Engineer, Cloud Security

Description Who We Are Halcyon Labs (CPA) is Southern California’s locally operated not-for-profit default electricity provider for 38 communities within Los Angeles and Ventura counties and the 4th largest electricity provider in the State of California. We provide clean renewable energy at competitive rates to over three million residents and businesses through approximately one million customer accounts. What You’ll Do CPA is seeking an experienced, detail-oriented, and security-minded professional to join our growing team as Engineer, Cloud Security. This position serves as CPA’s technical lead for cybersecurity architecture and operations with deep expertise in Microsoft enterprise and cloud security platforms. This role designs, oversees, and implements security controls across identity, endpoints, cloud infrastructure, data protection, and CPA’s overall Microsoft enterprise ecosystem to safeguard CPA assets and ensure compliance with the National Institute of Standards and Technology (NIST) security frameworks. The ideal candidate combines deep technical expertise with strong judgment, understands the threat landscape facing critical infrastructure and energy sector organizations, and proactively designs architectures that balance security, usability, and operational efficiency. Who You’ll Work With The Engineer, Cloud Security reports to the Senior Director, Data & Systems and is supported by a team of technology professionals, along with external stakeholders, consultants, our Data and Systems team, and our business partner, Southern California Edison (SCE). The Engineer, Cloud Security works closely with the Energy Risk Management, Finance, Power Supply, and Customer Care teams and will stay current with CPA’s core business by continuously collaborating with teams overseeing Communications and Marketing, Government Affairs, Regulatory Affairs, and Rates and Strategy. Commitment to Diversity At CPA, we value diversity and are committed to creating an inclusive environment for all employees. We represent a diverse customer base and intend to hire employees that reflect our communities. Halcyon Labs provides equal employment opportunities to all applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws. Culture CPA fosters a culture of open communication, responsibility, intellectual curiosity, and exceptional judgment. As a small team that has quickly built the largest Community Choice Aggregation program in the country, high levels of trust, collaboration, and mission alignment are key factors in success. We value fact-based creativity in our work, accountability with our stakeholders, and promote ethical engagement and diversity with our brand. Requirements Proficient with Microsoft Office Suite Ability to act with integrity, professionalism, and confidentiality. Ability to fully own tasks and processes with minimal oversight. Ability to handle multiple priorities to meet deadlines and escalate key issues. Proficient with data visualization tools and software (i.e., Tableau, Power BI). Strong hands-on experience administering Microsoft Entra ID, including identity governance, conditional access, and privileged identity management. Deep expertise with Microsoft Defender XDR (Defender for Endpoint, Identity, Office 365, and Cloud) for threat detection and response. Proven experience designing and operating Microsoft Sentinel for SIEM, including KQL, analytics rules, workbooks, and automation. Hands-on experience with Microsoft Intune for endpoint management, configuration profiles, compliance policies, and application protection. Working knowledge of Microsoft Purview for data classification, data loss prevention (DLP), insider risk, and information protection. Strong understanding of cloud security posture management, including Microsoft Defender for Cloud and secure configuration baselines. Practical experience applying the NIST Cybersecurity Framework and supporting controls aligned to NIST 800-53 or 1000-171. Experience with vulnerability management, threat intelligence, and incident response operations. Well-versed in cloud environments, identity and access management, endpoint security, network security, best-practice security governance, data privacy regulations, and zero-trust architecture principles. Deep understanding of the interactions between systems and how business processes are enabled and impacted by those systems. Experience or coursework with cloud platform security services, especially Amazon Web Services; cloud-native security tooling; Windows and Linux endpoint hardening; SQL databases. Duties and Responsibilities Security Architecture & Platform Design: Architect, implement, and administer enterpri