Sr Cybersecurity Engineer

About the Role As a CBRE Sr Cybersecurity Engineer, you will support and secure global enterprise scale Active Directory (AD), Entra ID (Azure AD), and their underlying components in a hybrid environment. You will play a key role in authentication, automation, and monitoring, ensuring the integrity and availability of directory services for our organization. What You’ll Do Architect, implement, and maintain secure directory systems, including AD and Entra ID environments (on-premises and cloud).

Serve as a subject matter expert for authentication and directory facilitated authorization. Investigate and resolve security vulnerabilities related to directory system components. Lead and contribute to global projects enabling and supporting directory services.

Develop and maintain automated solutions for monitoring and managing directory service components at scale. Provide L3 support for critical directory service components, including troubleshooting and resolving complex authentication and directory issues. Collaborate with a globally distributed team, with members located in different regions.

Manage and provide guidance related to permissions, group policies, and access controls for AD and Entra ID. Collaborate with IT and security teams to ensure compliance and best practices. Document processes, configurations, and incident responses.

Lead by example and model behaviors that are consistent with CBRE RISE values. Impact the achievement of customer, operational, project, or service objectives across multi-discipline teams. Work is guided by functional policies which impact the design of procedures and policies.

Communicate difficult and complex ideas with the ability to influence. What You’ll Need Bachelor’s Degree preferred with 8-10 years of relevant experience with 3+ years supporting enterprise or government-level directory services (AD, Entra ID/Azure AD). In lieu of a degree, a combination of experience and education will be considered.

In-depth understanding of AD and Entra ID architecture, permissions, and security best practices. Expertise with Active Directory, Entra ID, Azure, AWS, GCP, DNS, Entra Conditional Access, Entra Connect, and Federation. Strong scripting and automation skills (PowerShell, Python, or similar).

Expertise in authentication protocols (Kerberos, SAML, OAuth, etc.). Experience with monitoring tools and SIEM platforms. Excellent troubleshooting, communication, and documentation skills.

Relevant certifications (preferred): Microsoft Certified, CISSP, etc. The innovative mentality to develop methods that go beyond existing solutions. Ability to solve unique problems using standard and innovative solutions having a broad impact on the business.

Expert organizational skills with an advanced inquisitive mindset. Equal Employment Opportunity CBRE is an equal opportunity employer that values diversity. We have a long-standing commitment to providing equal employment opportunity to all qualified applicants regardless of race, color, religion, national origin, sex, sexual orientation, gender identity, pregnancy, age, citizenship, marital status, disability, veteran status, political belief, or any other basis protected by applicable law.

Candidate Accommodations CBRE values the differences of all current and prospective employees and recognizes how every employee contributes to our company’s success. CBRE provides reasonable accommodations in job application procedures for individuals with disabilities. If you require assistance due to a disability in the application or recruitment process, please submit a request via email at [email protected] or via telephone at +1 866 225 3099 (U.S.) and +1 866 388 4346 (Canada). #J-18808-Ljbffr