RESUME AND COVER LETTER REQUIRED TO BE CONSIDERED FOR THIS POSITIONDeadline to apply is April 23, 2026Salary: $102,000 - $116,000 annually. Salary is dependent on experience and qualifications.Position SummaryReporting to EDUCAUSE’s Senior Director of Information Technology Operations, the Senior Azure & Cybersecurity Engineer uses extensive cybersecurity expertise to lead and manage our enterprise IT infrastructure while ensuring compliance with NIST, CIS, and PCI standards. This role is responsible for implementing security controls, maintaining system hardening, and managing infrastructure across multiple platforms while adhering to strict security frameworks. The position requires deep expertise in a Microsoft environment, with a thorough focus on security automation, compliance monitoring, and vulnerability management. The individual in this position will actively collaborate with other members of the IT Department and others across the association to support departmental and organizational strategic plans, goals, and initiatives.Essential Duties and ResponsibilitiesSupervisory ResponsibilitiesNoneSecurity Engineering, Compliance, and Risk ManagementImplement and maintain security controls in accordance with NIST frameworks, CIS benchmarks, and PCI standardsLead vulnerability assessments, security hardening initiatives, and remediation efforts across the enterpriseDesign and maintain a secure Azure/Entra cloud environment following security best practices and compliance requirementsDevelop and execute security automation scripts using PowerShell and/or other scripting language for system hardening and compliance validationManage and respond to security incidents, including zero-day vulnerabilities and critical patchesImplement and maintain secure configurations for Azure /Entra, Group Policy, Intune and PKI infrastructureConfigure and maintain system logging and security monitoring solutions (e.G., Splunk, Syslog)Perform security assessments and audits to ensure compliance industry standard frameworksLead secure infrastructure migration and enhancement projects while maintaining compliance requirementsManage enterprise database systems with focus on security best practices and access controlsImplement and maintain secure backup and disaster recovery solutionsDevelop and maintain security documentation and standard operating proceduresCoordinate with cybersecurity team for continuous security improvements and threat mitigationManage and maintain company risk management platform for audit readiness against NIST and PCI standards.Design and maintain Zero Trust architecture with identity-based access, continuous verification, least-privilege enforcement, and device trust controls.Implement and manage Zero Trust Network Access (ZTNA) to securely support remote and cloud workloads while reducing dependence on perimeter-based securityEvaluate and secure AI-enabled tools and platforms in alignment with EDUCAUSE security standards, data governance,



and regulatory requirements.Implement security controls for AI workloads, including data protection, access controls, monitoring for misuse, and safeguards against data leakage.Partner with stakeholders to assess AI risks, define responsible-use guardrails, and integrate AI threats into security, incident response, and risk management processes.Continue to refine organization AI security practices, policies, and tooling as organizational needs evolveService and SupportAlways represent EDUCAUSE in a professional manner; engages with co-workers, volunteers, and members in a civil, caring, respectful way. Supports the professional development of others in their work to advance the mission and vision of EDUCAUSE.Participate in EDUCAUSE events and activities as needed. Travel may be required to support EDUCAUSE conferences/events, research team operations, and external events relevant to the position.Act as a departmental liaison with employees, members, volunteers, volunteer groups, and clients.Supports members in a manner that facilitates their growth, engagement, and enhances their EDUCAUSE experience.As a frontline user of EDUCAUSE systems and data services, complies with data quality standards; adheres to data governance policies, procedures, and processes for ensuring data integrity. May act as the application or data collection lead for the department.Perform other duties as assigned.QualificationsEducation and ExperienceAssociate’s degree in Information Technology, Computer Science, or related field required; Bachelor's degreepreferredMinimum of 10 years of experience in systems administration requiredMinimum of 8 years of experience with Microsoft technologies and security hardening requiredMinimum of 5 years of experience implementing NIST, CIS, and/or PCI compliance standards preferredMinimum of 8 years of experience in security automation using PowerShell or other scripting languages preferredCertificates and LicensesITIL Certifications, preferredAzure-Entra/Microsoft Certifications, preferredSecurity certifications preferred (e.G., Security+, CISSP, CCSP)Knowledge, Skills, and AbilitiesExpert knowledge of NIST frameworks, CIS benchmarks, and PCI standardsAdvanced understanding of security compliance requirements and implementation strategiesProven expertise in system hardening techniques for both Windows and Linux environmentsThorough knowledge of security automation and compliance validation toolsExperience with security incident response and vulnerability managementAdvanced knowledge of PKI infrastructure and certificate managementGroup Policy security (Azure/Entra)Windows Server security features and hardeningDatabase security and access controlsSecurity log analysis and monitoring toolsVulnerability assessment toolsSecurity automation scriptingZero-Trust Network Access solutionsSecure remote access solutionsNetwork security architectureSecurity best practices for cloud environments (Azure/Entra)Change management in high-security environmentsSecurity audit procedures and documentationCompliance reporting and validationSecurity incident handling and responseRisk assessment and mitigation strategiesPhysical RequirementsProlonged periods of sitting at a desk and working on a computer.Remote Work RequirementsScheduled working hours either in the employee’s time zone or EDUCAUSE core working hours or core working hours to be determined with the supervisor.Be available and responsive during scheduled work hours.Any time off or change in working hours must be pre-arranged according to department guidelines and consistent with the rules applicable to employment (e.G., vacation, sick, personal, leave of absence).Travel Requirements10% or less travel required throughout the year.BenefitsEDUCAUSE not only offers meaningful work and dedicated colleagues; we also have a robust benefit package that includes:Medical, Dental, and Vision2-for-1 employer match to your 403(b) retirement plan; up to 10% of yourbase salaryEmployer-paid Life and AD&D, Short-term Disability, and Long-term Disability15 days of vacation and 6 days of personal time annually9 paid holidaysOne week of paid time off when offices are closed between Christmas and New Year’s Day36-hour work week (without any reduction in pay) amounting to 26 additional days of paid time off each yearEmployee Assistance Program (EAP)Emergency Travel AssistanceProfessional development assistanceMonthly connectivity reimbursementEEO StatementEDUCAUSE is committed to an inclusive workplace and is proud to be an equal opportunity employer. EDUCAUSE provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws. EDUCAUSE recognizes that the unique backgrounds, talents, skills, and contributions of every individual improve and enhance the quality of the association. Creating an setting of inclusion is an EDUCAUSE organizational goal, which includes, but is not limited to: Treating everyone with dignity, respect, and fairness; Providing insights and input as a work contributor; Listening to and acknowledging others’ contributions; Contributing to an openand welcoming environment across demographic categories and physical locations; Meeting others attheirpoint of need to advance organizational achievement; For supervisors, ensuring everyone's input is heard and considered.#J-18808-Ljbffr

📌 Sr. Azure & Cybersecurity Engineer - $102,000 - $116,000 A Year (Toronto)
🏢 Educause
📍 Toronto