Cyber Security Engineer

About the Role

Atwell is seeking an experienced Cyber Security Engineer to join our Technology Services team and play a key role in building and advancing our Zero Trust security architecture.

This is an opportunity to help shape a security program that is still in its early stages. We're looking for someone who has already worked hands-on with Zero Trust architecture and can bring that experience to Atwell—helping us evaluate solutions, establish our approach, implement security controls, and ultimately help own this area of our security environment.

The right person will bring a strong foundation in Zero Trust architecture, identity and access management, and privileged access/least-privilege security models, along with the ability to partner across Technology teams to turn security strategy into practical solutions.

What You'll Do

• Help lead the design, implementation, and ongoing management of Atwell's Zero Trust security architecture.
• Evaluate Zero Trust technologies and help determine the solutions that best support Atwell's environment and business needs.
• Engineer and support identity and access management solutions, including authentication, authorization, and access governance.
• Develop and maintain secure access policies for users, devices, applications, and third-party integrations.
• Implement and manage privileged access controls, administrative account protections, and least-privilege security models.
• Design and enhance endpoint security, device trust, and compliance-based access controls.
• Partner with infrastructure, cloud, application, and support teams to integrate security requirements into technology solutions.
• Continuously evaluate identity, access, endpoint, and cloud security controls and identify opportunities to strengthen Atwell's security posture.
• Automate security processes and policy enforcement through scripting, APIs, and orchestration platforms.
• Support security initiatives across cloud, hybrid, and SaaS environments.
• Troubleshoot and resolve issues involving security controls while maintaining effective protection and business continuity.
• Support incident response involving identity, access, endpoint, and cloud security controls.
• Conduct security architecture reviews, document findings, and recommend risk-reduction strategies.
• Develop and maintain technical standards, procedures, and implementation documentation.
• Evaluate emerging security technologies and help shape Atwell's evolving Zero Trust roadmap.

What We're Looking For

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field, or equivalent practical experience.
• 5+ years of cybersecurity engineering, identity and access management, infrastructure security, or related experience.
• Meaningful hands-on experience implementing and managing Zero Trust security architecture in an enterprise environment.
• Strong experience with identity and access management and privileged access/least-privilege security models.
• Experience implementing enterprise security controls involving identity, authentication, privileged access, endpoint security, and access governance.
• Strong understanding of IAM, role-based access control (RBAC), multi-factor authentication (MFA), and single sign-on (SSO).
• Knowledge of authentication and authorization protocols such as SAML, OAuth, OpenID Connect, and Kerberos.
• Strong analytical, communication, and documentation skills.
• Ability to work independently while collaborating effectively across Technology teams.

Additional Experience That Can Help You Succeed

• Experience helping build or mature a Zero Trust program within a medium or large enterprise environment.
• Experience evaluating, implementing, or managing Zero Trust platforms.
• Experience securing cloud and hybrid environments.
• Hands-on experience with scripting, APIs, or orchestration tools used to automate security controls and workflows.
• Familiarity with identity governance, privileged access management, and access certification processes.
• Experience with cloud-native security controls and security posture management.
• Knowledge of network segmentation, micro-segmentation, and software-defined perimeter concepts.
• Familiarity with NIST Zero Trust Architecture (SP 800-207), CIS Controls, and other industry security frameworks.
• Experience supporting cloud, infrastructure, or security transformation initiatives.
• Relevant cybersecurity certifications such as Security+, CySA+, CISSP, CCSP, AZ-500, SC-300, or equivalent.