[Hiring] Senior Security Engineer @Worldwide Clinical Trials

Role Description

Worldwide Clinical Trials is hiring a Senior Security Engineer to own and mature the Microsoft and Azure security capabilities that protect our identity, endpoint, cloud, and network environments. The primary focus is on Microsoft Entra ID and privileged access, Azure Key Vault, endpoint application control, and Microsoft Sentinel. As we advance our Zero Trust, cloud-native model, this role will engineer security services that need to be built well once and operated reliably for years. You'll be a senior individual contributor and the go-to subject-matter expert for your domains, partnering daily with Security Operations, Identity and Access Management, and application teams, and helping shape the engineering standards you work within rather than only executing against them.

What you will do

• The enterprise secrets-management service on Azure Key Vault, including:
  • Provisioning, access governance, rotation and recovery, separation of duties, and lifecycle.
  • Kept healthy and audit-ready as the environment grows.
• Azure privileged-access controls end to end, including:
  • RBAC, PIM, restricted administration, approvals, and access reviews.
  • Evolving them alongside IAM's Entra ID and Conditional Access direction to keep escalation risk low as the tenant scales.
• Azure security baselines across tenants, subscriptions, and workloads including:
  • Identity, logging and monitoring, network segmentation, encryption, and posture.
  • Maintained and improved as new services come online.
• The endpoint application-control and PowerShell-hardening capability, including:
  • Standards and work instructions through exception handling and ongoing tuning.
  • In partnership with endpoint engineering and application owners.
• Developing Microsoft Sentinel detection and automation for:
  • Privileged-access, Active Directory, and Azure high-risk events.
  • Growing the analytics and playbook library in step with Security Operations' runbooks and response processes.
• Automation and Infrastructure-as-Code practices that make secure, policy-based configuration the default and reduce manual effort over time.
• Technical direction for your services, including:
  • Design reviews, production-readiness and rollback standards, documentation, and operational runbooks.
• Perform other duties as assigned.

Qualifications

• Endpoint application control, PowerShell security, and code-signing depth.
• Experience with Active Directory.
• Experience with Zscaler (ZIA, ZPA, or ZDX).
• Experience in a GxP-regulated, clinical-research, healthcare, or pharmaceutical environment.
• Microsoft AZ-500 or SC-300 certification; CISSP or CCSP a plus.

Requirements

• Bachelor’s degree in Computer Science, Information Technology, or related field with a minimum of 5 years of experience in enterprise security engineering, with at least 2 years directly supporting Zscaler solutions; or high school diploma/GED with a minimum of 7 years of experience in enterprise security engineering, with at least 2 years directly supporting Zscaler solutions.
• Hands-on experience with ZIA, ZPA, and ZDX in a production environment.
• Strong understanding of cloud security concepts, identity management, and Zero Trust principles.
• Experience with automation for security operations and policy management using APIs.
• Zscaler certifications (ZCCA-IA, ZCCA-PA, ZCCP) are highly desirable.

Benefits

• Competitive salary range: United States of America - $121,500.00 - $240,500.00.
• Compensation will be determined based on relevant experience, performance, education, and internal equity.
• In addition to base salary, a competitive benefits package is offered depending on location.
• Pay equity and transparency are ensured, complying with all applicable labor laws.