Operations, Business Applications, Enterprise Architecture, and third-party technology and security providers to reduce cyber risk and strengthen the organization’s overall security posture.
KEY ACCOUNTABILITIES
1. Develop and execute Security strategy and roadmap. Identify capability gaps, emerging risks, and opportunities to improve
security maturity, and translate business and cybersecurity objectives into prioritized technical initiatives.
2. Define and maintain security architecture principles, patterns, and reference architectures across cloud and enterprise IT. Lead
security architecture reviews for new technologies, applications, infrastructure, and significant changes, providing risk-based
design requirements and recommendations.
3. Design, implement, and continuously improve security controls across Azure, Microsoft 365, Microsoft Defender, Entra ID, Intune,
endpoints, servers, networks, and other enterprise technologies.
4. Develop and maintain security standards, secure configuration baselines, architecture requirements, hardening guidance, and
engineering documentation. Ensure technical controls align with the organization's security strategy and frameworks such as NIST
Cybersecurity Framework 2.0.
5. Lead vulnerability and security exposure management across enterprise IT systems, including identification, technical risk
assessment, prioritization, mitigation strategy, remediation coordination, and risk tracking. Evaluate emerging vulnerabilities
and threats to determine potential organizational impact.
6. Evaluate security technologies and make recommendations regarding architecture, adoption, configuration, integration, consolidation, and retirement. Ensure security investments provide appropriate risk reduction while balancing operational requirements, integration complexity, and cost.
7. Partner with Security Operations to improve detection, logging,SIEM, EDR/XDR, and security monitoring integrations. Provide
senior technical expertise during significant cybersecurity incidents, including containment, remediation, recovery, and implementation of longer-term corrective controls.
8. Serve as a senior cybersecurity technical authority and trusted advisor to Security, IT Operations, Enterprise Architecture,
Business Applications, and technology leadership. Provide technical direction on complex security issues, mentor other
engineers, influence secure technology decisions, and work with MSSP/MDR, network, cloud, and other external partners to
ensure security requirements are effectively implemented.
Qualifications
7+ years of experience in Information Security Engineering, Cybersecurity Engineering, Infrastructure Security or other applicable fields.
Demonstrated experience developing and executing security strategy, technical roadmaps, and target-state security architectures, including identifying capability gaps and translating organizational risk into prioritized security initiatives.
Strong experience with security architecture and design, including architecture reviews, threat-informed design, defense-in-depth, Zero Trust principles, reference architectures, security patterns, and development of technical security standards.
Strong understanding of the Microsoft suite (MS Defender, Intune, Azure/Entra, M365).
Experience applying recognized cybersecurity frameworks and practices, particularly NIST Cybersecurity Framework (CSF), NIST SP 800-53, CIS Controls, CIS Benchmarks, and Zero Trust architecture principles.
Experience working with MSSP’s, MSNP’s, or other external SOC/MDR providers.
Strong documentation, communication, and cross functional collaboration skills.
Certifications such as CISSP, CCSP, CRISC, CCNA/CCNP, etc are beneficial.
The expected starting pay range for this role is $111,000 - $139,000 USD. This range is an estimate and base pay may be above or below the ranges based on several factors including but not limited to location, work experience, certifications, and education. In addition to base pay, Pattern’s compensation program includes a bonus structure for full-time employees of all levels. We also provide a comprehensive benefits package which includes medical, dental, vision, short and long-term disability, life insurance, voluntary benefits, family care benefits, employee assistance program, paid time off and bonding leave, paid holidays, 401(k)/RRSP retirement savings plan with employer contribution, and employee referral bonuses.
Pattern Energy Group is an Equal Opportunity Employer.
#LI-MK1 #LI-Hybrid
