Greenbox Capital

Platform Engineer

• Own and continuously improve Greenbox Capital’s Azure platform
• Design, configure, operate, and maintain Azure subscriptions, management groups, networking, compute, storage, platform services, and shared infrastructure
• Establish standards for environment separation, naming, tagging, approved services, secure configuration, and change management
• Design and maintain Microsoft Entra ID, MFA, Conditional Access, PIM, RBAC, managed identities, access reviews, and emergency-access procedures
• Apply least-privilege and separation-of-duties principles across cloud, SaaS, administrative, and non-human identities
• Own network segmentation, private connectivity, firewalls, DNS security, secure ingress/egress, and secrets management
• Operate cloud-security posture management, vulnerability remediation, configuration monitoring, logging, detection, and threat-response capabilities
• Build alerts and dashboards and coordinate containment, recovery, evidence preservation, and corrective action during security events
• Develop and maintain infrastructure using Terraform, Bicep, or comparable infrastructure-as-code practices
• Establish reusable modules, peer review, automated testing, deployment controls, and configuration-drift management
• Translate GLBA Safeguards Rule, SOC 2, NIST Cybersecurity Framework, customer commitments, and internal policies into technical controls
• Maintain evidence, support audits and customer security reviews, and address control gaps
• Partner with Data & AI leadership on data and AI governance controls, including discovery, classification, lineage, retention, DLP, access governance, and approved AI-service controls
• Help secure AI and agent-based workloads through data boundaries, privileged-action controls, logging, monitoring, human approval, and incident response
• Own cloud budgets, alerts, tagging standards, forecasting inputs, and recurring optimization recommendations
• Evaluate Azure-native and third-party capabilities based on effectiveness, effort, maintenance, licensing cost, and architectural fit
• Maintain at least 99.9% availability for critical platform services within operational control
• Support Sev-1/2 response expectations and validate disaster recovery at least twice annually
• Drive at least 95% of production infrastructure toward infrastructure-as-code management
• Maintain at least 98% resource-tagging compliance and improve cost visibility

Explore Senior Cloud Platform Security Engineer at Greenbox Capital. Review requirements and application details.