Merative · 2 hours ago
Information Security Engineer- Developer
United States
Full-time
Remote
Senior Level, Lead/Staff
$153K/yr - $229K/yr
8+ years expMerative is seeking an experienced Cloud Architect with strong expertise in Microsoft Azure, hybrid Active Directory, and enterprise identity and device management. This role will lead the design, implementation, and governance of secure, scalable cloud and hybrid environments while enabling modern workplace and identity solutions.
AnalyticsHealth CareInformation TechnologyIT Infrastructure
Responsibilities
Design and maintain a Secure Cloud Architecture for IaaS, PaaS, and SaaS solutions with Microsoft security technologies such as Defender, Sentinel, Purview, Endpoint Management, and Entra ID to protect enterprise and client assets
Build and deploy security architecture that enforces Zero Trust principles across M365, tenants, Azure subscriptions, B2C tenants, enterprise virtual systems, landing zones, virtual desktops and devices
Establish security controls around DevOps, secrets management, key vaults, and managed identities to secure service to service patterns
Architect resilient, scalable, and cost-optimized cloud solutions using Azure best practices and risk-based spending alignment
This role will own security architecture standards, reference architecture, guardrails, and exception decisions in partnership with the Chief Information Security Officer
Establish and enforce hardened identity management for identities including Entra ID, service principles, and workload identities while enforcing least-privilege across environments and mitigating path to privilege
Architect identity security using conditional access, MFA, phishing resistant authentication, Privileged Identity Management (PIM), and Zero Trust principles
Design and integrate Privileged Access Management (PAM) tools in active directory environments which include both Windows and Linux to eliminate the use of interactive service accounts and password handling while providing secure privilege access management practices, automation, and secure service-to-service communications
Design and incorporate security best practice for device & endpoint management incorporating identity and access management with internet access restrictions supporting Windows, macOS, iOS, and Android devices
Architect and govern AI platforms and data flows across Azure OpenAI and Microsoft Copilot extensibility, integrating MCP-based systems with enterprise identity, device, and data protection controls to prevent leakage, enforce consent boundaries, and ensure auditability
Establish and enforce AI governance controls for MCP endpoints and AI-driven data access, including Entra ID–based authorization, data provenance, policy enforcement, and compliance logging
Drive Purview-based data governance including classification strategy, sensitivity labels, DLP enforcement, information barriers, and cross-tenant controls
Act as a technical authority and advisor to engineering, security, and operations teams
Translate business requirements into technical cloud solutions
Produce architecture diagrams, documentation, and standards
Mentor engineers and elevate team maturity by contributing to cloud best practices and roadmaps, conducting design reviews, building hardened security patterns, and providing coaching to strengthen engineering practices
Qualification
Required
Bachelor's degree in computer science, engineering, or related field
8-10 years of security design, implementation and ownership experience with Microsoft security tooling
10+ years of hands-on proficiency in multiple cybersecurity competencies (e.g., network security, systems security, application security, security operations)
10+ years' experience performing security testing or technical controls validation, including documentation of testing methods and results
10+ years' experience in Azure cloud architecture and security services
Preferred
Experience with End User Workstation Security Controls to include MAC, Windows and Virtual Desktops
Experience with Microsoft products to include Microsoft Endpoint Manager, Entra, Defender, Sentinel and M365
Experience with securing both Azure cloud as well as hybrid cloud environments using the Microsoft security tooling
Advance knowledge of Microsoft Defender and Sentinel and proficiency in KQL query language
Experience with Microsoft Defender for Cloud to include regulatory compliance dashboard configuration and continuous assessment; integrating Defender for Cloud into CI/CD pipelines and IaC workflows; and practical knowledge of CSPM and CWPP capabilities
Experience with Azure Policy, subscription structure, billing account, and management groups
Proactive awareness of emerging cybersecurity threats and technologies
Detail oriented with strong verbal and presentation skills
Excellent interpersonal, communication, and negotiation skills
Effective written and oral communication, technical writing, and editing skills
Security-related certification (i.e., Security+, CISSP, GIAC, etc.)
Experience with landing zone security baselines and guardrails
Benefits
Remote first / work from home culture
Flexible vacation to help you rest, recharge, and connect with loved ones
Paid leave benefits
Health, dental, and vision insurance
401k retirement savings plan
Infertility benefits
Tuition reimbursement, life insurance, EAP – and more!
Company
Merative
Merative is an IT services company that offers products to improve decision-making and performance. It is a sub-organization of IBM.
1001-5000 employees
H1B Sponsorship
Merative has a track record of offering H1B sponsorships. Please note that this does not
guarantee sponsorship for this specific role. Below presents additional info for your
reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2025 (10)
2024 (5)
2023 (10)
2022 (2)
Funding
Current Stage
Late StageTotal Funding
unknown2022-01-25Acquired
2018-03-29Series A
Leadership Team
Gerry McCarthy
Chief Executive Officer and Board Director
Troy Bailey
Chief Technology Officer
Recent News
PR Newswire
2026-02-04
citybiz
2025-10-03
2025-09-23
Company data provided by crunchbase