Lead Security Engineer is a key member of the Information Security Engineering team, responsible for designing, building, and maintaining identity, access, and endpoint security across the organization. The role translates security requirements into technical solutions and mentors junior security engineers. You will lead identity and access management, privileged access, conditional access, and multi-factor authentication, and oversee SSO/federation integrations with providers such as Microsoft Entra ID, Okta, ADFS, Ping, SecureAuth, and Auth0, including certificate and signing-key rotation. You will design and tune Conditional Access policies (geo-fencing, botnet blocking, MFA enforcement) and drive passwordless/Passkey rollouts for privileged accounts. You will drive Privileged Access Management (PAM) operations (e.g., CyberArk Privilege Cloud), onboard service accounts and secrets, and integrate PAM with cloud key vaults and automation platforms. You will oversee all aspects of your area of expertise, establish metrics, apply industry best practices, and develop tools and processes to meet security goals. You will lead endpoint detection and response, identity governance, and security tooling initiatives, coordinating with internal and external teams. You will lead migrations from legacy antivirus/EDR tools to modern XDR platforms (e.g., Microsoft Defender), manage Active Directory/Entra ID hygiene, service account ownership reviews, RBAC cleanup, security group governance, and privileged role alerting. You will coordinate NSG, firewall, and WAF rule changes with the Net

Lead Security Engineer is a key member of the Information Security Engineering team, responsible for designing, building, and maintaining identity, access, and endpoint security across the organization. The role translates security requirements into technical solutions and mentors junior security engineers. You will lead identity and access management, privileged access, conditional access, and multi-factor authentication, and oversee SSO/federation integrations with providers such as Microsoft Entra ID, Okta, ADFS, Ping, SecureAuth, and Auth0, including certificate and signing-key rotation. You will design and tune Conditional Access policies (geo-fencing, botnet blocking, MFA enforcement) and drive passwordless/Passkey rollouts for privileged accounts. You will drive Privileged Access Management (PAM) operations (e.g., CyberArk Privilege Cloud), onboard service accounts and secrets, and integrate PAM with cloud key vaults and automation platforms. You will oversee all aspects of your area of expertise, establish metrics, apply industry best practices, and develop tools and processes to meet security goals. You will lead endpoint detection and response, identity governance, and security tooling initiatives, coordinating with internal and external teams. You will lead migrations from legacy antivirus/EDR tools to modern XDR platforms (e.g., Microsoft Defender), manage Active Directory/Entra ID hygiene, service account ownership reviews, RBAC cleanup, security group governance, and privileged role alerting. You will coordinate NSG, firewall, and WAF rule changes with the Net