Skip to main content
David Careers

Sr. IT Security Engineer

Posted today

kesta itSalt Lake City (UT)
Information Security EngineersComputer Systems Design Services

SENIORITY

Lead

Apply (opens in a new tab)

About the role

Sr. IT Security EngineerK?STA I.T. is actively seeking a Sr. IT Security Engineer for an immediate full-time opportunity with our industry leading client. Are you on the lookout for a unique career opportunity that offers leadership, responsibility, and the chance to make a significant impact? If you're eager to contribute to a thriving and stable organization while maintaining your confidentiality, continue reading. A Senior IT Security Engineer in Operations & Engineering supports the design, implementation, and operation of enterprise cybersecurity technologies and services. This role is responsible for strengthening the organization's security posture through the deployment, administration, and optimization of security controls across on-premises, cloud, and hybrid environments. This individual serves as a technical leader within the Cybersecurity team, partnering closely with IT Infrastructure, Network Engineering, Cloud Operations, Application Development, and Security Operations teams to ensure security controls are effectively implemented and maintained. The role supports both operational security activities and strategic security initiatives, helping reduce risk through automation, engineering excellence, and continuous improvement. This position requires a strong technical foundation across multiple security domains, including endpoint security, identity and access management, cloud security, network security, vulnerability management, and security monitoring. The ideal candidate can balance engineering, operational support, and project execution while driving security best practices throughout the organization.
Responsibilities:
  • Security Engineering & Architecture
  • Design, implement, and maintain cybersecurity technologies across endpoint, network, cloud, and identity platforms
  • Evaluate, deploy, and optimize security tools and controls to improve the organization's security posture
  • Support the development and implementation of cybersecurity standards, architectures, and technical roadmaps
  • Partner with IT teams to ensure security controls are integrated into infrastructure and application designs
  • Security Operations & Incident Response
  • Support security monitoring, threat detection, and incident response activities
  • Investigate security alerts, identify root causes, and assist with containment and remediation efforts
  • Develop and maintain operational procedures, runbooks, and response documentation
  • Participate in incident response exercises and continuous improvement initiatives
  • Identity & Access Management (IAM)
  • Implement and support IAM capabilities, including identity lifecycle management, authentication, authorization, and privileged access controls
  • Manage role-based access controls, multifactor authentication, conditional access, and identity governance processes
  • Support periodic access reviews, entitlement management, and segregation of duties initiatives
  • Partner with application and infrastructure teams to integrate IAM solutions and automate identity processes
  • Vulnerability & Security Risk Management
  • Support the vulnerability management program through assessment, prioritization, tracking, and remediation validation
  • Collaborate with system owners to remediate vulnerabilities and reduce cybersecurity risk
  • Analyze security findings and recommend appropriate compensating controls or risk-reduction measures
  • Track remediation progress and support risk reporting activities
  • Cloud & Infrastructure Security
  • Design and implement security controls across Microsoft Azure, Microsoft 365, and hybrid environments
  • Support cloud security monitoring, configuration reviews, and hardening efforts
  • Evaluate cloud architectures and services to ensure alignment with security requirements
  • Implement security best practices across infrastructure, applications, and data protection
  • Automation, Reporting & Continuous Improvement
  • Identify opportunities to automate security processes and improve operational efficiency
  • Develop metrics, dashboards, and reporting to support cybersecurity decision-making
  • Maintain technical documentation, standards, and operational procedures
  • Stay current on emerging threats, technologies, and industry best practices
Requirements:
  • Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field5–8 years of experience in cybersecurity engineering, security operations, or infrastructure security
  • Experience managing and supporting enterprise security technologies, including EDR, SIEM, IAM, vulnerability management, and cloud security platforms
  • Strong knowledge of Microsoft security technologies, including Microsoft Defender, Entra ID (Azure AD), Intune, and Azure security services
  • Experience supporting incident response, vulnerability management, and security investigations
  • Knowledge of cybersecurity frameworks and best practices such as NIST CSF, CIS Controls, and Zero Trust principles
  • Strong troubleshooting, analytical, and problem-solving capabilities
  • Excellent communication and collaboration skills with both technical and non-technical stakeholders
Preferred Qualifications:
  • Experience scripting or automating security processes using PowerShell, Python, or similar technologies
  • Industry certifications such as CISSP, GSEC, Security+, Azure Security Engineer (AZ-500), or similar
  • About K?STA I.T.:Our name says it all; K?STA I.T. (Keys-to-I.T.) AND our people are our keys to our success! K?STA I.T. is a premier Utah-based technical staffing and consulting services firm.
We specialize in temporary and permanent placement of Software, Hardware, Network, Cloud, CRM/ERP, Data, End-User support, Web and Executive / leadership-based positions on a full time and consulting basis. If you're interested in a role where top performance is rewarded, personal time is valued, and excellence is demanded at every level we want to talk to you today! Where do you want to go? We've got the keys! ~ K?STA I.T.

Before you apply

Applying takes about a minute. These four things decide how fast it moves after that.

Your profile is current

It's what we read first. Occupations, seniority and locations matter more than a long history.

Two examples you can talk through

Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.

A number in mind

What you're on now and what would make you move. We negotiate better when we know both.

Your notice period

Employers plan around it, and it's the question that stalls offers most often.

Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.

More like this