Senior Cloud Platform Security Engineer

🔥 13 hours ago

🇺🇸 United States – Remote

💵 $190k - $220k / year

⏰ Full Time

🟠 Senior

🏗️ Platform Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 1%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Greenbox Capital

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2012

💼 Consulting

📦 Logistics

💸 Finance

Consulting • Logistics • Finance

Greenbox Capital is a direct funder in the merchant cash advance industry providing small businesses access to much needed working capital through merchant cash advances, invoice factoring, and short-term small business loans. As a technology-driven alternative lender, Greenbox Capital’s enterprise solution, The Box, enhances deal security and improves funding speed and underwriting quality, offering a seamless experience for customers. Founded in 2012, the company values Commitment, Communication, Teamwork, Service, and Integrity, focusing on positively impacting small businesses in the US, Puerto Rico, and Canada.

📋 Description

• Own and continuously improve Greenbox Capital’s Azure platform • Design, configure, operate, and maintain Azure subscriptions, management groups, networking, compute, storage, platform services, and shared infrastructure • Establish standards for environment separation, naming, tagging, approved services, secure configuration, and change management • Design and maintain Microsoft Entra ID, MFA, Conditional Access, PIM, RBAC, managed identities, access reviews, and emergency-access procedures • Apply least-privilege and separation-of-duties principles across cloud, SaaS, administrative, and non-human identities • Own network segmentation, private connectivity, firewalls, DNS security, secure ingress/egress, and secrets management • Operate cloud-security posture management, vulnerability remediation, configuration monitoring, logging, detection, and threat-response capabilities • Build alerts and dashboards and coordinate containment, recovery, evidence preservation, and corrective action during security events • Develop and maintain infrastructure using Terraform, Bicep, or comparable infrastructure-as-code practices • Establish reusable modules, peer review, automated testing, deployment controls, and configuration-drift management • Translate GLBA Safeguards Rule, SOC 2, NIST Cybersecurity Framework, customer commitments, and internal policies into technical controls • Maintain evidence, support audits and customer security reviews, and address control gaps • Partner with Data & AI leadership on data and AI governance controls, including discovery, classification, lineage, retention, DLP, access governance, and approved AI-service controls • Help secure AI and agent-based workloads through data boundaries, privileged-action controls, logging, monitoring, human approval, and incident response • Own cloud budgets, alerts, tagging standards, forecasting inputs, and recurring optimization recommendations • Evaluate Azure-native and third-party capabilities based on effectiveness, effort, maintenance, licensing cost, and architectural fit • Maintain at least 99.9% availability for critical platform services within operational control • Support Sev-1/2 response expectations and validate disaster recovery at least twice annually • Drive at least 95% of production infrastructure toward infrastructure-as-code management • Maintain at least 98% resource-tagging compliance and improve cost visibility

🎯 Requirements

• Seven or more years of hands-on cloud infrastructure or security engineering experience • Production Azure environment ownership and demonstrated senior-level responsibility • Strong experience with Azure subscriptions, management groups, networking, Microsoft Entra ID, RBAC, Azure Policy, monitoring, backup and recovery, security controls, and cost management • Infrastructure-as-code experience using Terraform, Bicep, ARM templates, or comparable tooling • Source control and automated deployment practices • Experience with cloud security operations, vulnerability remediation, logging and detection, incident response, access governance, and disaster-recovery testing • Working knowledge of Microsoft Purview or comparable data-governance capabilities • Experience translating control requirements into technical designs, operating procedures, evidence, and measurable results • Strong documentation experience, including runbooks, architecture diagrams, standards, risk statements, and executive-level updates • Ability to coordinate with internal teams, auditors, managed-service providers, and technology vendors • Experience in financial services or another regulated environment using SOC 2, NIST Cybersecurity Framework, or similar frameworks is preferred • Experience securing AI, machine-learning, large-language-model, or agent-based workloads in production is preferred • Relevant Microsoft certifications are preferred, including Azure Security Engineer Associate, Cybersecurity Architect Expert, Security Operations Analyst Associate, or Azure Solutions Architect Expert • Strong judgment, independent risk-based decision-making, clear communication, organization, adaptability, and a growth mindset

🏖️ Benefits

• Competitive pay • Flexible PTO • Fully remote within the U.S. • Flexible work aligned to Eastern Time hours • Full benefits package: health, dental, and vision insurance