Staff Security Engineer

POSITION SUMMARYWe are hiring a Staff Infrastructure & Security Engineer to own and improve our cloud-firstMicrosoft Azure environment and endpoint management in a macOS-heavy company (withsome Windows PCs). This role combines hands-on administration, security hardening,automation, and operational excellence across cloud identity, device management, andendpoint security.ABOUT CARDONE VENTURESOur mission is to help business owners achieve their personal, professional, and financial goalsthrough the growth of their businesses. We work in dozens of verticals and provide strategicbusiness guidance through courses, live events, partnerships, and investments. Our core valuesare the backbone of our business and guide our hiring process: we are inspirational,accountable, transparent, disciplined, aligned, and results oriented. This company operatesnationally and is growing by the day.SUCCESS LOOKS LIKE• Consistent, secure endpoint configurations with fewer repeat incidents and smooth OSupgrade cycles.• Reliable onboarding/offboarding and standardized provisioning with minimal manualsteps.• Clear Azure governance (RBAC/tagging/policy/logging) and improved visibility into costand security posture.• Strong runbooks, automation, and knowledge transfer that reduces support load.OBJECTIVES• Administer and support core Azure services including subscriptions, resource groups,governance, and operational monitoring.• Implement and maintain Azure security and governance controls including RBAC,policies, tagging standards, logging/monitoring, and cost controls.• Support Azure networking and security concepts as needed including VNets, subnets,NSGs, and VPN connectivity troubleshooting.• Own endpoint management for macOS and Windows: enrollment, configurationprofiles, compliance/security baselines, and application deployments.• Maintain endpoint security posture including disk encryption enforcement, EDR/AVhealth, patching/OS update strategies, and remediation coordination.cardoneventures.com Confidential and proprietary. Copyright © by Cardone Ventures. All Rights Reserved.• Support identity and access integrations across Okta, Microsoft Entra ID (Azure AD), andkey SaaS applications.• Automate repeatable tasks using scripting including Bash/Zsh, PowerShell, and Pythonas needed.• Create and maintain SOPs, runbooks, and knowledge base materials; train Tier 1/2support on standards and troubleshooting steps.COMPETENCIES• Hands-on Microsoft Azure administration and operational troubleshooting.• Strong macOS support and management experience in a business environment withworking Windows knowledge.• Experience with an endpoint management platform for macOS such as Jamf, Kandji,Intune, or Workspace ONE.• Familiarity with identity concepts and troubleshooting in Okta (SSO/MFA) and Entra ID(Azure AD) environments.• Experience with Microsoft Intune and Entra ID Conditional Access or Okta devicetrust/posture equivalents.• Scripting and automation experience for provisioning and support workflows inPowerShell, Bash, or Python.• Exposure to Azure governance and security tooling including Azure Policy, Key Vault,and Log Analytics/Azure Monitor.• Strong documentation and operational discipline including change control andrepeatable process development.EDUCATION AND EXPERIENCE• 3–7+ years in endpoint engineering, cloud administration, or a combinedCloudOps/Endpoint role.• Certifications preferred: Azure Administrator, Jamf/Kandji credentials, MD-102, Security+.• Degree in Computer Science, Information Technology, or relevant field preferred.PHYSICAL REQUIREMENTS• Prolonged periods sitting at a desk and working on a computer.• On-site role; travel between office locations as needed.COMMITMENT TO DIVERSITYAs an equal opportunity employer committed to meeting the needs of a multigenerational andmulticultural workforce, we recognize that a diverse staff, reflective of our community, is anintegral and welcome part of a successful and ethical business. We hire local talent at all levelsregardless of race, color, religion, age, national origin, gender, gender identity, sexualorientation or disability, and actively foster inclusion in all forms both within our company andacross interactions with clients, candidates and partners.