Senior Security Engineer (Contract)

Description

The company is a global, midsize clinical research organization with more than 3,500 staff. This is a contract role for a Senior Security Engineer focused on the security foundations that protect the company's identity, endpoint, cloud and network environments.

As the senior individual contributor and subject-matter expert, you will build security services that run reliably at scale as the company moves toward a Zero Trust, cloud-native model. Your main areas are Microsoft Entra ID and privileged access, Azure Key Vault, endpoint application control and Microsoft Sentinel.

You will work closely with Security Operations, Identity and Access Management, endpoint engineering, application teams and service owners to reduce risk across the environment. Beyond building and running these capabilities, you will help set engineering standards, technical direction, automation practices and operational readiness, so the wider team can support what you create for years.

The role is remote and open to candidates based in the US. You will work with global teams across multiple time zones.

Responsibilities

• Run and improve the enterprise secrets-management service in Azure Key Vault, covering provisioning, access governance, rotation, recovery, separation of duties and lifecycle management.
• Build Azure privileged-access controls using RBAC, PIM, restricted administration, approvals and access reviews, aligned with Entra ID and Conditional Access, to lower the risk of privilege escalation.
• Set and keep raising Azure security baselines for tenants, subscriptions and workloads, spanning identity, logging and monitoring, network segmentation, encryption and security posture.
• Harden endpoints through application control, PowerShell hardening, exception handling and ongoing tuning, working with endpoint engineering and application owners.
• Create Microsoft Sentinel detections, automation and playbooks for privileged access, Active Directory and high-risk Azure events, working alongside Security Operations response.
• Expand automation and Infrastructure-as-Code so that secure, policy-based configuration is the default and manual work drops.
• Lead technical direction through design reviews, production-readiness and rollback standards, documentation and operational runbooks that support reliable ongoing operation.
• Perform other duties as assigned in line with the scope and level of the role.

Requirements

• A bachelor's degree in Computer Science, Information Technology or a related field, plus at least 5 years of enterprise security engineering experience, including at least 2 years directly supporting Zscaler solutions; or a high school diploma or GED plus at least 7 years of enterprise security engineering experience, including at least 2 years directly supporting Zscaler solutions.
• Hands-on production experience with Zscaler ZIA, ZPA and ZDX. Zscaler certifications such as ZCCA-IA, ZCCA-PA or ZCCP are highly desirable.
• Strong knowledge of cloud security, identity management, Zero Trust principles and Active Directory.
• Depth in endpoint application control, PowerShell security and code signing.
• Experience automating security operations and policy management through APIs.
• Experience in a GxP-regulated, clinical research, healthcare or pharmaceutical environment.
• Microsoft AZ-500 or SC-300 certification. CISSP or CCSP is a plus.
• Proficiency in English.

Conditions

Remote role open to candidates based in the US, working with teams across multiple time zones.

Contract position.

Base salary range in the United States: $121,500.00 to $240,500.00 per year. For hourly roles, the stated range reflects hourly rates. The final pay falls within this range and depends on experience, performance, education and internal equity, and is not a guaranteed figure. Salary is discussed during interviews, and you can ask about pay at any stage.

The company is committed to an inclusive, equitable workplace and offers equal opportunity to all candidates.

Benefits

• A competitive benefits package, which varies by location.