Security & Development Operations Engineer

Galvanize Climate is seeking a highly skilled and hands-on DevOps / Security Operations (SecOps) Engineer to manage, secure, and optimize our cloud-first enterprise environment. This role combines systems administration, identity and access management, endpoint security, compliance operations, cloud infrastructure, and SaaS application integration to support a secure and scalable technology ecosystem.

Responsibilities

Administer and maintain Microsoft 365, Microsoft Entra ID, and Google Workspace; Configure and maintain Single Sign-On (SSO), SCIM and OIDC provisioning, conditional access policies, and MFA; Administer Azure Enterprise Applications; Manage Bring Your Own Device (BYOD) controls and mobile device compliance; Support enterprise application registration, authentication, and authorization; Monitor, investigate, and respond to security alerts; Administer and optimize CrowdStrike Falcon and other security monitoring; Implement and maintain endpoint protection, vulnerability management, and threat detection; Review security posture across cloud and SaaS platforms and recommend improvements; Partner with internal stakeholders and external vendors to remediate security issues; Manage Windows, macOS, and mobile devices; Administer Microsoft Entra-based device management and JAMF for Apple; Provision and manage Azure resources and cloud infrastructure; Support Windows Virtual Desktop (Azure Virtual Desktop); Maintain networking infrastructure and troubleshoot connectivity; Manage domain registrations, DNS records, certificates, and cloud networking; Support LAN/Wi-Fi health (switching, APs, DHCP/DNS, VLANs, QoS for real-time media) and coordinate with providers on circuits and SD-WAN/VPN; Manage application security settings, permissions, and data-sharing; Design and maintain integrations using APIs, connectors, and modern automation; Support integration of AI-enabled platforms, MCPs (Model Context Protocols), and enterprise applications; Experience with Infrastructure-as-Code (IaC), automation, and cloud; Administer compliance archiving and communications monitoring platforms including SteeleEye and Global Relay; Support regulatory, audit, and governance requirements; Maintain data retention and eDiscovery policies across Microsoft 365, Druva, and other platforms; Implement and manage Data Loss Prevention (DLP) policies and information protection; Ensure security configurations align with company policies and compliance

Requirements

5+ years of progressive IT experience in a regulated financial services environment (RIA/asset management/venture); Deep administration of Microsoft 365 & Entra ID (identity, SSO integrations, Conditional Access, MFA); Hands-on Intune expertise for Windows 11: Autopilot, configuration, app deployment, updates; Solid networking fundamentals (switching/Wi-Fi, DHCP/DNS, VPN/SD-WAN concepts) and practical troubleshooting; Experience with Cisco; Demonstrated security mindset (least privilege, encryption, EDR, patching, phishing defenses); Familiarity with Microsoft Defender security stack and Purview governance/DLP; Scripting/automation (PowerShell) for scale and repeatability; Hands-on experience with Security Information and Event Management (SIEM) platforms such as Microsoft Sentinel, Splunk, or comparable technologies; Experience with SaaS Security Posture Management (SSPM) tools and practices, including configuration monitoring, risk assessment, and application governance; Knowledge of Digital Forensics and Incident Response (DFIR) methodologies, investigation workflows, evidence preservation, and post-incident remediation; Experience provisioning and administering Azure SQL databases, including access management, security controls, performance tuning, backup strategies, and disaster recovery; Experience assessing and securing enterprise AI, SaaS, and third-party application integrations through APIs, connectors, and automation platforms; Exceptional communication, discretion, and customer service with senior stakeholders; In-office presence in NY or SF, 4 days/week; flexibility for early/late coverage around key events

Benefits

Annual discretionary bonus; Generous benefits package, including employer-paid health coverage options; 401(k) plan with employer match; 25 days of PTO inclusive of vacation, personal time and sick leave; Monthly wellness benefit that covers a broad range of activities; Annual stipend for employer-sponsored professional development opportunities; 16 weeks paid parental leave for parents of any gender