Cyber Security Engineer, Sr

Founded in 1977 as the Senior Care Action Network, SCAN began with a simple but radical idea: that older adults deserve to stay healthy and independent. That belief was championed by a group of community activists we still honor today as the "12 Angry Seniors." Their mission continues to guide everything we do.

Today, SCAN is a nonprofit health organization serving more than 500,000 people across Arizona, California, Nevada, New Mexico, Texas, and Washington, with over $8 billion in annual revenue. With nearly five decades of experience, we have built a distinctive, values-driven platform dedicated to improving care for older adults.

Our work spans Medicare Advantage, fully integrated care models, primary care, care for the most medically and socially complex populations, and next-generation care delivery models. Across all of this, we are united by a shared commitment: combining compassion with discipline, innovation with stewardship, and growth with integrity.

At SCAN, we believe scale should strengthen-not dilute-our mission. We are building the future of care for older adults, grounded in purpose, accountability, and respect for the people and communities we serve.

The Job

The Information Security Engineer is responsible for safeguarding the organization's digital assets and information systems by implementing, monitoring, and optimizing security solutions across Azure, Windows, and M365 hybrid environments. This position plays a critical role in identifying and mitigating organizational risks, enforcing best practices in identity and access management, and supporting a wide range of Microsoft technologies, including Intune, Defender, and SharePoint Online. The role requires proactive collaboration with cross-functional teams to deliver effective security deployments, ensure regulatory and policy compliance, and maintain a robust posture against evolving cyber threats. The engineer will prioritize, plan, and manage projects and incidents, uphold the confidentiality and integrity of sensitive information, and continually enhance technical expertise through education and engagement with the cybersecurity community. Serves as a subject matter expert for enterprise security technologies, providing technical leadership, guidance, and escalation support across IT and business teams.

You Will

• Safeguarding the organization's digital assets and information systems by implementing, monitoring, and optimizing security solutions across Azure, Windows, and M365 hybrid environments while maintaining a robust posture against evolving cyber threats.
• Identifying and mitigating organizational risks, enforcing best practices in identity and access management, and ensuring regulatory and policy compliance.
• Supporting a wide range of Microsoft technologies, including Intune, Defender, and SharePoint Online, and providing extensive hands-on experience in securing and support of Microsoft Technology stack, for example: Azure Cloud, Entra ID (Defender for Identity), Vulnerability Management, Defender for 365, Defender for Cloud Apps, M365, O365, SharePoint Online, Intune, and Windows 365.
• Hands-on experience with Intune, patching, and configuration of device and compliance policies, including strong understanding of IAM, Conditional Access, and experience with least privileged roles in alignment with Zero Trust and Azure Identity and Role Configuration.
• Work collaboratively with cross-functional teams to support security deployments and implementations and provide escalation support for various development and infrastructure teams as well as other groups within IT.
• Familiarity with networking components, such as next-gen firewalls and Prisma Access, and knowledge of securing Azure/M365 hybrid environments.
• Knowledge of brokering security education such as Phishing Campaigns and user outreach while maintaining professional and technical knowledge by attending educational workshops; reviewing professional publications; establishing personal networks; participating in professional societies.
• Prioritizing, planning, and managing projects and incidents, including project and task management that includes planning, prioritizing, organizing, gathering facts, exercising sound judgment in problem solving, decision making and facilitating solutions.
• Maintaining data integrity in the organization's systems while keeping strict confidentiality of the information within and upholding the confidentiality and integrity of sensitive information.
• Adapting to frequently changing priorities and deadlines, ensuring accurate and timely completion of all the work assigned, and demonstrating detail oriented ability to follow through to completion with the ability to focus on tasks and maintain concentration to complete tasks and assignments.
• We seek Rebels who are curious about AI and its power to transform how we operate and serve our members.
• Actively support the achievement of SCAN's Vision and Goals.
• Other duties as assigned.

Your Qualifications

• Bachelor's Degree or equivalent work experience required
• 5+ years of experience in securing Azure/M365 hybrid environments and running knowledge of configuring various security platforms within Azure/M365.
• Hands-on experience with Intune, patching, and configuration of device and compliance policies.
• Ability to identify and address organizational risks.
• Strong understanding of IAM, Conditional Access, and experience with least privileged roles in alignment with Zero Trust, including Azure Identity and Role Configuration experience.
• Familiarity with networking components, such as next-gen firewalls and Prisma Access.
• Work collaboratively with cross-functional teams to support security deployments and implementations.
• Knowledge of brokering security education such as Phishing Campaigns and user outreach.
• Extensive hands-on experience in securing and support of Microsoft Technology stack, for example: Azure Cloud, Entra ID (Defender for Identity), Vulnerability Management, Defender for 365, Defender for Cloud Apps, M365, O365, SharePoint Online, Intune, and Windows 365.
• Project and task management that includes planning, prioritizing, organizing, gathering facts, exercising sound judgment in problem solving, decision making and facilitating solutions.
• Maintains data integrity in the organization's systems while keeping strict confidentiality of the information within.
• Adapts to frequently changing priorities and deadlines.
• Detail oriented with ability to follow through to completion, along with the ability to focus on tasks and maintain concentration to complete tasks and assignments.
• Provides escalation support for various development and infrastructure teams as well as other groups within IT and ensures accurate and timely completion of all the work assigned.
• Knowledge of securing hybrid cloud environments.
• Strong verbal and written communication skills.
• Experience with Change/Release Management.
• Experience with HIPAA compliance and HITRUST certification.
• Technical knowledge of Configuring Identity Management and Roles.
• Experience with application monitoring of Windows systems and services.
• Must be able to provide exceptional technical documentation.
• Demonstrate problem solving skills and troubleshooting techniques.
• Ability to multi-task and handle a variety of work assignments.
• Securing Azure/M365 hybrid environments and configuring various security platforms within Azure/M365.
• Hands-on experience with Intune, patching, and configuration of device and compliance policies.
• Strong understanding of IAM, Conditional Access, least privileged roles in alignment with Zero Trust, and Azure Identity and Role Configuration.
• Ability to identify and address organizational risks and maintain a robust posture against evolving cyber threats.
• Familiarity with networking components, such as next-gen firewalls and Prisma Access.
• Extensive hands-on experience in securing and support of Microsoft Technology stack, including Azure Cloud, Entra ID (Defender for Identity), Vulnerability Management, Defender for 365, Defender for Cloud Apps, M365, O365, SharePoint Online, Intune, and Windows 365.
• Project and task management that includes planning, prioritizing, organizing, gathering facts, exercising sound judgment in problem solving, decision making and facilitating solutions.
• Ability to work collaboratively with cross-functional teams to support security deployments and implementations and provide escalation support for development and infrastructure teams.
• Ability to maintain data integrity in the organization's systems while keeping strict confidentiality of the information within.
• Ability to adapt to frequently changing priorities and deadlines, multi-task, and ensure accurate and timely completion of all assigned work while maintaining attention to detail and focus.

What's in it for you?

• Base Pay Range: $92,400 to $159,133 annually

• An annual employee bonus program

• Robust Wellness Program

• Generous paid-time-off (PTO)

• 11 paid holidays per year, 1 floating holiday, birthday off, and 2 volunteer days

• Excellent 401(k) Retirement Saving Plan with employer match

• Robust employee recognition program

• Tuition reimbursement

• An opportunity to become part of a team that makes a difference to our members and our community every day!

We're always looking for talented people to join our team! Qualified applicants are encouraged to apply now!

At SCAN we believe that it is our business to improve the state of our world. Each of us has a responsibility to drive Equality in our communities and workplaces. We are committed to creating a workforce that reflects our community through inclusive programs and initiatives such as equal pay, employee resource groups, inclusive benefits, and more.

SCAN is proud to be an Equal Employment Opportunity and Affirmative Action workplace. Individuals seeking employment will receive consideration for employment without regard to race, color, national origin, religion, age, sex (including pregnancy, childbirth or related medical conditions), sexual orientation, gender perception or identity, age, marital status, disability, protected veteran status or any other status protected by law. A background check is required.

#LI-JB1 #LI-Hybrid

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities

The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor's legal duty to furnish information. 41 CFR 60-1.35(c)