Azure Security Engineer Jobs Near Me

Job Summary:
BWE is focused on enhancing its security posture, and they are seeking a Senior Security Engineer to lead technical initiatives. This role involves partnering with the Director of Security to implement security strategies across various domains, including identity and access governance, Azure security, and compliance.
Responsibilities:
• Partner directly with the Director of Security to execute BWE’s security roadmap initiatives.
• Break down strategic objectives into actionable engineering tasks.
• Identify risks, blockers, and configuration gaps across BWE’s environment.
• Propose structured, risk-based solutions aligned with BWE’s business priorities.
• Design and implement access governance standards across BWE’s environment.
• Review and rationalize roles, security groups, and privileged access.
• Secure app registrations and service principals.
• Implement least privilege and Conditional Access policies.
• Support lifecycle automation for joiner, mover, and leaver processes.
• Assess and improve BWE’s Azure security posture.
• Harden RBAC role assignments and resource access.
• Configure and tune Microsoft identity, endpoint, and cloud security tools.
• Evaluate current tool configurations and implement improvements aligned with security best practices.
• Strengthen mobile device management configuration and compliance policies for Apple devices.
• Align Apple device management with identity and access controls.
• Improve monitoring, logging, and endpoint visibility across macOS and iOS.
• Configure and tune enterprise security tools to align with BWE’s risk and compliance requirements.
• Develop configuration baselines and technical implementation standards.
• Reduce alert noise through intelligent tuning.
• Validate control effectiveness through testing and review.
• Author technical standards and implementation guides for BWE’s security environment.
• Document control ownership and lifecycle management.
• Translate complex technical risks into clear communication for stakeholders.
• Support audit readiness through structured documentation.
Qualifications:
Required:
• Strong configuration expertise
• Critical thinking
• Ability to build standards and operational clarity in a Microsoft and Apple-centric environment
• Partner directly with the Director of Security to execute BWE’s security roadmap initiatives
• Break down strategic objectives into actionable engineering tasks
• Identify risks, blockers, and configuration gaps across BWE’s environment
• Propose structured, risk-based solutions aligned with BWE’s business priorities
• Design and implement access governance standards across BWE’s environment
• Review and rationalize roles, security groups, and privileged access
• Secure app registrations and service principals
• Implement least privilege and Conditional Access policies
• Support lifecycle automation for joiner, mover, and leaver processes
• Assess and improve BWE’s Azure security posture
• Harden RBAC role assignments and resource access
• Configure and tune Microsoft identity, endpoint, and cloud security tools
• Evaluate current tool configurations and implement improvements aligned with security best practices
• Strengthen mobile device management configuration and compliance policies for Apple devices
• Align Apple device management with identity and access controls
• Improve monitoring, logging, and endpoint visibility across macOS and iOS
• Configure and tune enterprise security tools to align with BWE’s risk and compliance requirements
• Develop configuration baselines and technical implementation standards
• Reduce alert noise through intelligent tuning
• Validate control effectiveness through testing and review
• Author technical standards and implementation guides for BWE’s security environment
• Document control ownership and lifecycle management
• Translate complex technical risks into clear communication for stakeholders
• Support audit readiness through structured documentation
Preferred:
• 7+ years in cybersecurity engineering or security architecture
• Strong hands-on experience with Microsoft Entra ID, Azure AD, and Active Directory in hybrid environments
• Experience securing Azure environments and implementing RBAC
• Experience configuring Conditional Access and MFA
• Experience with Microsoft endpoint and cloud security tools
• Experience securing macOS and iOS using a mobile device management platform
• Demonstrated experience configuring and optimizing enterprise security tools
• Experience building technical standards and structured processes
• Strong analytical and critical thinking ability
• Strong written and verbal communication skills
• Experience supporting SOC 2 or regulated environments
• Ability to connect security decisions to business outcomes and communicate risk in terms that resonate with non-technical stakeholders
• Relevant security certifications strongly valued, including CISSP, Microsoft certifications such as SC-200 or AZ-500, GIAC certifications such as GSEC or GCIH, or Jamf 200
Company:
BWE stands as a national, full-service commercial and multifamily mortgage banking company committed to elevating real estate financing. Founded in 2008, the company is headquartered in Cleveland, USA, with a team of 201-500 employees. The company is currently Growth Stage.