Cybersecurity Security Engineer II

Job Summary

Expand Energy is seeking a Cybersecurity Engineer to join our cybersecurity team with a primary focus on Identity and Access Management (IAM) and Cloud Security. This role is ideal for a security professional with 3-5 years of experience who is passionate about securing modern cloud environments and enterprise identity platforms.

Job Duties & Responsibilities

• Administer and support enterprise IAM technologies, including Okta, SailPoint, CyberArk / Idira, and Microsoft Entra ID
• Configure and maintain Single Sign-On (SSO) and federation services, with emphasis on Okta policy administration and application integrations
• Implement and support MFA and Conditional Access policies
• Aid with identity lifecycle management processes, including provisioning, deprovisioning, and access governance
• Partner with application owners to integrate applications with enterprise identity services
• Assist in maintaining and improving identity governance and Zero Trust security initiatives
• Support security operations and engineering activities within Microsoft Azure
• Assist with the implementation and ongoing administration of Microsoft Defender for Cloud
• Monitor and improve the organization's Cloud Security Posture Management (CSPM) program
• Identify, track, and support remediation of cloud security risks and misconfigurations
• Implement and support Azure Role-Based Access Control (RBAC) and least-privilege access models
• Contribute to the development of cloud security standards, patterns, and best practices
• Support day-to-day cybersecurity operations while participating in engineering and improvement initiatives
• Troubleshoot authentication, authorization, identity, and access-related issues
• Participate in incident response activities and operational support efforts as needed
• Participate in an on-call rotation supporting critical cybersecurity services
• Develop and maintain technical documentation, standards, and operational procedures
• Identify opportunities to automate manual processes and improve operational efficiency

Job Specific Skills

• Strong understanding of SSO, federation, MFA, identity governance, privileged access management, RBAC, and IAM best practices
• Experience with one or more IAM platforms such as Okta, SailPoint, CyberArk / Idira, or Microsoft Entra ID
• Working knowledge of cloud security principles and best practices
• Strong troubleshooting, analytical, and problem-solving skills
• Ability to communicate clearly with technical teams, application owners, and business stakeholders

Education & Experience

• Minimum: High school diploma or GED
• Preferred: Bachelor’s degree from an accredited university - Cybersecurity, Information Security, Computer Science, Information Systems, or a related discipline
• Preferred: Cybersecurity training
• Minimum: 2 years work experience in cybersecurity, cloud security, IAM, infrastructure security, or a related field
• Experience supporting enterprise cloud environments, preferably Microsoft Azure
• Experience with identity and access management concepts and technologies

Additional Qualifications

• Preferred qualifications: CompTIA Security+, Microsoft Azure Security Engineer (AZ-500), Microsoft Identity and Access Administrator (SC-300), CISSP, Associate of ISC2, or progress toward CISSP certification
• Experience with Microsoft Defender for Cloud
• Experience with Cloud Security Posture Management (CSPM) practices
• Knowledge of Zero Trust architecture principles
• Scripting and automation experience using PowerShell, Python, or similar technologies
• Experience leveraging AI tools to improve operational efficiency and automate repetitive tasks
• Experience working in regulated, energy, or critical infrastructure environments
• Familiarity with cloud security frameworks and security architecture concepts