire enterprise. The combination of KPA’s software platform, expert consulting services, and award-winning training helps organizations minimize risk so they can focus on what's important—their core business. For over 30 years, KPA has helped 10,000+ clients achieve regulatory compliance, control risk, and protect assets. KPA offers a unique combination of safety management and compliance software, an award-winning training library, and on-site services provided by 125+ experienced EHS and F&I consultants. The suite of services, training, and software helps our clients increase productivity, control costs, and reduce financial and reputational risk.

Company details

Company typeSME
IndustryRegTech (Regulatory & Compliance Technology)
Company size201 - 500

Links

Website LinkedIn See all jobs

Your match analysis

See how your profile stacks up against this role.

We compared the job requirements to your profile to show where you're strong and where you fall short.

Job description

Position Description:

The Senior Cloud & Security Engineer to serve as the senior technical counterpart to the Director of Security & Technology. This role owns KPA's cloud infrastructure, security platforms, identity, automation, and technical modernization initiatives. The ideal candidate is a hands-on engineer with strong cloud and systems experience, a security-first mindset, and the ability to independently lead complex technical projects that improve KPA's security, scalability, and operational maturity.


Responsibilities:

Security Engineering

  • Own KPA's enterprise security platforms including CrowdStrike, Rapid7, Cisco Umbrella, Cisco Duo and related technologies.
  • Lead vulnerability management & remediation, endpoint security, identity security, privileged access, penetration testing, and security hardening initiatives.
  • Investigate and respond to complex security incidents while partnering with the IT Operations team on security and infrastructure escalations.
  • Own the technical implementation and ongoing operation of infrastructure-related SOC 2 controls and security audit related requirements.
  • Continuously evaluate new technologies and recommend improvements that strengthen KPA's overall security posture.

    • Cloud, Identity & Systems Engineering

  • Own Microsoft 365, Entra ID, Exchange Online, Exchange Hybrid modernization, identity architecture, and endpoint management.
  • Own Azure infrastructure and AWS workloads outside the DevOps application stack. Partner with DevOps where needed as there is a natural crossover between them and this position.
  • Own Cisco Meraki networking, VPN infrastructure, and cloud connectivity.
  • Lead technical initiatives including cloud modernization, email domain consolidation, phone system replacement, identity modernization, and enterprise platform upgrades.

    • Automation, Projects & Technical Leadership

  • Lead complex security and cloud projects from planning through implementation and post-change validation.
  • Build automation using PowerShell, Microsoft Graph, REST APIs, and leverage AI-assisted development and automation to improve engineering efficiency and reduce manual effort.
  • Produce clear technical documentation, implementation plans, rollback procedures, and operational handoffs.
  • Proactively identify technical debt, security gaps, and opportunities to improve efficiency through automation and modernization.

    • Qualifications:
  • Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or equivalent experience.
  • 7+ years of experience in cloud infrastructure, systems engineering, security engineering, or a related senior technical role.
  • Strong experience administering Microsoft 365, Entra ID, Azure, Windows Server, Exchange Online, and hybrid identity.
  • Experience with enterprise security platforms such as CrowdStrike, Rapid7, Cisco Umbrella, Duo, or equivalent technologies.
  • Strong understanding of identity, networking, endpoint management, vulnerability management, and Zero Trust security principles.
  • Experience supporting SOC 2 or similar compliance frameworks.
  • Relevant certifications such as Microsoft AZ-104, AZ-500, MS-102, SC-300, CompTIA Security+, CISSP, or equivalent certifications are preferred.
  • Excellent communication, documentation, project management, and problem-solving skills.

    • Success Criteria:
  • Work ethic that aligns with KPA's core values:
  • Trust: earning trust through integrity, expertise, and acting in the client's best interest.
  • Innovation: continuously seeking out ways to better serve clients.
  • Excellence: holding ourselves to high standards in everything we do.
  • Results: moving with purpose to deliver meaningful outcomes.
  • Provides technical leadership, sound architectural recommendations, and trusted engineering expertise across cloud, infrastructure, and security initiatives.
  • Successfully leads cloud modernization and technical security initiatives that improve KPA's security, scalability, and operational maturity.
  • Owns and continually improves enterprise security platforms and technical security controls.
  • Delivers complex technical projects with strong planning, communication, documentation, testing, and post-implementation validation.
  • Reduces manual effort through automation and modern engineering practices.
  • Serves as the senior escalation point for complex cloud, infrastructure, and security issues.
  • Partners effectively with IT Operations and DevOps to ensure new technologies transition smoothly into day-to-day operations.

    • Physical Requirements:
    Physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
  • Working at a computer typing and view a screen - Constantly
  • Stationary sitting or standing - Constantly
  • Visual Recognition - Constantly
  • Hearing/Listening - Occasionally
  • Communicating verbally and/or in writing - Occasionally
  • Travel - Seldom

    • Compensation:
  • Annual base salary range between $110-125k commensurate with experience.
  • Bonus potential of 10% annually
    •

    Apply once. Then go straight to the hiring manager.

    After you apply, unlock the direct contact details of the people who actually make the call. A quick follow-up makes you 5x more likely to land an interview.

    MR

    Marcus Rivera

    Chief Revenue Officer

    m.rivera@company.com
    linkedin.com/in/marcusrivera
    Unlocked after you apply
    ·

    Cloud Security Engineer Related jobs

    Colorado (USA)Cloud Security Engineer

    Other jobs at KPA

    Premium

    Reach out to the hiring manager directly.

    Gain access to the contact details of the hiring managers who actually decide, and reach out to network with them directly. That, plus more when you upgrade:

    • Full match report with fit score and gaps
    • Career diagnostics on how recruiters read you
    • Curated company matches and warm intros
    • 48h early access to new roles

    Cancel anytime.