[Remote] Senior Security Engineer (Contract)

Note: The job is a remote job and is open to candidates in USA. Worldwide Clinical Trials is a global clinical research organization focused on improving lives through innovative, high-quality clinical research. The Senior Security Engineer will own and mature Microsoft and Azure security capabilities across identity, endpoints, cloud, and networks, with a focus on Entra ID, privileged access, Azure Key Vault, endpoint application control, and Microsoft Sentinel. The role will also provide technical direction, automation, infrastructure-as-code, and operational standards as a senior individual contributor.

Responsibilities

• The enterprise secrets-management service on Azure Key Vault. Provisioning, access governance, rotation and recovery, separation of duties, and lifecycle. Kept healthy and audit-ready as the environment grows
• Azure privileged-access controls end to end: RBAC, PIM, restricted administration, approvals, and access reviews, evolving them alongside IAM's Entra ID and Conditional Access direction to keep escalation risk low as the tenant scales
• Azure security baselines across tenants, subscriptions, and workloads including identity, logging and monitoring, network segmentation, encryption, and posture. Maintained and improved as new services come online
• The endpoint application-control and PowerShell-hardening capability, from standards and work instructions through exception handling and ongoing tuning, in partnership with endpoint engineering and application owners
• Developing Microsoft Sentinel detection and automation for privileged-access, Active Directory, and Azure high-risk events, growing the analytics and playbook library in step with Security Operations' runbooks and response processes
• Automation and Infrastructure-as-Code practices that make secure, policy-based configuration the default and reduce manual effort over time
• Technical direction for your services: design reviews, production-readiness and rollback standards, documentation, and the operational runbooks that let the wider team support what you build
• Undefined
• Perform other duties as assigned. The duties and responsibilities listed above are representative of the nature and level of work assigned and are not necessarily all-inclusive

Skills

• Endpoint application control, PowerShell security, and code-signing depth
• Experience with Active Directory
• Experience with Zscaler (ZIA, ZPA, or ZDX)
• Experience in a GxP-regulated, clinical-research, healthcare, or pharmaceutical environment
• Microsoft AZ-500 or SC-300 certification; CISSP or CCSP a plus
• Bachelor's degree in Computer Science, Information Technology, or related field with a minimum of 5 years of experience in enterprise security engineering, with at least 2 years directly supporting Zscaler solutions or high school diploma/GED with a minimum of 7 years of experience in enterprise security engineering, with at least 2 years directly supporting Zscaler solutions
• Hands-on experience with ZIA, ZPA, and ZDX in a production environment
• Strong understanding of cloud security concepts, identity management, and Zero Trust principles
• Experience with automation for security operations and policy management using APIs
• Zscaler certifications (ZCCA-IA, ZCCA-PA, ZCCP) are highly desirable

Benefits

• Remote work arrangement
• In addition to base salary, we offer a competitive benefits package depending on location.

Company Overview

Company H1B Sponsorship