Security & Development Operations Engineer

Galvanize

New York +1 more

Hybrid

Who this role is best for

Best suited to candidates with hands-on experience in cloud and identity management working in regulated financial services.

Best fit for

Candidates with 5+ years in regulated financial services and deep Microsoft 365 administration skills
— “5+ years of progressive IT experience in a regulated financial services environment”
Individuals with a strong security mindset and endpoint protection experience
— “Demonstrated security mindset (least privilege, encryption, EDR, patching, phishing defenses)”
Candidates with a background in cloud infrastructure and networking concepts
— “Maintain networking infrastructure and troubleshoot connectivity”
Individuals capable of integrating AI platforms and enterprise SaaS through automation
— “Experience assessing and securing enterprise AI, SaaS, and third-party application integrations through APIs, connectors, and automation platforms”

Things to consider

In-office presence required for 4 days per week in either New York or San Francisco
— “In-office presence in NY or SF, 4 days/week”
Role involves managing security and compliance across multiple platforms and vendors
— “Partner with internal stakeholders and external vendors to remediate security”

How to stand out

Highlight experience with both Microsoft Entra ID and Google Workspace in your resume and interviews
— “Administer and maintain Microsoft 365, Microsoft Entra ID, and Google Workspace”
Demonstrate a track record of implementing endpoint protection and threat detection systems
— “Implement and maintain endpoint protection, vulnerability management, and threat detection”
Showcase automation and scripting skills, especially with PowerShell and IaC
— “Scripting/automation (PowerShell) for scale and repeatability”
Emphasize hands-on experience with SIEM platforms like Microsoft Sentinel or Splunk
— “Experience with Security Information and Event Management (SIEM) platforms such as Microsoft Sentinel, Splunk, or comparable technologies”
Demonstrate familiarity with SaaS Security Posture Management (SSPM) and application governance
— “Experience with SaaS Security Posture Management (SSPM) tools and practices, including configuration monitoring, risk assessment, and application governance”

Pace · SteadyCollaboration · HighAutonomy · MediumDecision Impact · Team

Derived from job-description analysis by Serendipath's career intelligence engine.

What success looks like

secure and scalable cloud environment
compliance with regulations
efficient operations

Typical background

IT security backgroundcloud administration experiencedevops skills

Skills & requirements

Required

Cloud InfrastructureIdentity And Access ManagementSecurity OperationsEndpoint ManagementSaas Application Integration

Preferred

Infrastructure-as-codeAutomationAI Integration

Stack & domain

Microsoft 365Google WorkspaceCrowdstrike FalconAzureWindows Virtual DesktopJAMFInfrastructure-as-codeAutomationTeamworkProblem-solvingCommunicationCloud InfrastructureSecurity OperationsEnterprise Application Management

About the role

Original posting from Galvanize via Greenhouse

About Galvanize
Galvanize is a global asset manager focused on delivering compelling returns through deep specialization in energy and the business of decarbonization. The firm invests across asset classes including real estate, private credit, venture and growth capital, and public equities to accelerate commercially competitive technology and solutions. Built by investors with proven track records scaling multibillion dollar strategies, Galvanize pairs top-tier institutional investment talent with expertise across technology, science, market development, policy, and geopolitics to identify and execute on investment opportunities across all sectors of the economy. The firm has offices in San Francisco, New York, and London.
Role
Galvanize Climate is seeking a highly skilled and hands-on DevOps / Security Operations (SecOps) Engineer to manage, secure, and optimize our cloud-first enterprise environment. This role combines systems administration, identity and access management, endpoint security, compliance operations, cloud infrastructure, and SaaS application integration to support a secure and scalable technology ecosystem.
The ideal candidate will have strong experience administering Microsoft 365 Workspace environments, implementing security controls, managing endpoint devices, supporting compliance requirements, and integrating enterprise applications through modern authentication and automation technologies.
Essential Job Responsibilities
Identity & Access Management
Administer and maintain Microsoft 365, Microsoft Entra ID, and Google Workspace
Configure and maintain Single Sign-On (SSO), SCIM and OIDC provisioning, conditional access policies, and MFA.
Administer Azure Enterprise Applications
Manage Bring Your Own Device (BYOD) controls and mobile device compliance
Support enterprise application registration, authentication, and authorization
Security Operations
Monitor, investigate, and respond to security alerts and
Administer and optimize CrowdStrike Falcon and other security monitoring
Implement and maintain endpoint protection, vulnerability management, and threat detection
Review security posture across cloud and SaaS platforms and recommend
Partner with internal stakeholders and external vendors to remediate security
Endpoint & Device Management
Manage Windows, macOS, and mobile device
Administer Microsoft Entra-based device management and JAMF for Apple
Cloud & Infrastructure Administration
Provision and manage Azure resources and cloud
Support Windows Virtual Desktop (Azure Virtual Desktop)
Maintain networking infrastructure and troubleshoot connectivity
Manage domain registrations, DNS records, certificates, and cloud networking
Support LAN/Wi-Fi health (switching, APs, DHCP/DNS, VLANs, QoS for real-time media) and coordinate with providers on circuits and SD-WAN/VPN.
SaaS & Enterprise Application Management
Manage application security settings, permissions, and data-sharing
Design and maintain integrations using APIs, connectors, and modern automation
Support integration of AI-enabled platforms, MCPs (Model Context Protocols), and enterprise
Experience with Infrastructure-as-Code (IaC), automation, and cloud
Compliance & Governance
Administer compliance archiving and communications monitoring platforms including SteeleEye and Global Relay.
Support regulatory, audit, and governance
Maintain data retention and eDiscovery policies across Microsoft 365, Druva, and other
Implement and manage Data Loss Prevention (DLP) policies and information protection
Ensure security configurations align with company policies and compliance
Required Qualifications
5+ years of progressive IT experience in a regulated financial services environment (RIA/asset management/venture).
Deep administration of Microsoft 365 & Entra ID (identity, SSO integrations, Conditional Access, MFA).
Hands-on Intune expertise for Windows 11: Autopilot, configuration, app deployment, updates,
Solid networking fundamentals (switching/Wi-Fi, DHCP/DNS, VPN/SD-WAN concepts) and practical troubleshooting.
Experience with Cisco
Demonstrated security mindset (least privilege, encryption, EDR, patching, phishing defenses).
Familiarity with Microsoft Defender security stack and Purview governance/DLP.
Scripting/automation (PowerShell) for scale and repeatability
Hands-on experience with Security Information and Event Management (SIEM) platforms such as Microsoft Sentinel, Splunk, or comparable technologies.
Experience with SaaS Security Posture Management (SSPM) tools and practices, including configuration monitoring, risk assessment, and application governance.
Knowledge of Digital Forensics and Incident Response (DFIR) methodologies, investigation workflows, evidence preservation, and post-incident remediation.
Experience provisioning and administering Azure SQL databases, including access management, security controls, performance tuning, backup strategies, and disaster
Experience assessing and securing enterprise AI, SaaS, and third-party application integrations through APIs, connectors, and automation platforms. Exceptional communication, discretion, and customer service with senior
In-office presence in NY or SF, 4 days/week; flexibility for early/late coverage around key
Compensation and Benefits
Estimated base salary, depending on experience: $130,000 - $170,000 per annum
Role is also eligible for an annual discretionary bonus
Generous benefits package, including employer-paid health coverage options
401(k) plan with employer match
25 days of PTO which is inclusive of vacation, personal time and sick leave
Monthly wellness benefit that covers a broad range of activities
Annual stipend for employer-sponsored professional development opportunities
16 weeks paid parental leave for parents of any gender
Base Salary Pay Band$130,000—$170,000 USD

Source: Galvanize careers (Greenhouse)