Sr Cybersecurity Engineer

About The Role

As a CBRE Sr Cybersecurity Engineer, you will support and secure global enterprise scale Active Directory (AD), Entra ID (Azure AD), and their underlying components in a hybrid environment. You will play a key role in authentication, automation, and monitoring, ensuring the integrity and availability of directory services for our organization. This job is part of the Cybersecurity job function. They are responsible for identifying security risks and developing procedures to prevent future incidents.

What You'll Do

• Architect, implement, and maintain secure directory systems, including AD and Entra ID environments (on-premises and cloud).
• Serve as a subject matter expert for authentication and directory facilitated authorization.
• Investigate and resolve security vulnerabilities related to directory system components.
• Led and contribute to global projects enabling and supporting directory services.
• Develop and maintain automated solutions for monitoring and managing directory service components at scale.
• Provide L3 support for critical directory service components, including troubleshooting and resolving complex authentication and directory issues.
• Collaborate with a globally distributed team, with members located in different regions.
• Manage and provide guidance related to permissions, group policies, and access controls for AD and Entra ID.
• Collaborate with IT and security teams to ensure compliance and best practices.
• Document processes, configurations, and incident responses.
• Lead by example and model behaviors that are consistent with CBRE RISE values.
• Impact the achievement of customer, operational, project, or service objectives across multi-discipline teams.
• Work is guided by functional policies which impact the design of procedures and policies.
• Communicate difficult and complex ideas with the ability to influence.

What You'll Need

• Bachelor's Degree preferred with 8-10 years of relevant experience with 3+ years supporting 3+ year supporting enterprise or government-level directory services (AD, Entra ID/Azure AD).
• In lieu of a degree, a combination of experience and education will be considered.
• In depth understanding of AD and Entra ID architecture, permissions, and security best practices.
• Expertise with Active Directory, Entra ID, Azure, AWS, GCP, DNS, Entra Conditional Access, Entra Connect, and Federation.
• Strong scripting and automation skills (PowerShell, Python, or similar).
• Expertise in authentication protocols (Kerberos, SAML, OAuth, etc.).
• Experience with monitoring tools and SIEM platforms.
• Excellent troubleshooting, communication, and documentation skills.
• Relevant certifications (preferred): Microsoft Certified, CISSP, etc.
• The innovative mentality to develop methods that go beyond existing solutions.
• Ability to solve unique problems using standard and innovative solutions having a broad impact on the business.
• Expert organizational skills with an advanced inquisitive mindset.