Security & Development Operations Engineer

DevOps / Security Operations (SecOps) EngineerGalvanize Climate is seeking a highly skilled and hands-on DevOps / Security Operations (SecOps) Engineer to manage, secure, and optimize our cloud-first enterprise environment. This role combines systems administration, identity and access management, endpoint security, compliance operations, cloud infrastructure, and SaaS application integration to support a secure and scalable technology ecosystem.The ideal candidate will have strong experience administering Microsoft 365 Workspace environments, implementing security controls, managing endpoint devices, supporting compliance requirements, and integrating enterprise applications through modern authentication and automation technologies.Identity & Access ManagementAdminister and maintain Microsoft 365, Microsoft Entra ID, and Google WorkspaceConfigure and maintain Single Sign-On (SSO), SCIM and OIDC provisioning, conditional access policies, and MFA.Administer Azure Enterprise ApplicationsManage Bring Your Own Device (BYOD) controls and mobile device complianceSupport enterprise application registration, authentication, and authorizationSecurity OperationsMonitor, investigate, and respond to security alerts andAdminister and optimize CrowdStrike Falcon and other security monitoringImplement and maintain endpoint protection, vulnerability management, and threat detectionReview security posture across cloud and SaaS platforms and recommendPartner with internal stakeholders and external vendors to remediate securityEndpoint & Device ManagementManage Windows, macOS, and mobile deviceAdminister Microsoft Entra-based device management and JAMF for AppleCloud & Infrastructure AdministrationProvision and manage Azure resources and cloudSupport Windows Virtual Desktop (Azure Virtual Desktop)Maintain networking infrastructure and troubleshoot connectivityManage domain registrations, DNS records, certificates, and cloud networkingSupport LAN/Wi-Fi health (switching, APs, DHCP/DNS, VLANs, QoS for real-time media) and coordinate with providers on circuits and SD-WAN/VPN.SaaS & Enterprise Application ManagementManage application security settings, permissions, and data-sharingDesign and maintain integrations using APIs, connectors, and modern automationSupport integration of AI-enabled platforms, MCPs (Model Context Protocols), and enterpriseExperience with Infrastructure-as-Code (IaC), automation, and cloudCompliance & GovernanceAdminister compliance archiving and communications monitoring platforms including SteeleEye and Global Relay.Support regulatory, audit, and governanceMaintain data retention and eDiscovery policies across Microsoft 365, Druva, and otherImplement and manage Data Loss Prevention (DLP) policies and information protectionEnsure security configurations align with company policies and complianceRequired Qualifications5+ years of progressive IT experience in a regulated financial services environment (RIA/asset management/venture).Deep administration of Microsoft 365 & Entra ID (identity, SSO integrations, Conditional Access, MFA).Hands-on Intune expertise for Windows 11: Autopilot, configuration, app deployment, updates,Solid networking fundamentals (switching/Wi-Fi, DHCP/DNS, VPN/SD-WAN concepts) and practical troubleshooting.Experience with CiscoDemonstrated security mindset (least privilege, encryption, EDR, patching, phishing defenses).Familiarity with Microsoft Defender security stack and Purview governance/DLP.Scripting/automation (PowerShell) for scale and repeatabilityHands-on experience with Security Information and Event Management (SIEM) platforms such as Microsoft Sentinel, Splunk, or comparable technologies.Experience with SaaS Security Posture Management (SSPM) tools and practices, including configuration monitoring, risk assessment, and application governance.Knowledge of Digital Forensics and Incident Response (DFIR) methodologies, investigation workflows, evidence preservation, and post-incident remediation.Experience provisioning and administering Azure SQL databases, including access management, security controls, performance tuning, backup strategies, and disasterExperience assessing and securing enterprise AI, SaaS, and third-party application integrations through APIs, connectors, and automation platforms. Exceptional communication, discretion, and customer service with seniorIn-office presence in NY or SF, 4 days/week; flexibility for early/late coverage around keyCompensation and BenefitsEstimated base salary, depending on experience: $130,000 - $170,000 per annumRole is also eligible for an annual discretionary bonusGenerous benefits package, including employer-paid health coverage options401(k) plan with employer match25 days of PTO which is inclusive of vacation, personal time and sick leaveMonthly wellness benefit that covers a broad range of activitiesAnnual stipend for employer-sponsored professional development opportunities16 weeks paid parental leave for parents of any gender