Cybersecurity Engineer

Kimley-Horn is seeking a Cybersecurity Engineer to support the Information Security team in strengthening the firm’s protection across cloud environments, identities, data, and AI technologies. This role emphasizes cloud security, identity and access, data protection, privileged access controls, and governance for AI and agentic AI capabilities.

Location and Work Mode

• Location: Warrenville, IL
• Work setup: Onsite (in-office position)

Role Focus

• Secure cloud infrastructure by identifying risks and translating decisions into security outcomes
• Drive Identity and Access Management (IAM) initiatives across authentication, authorization, and identity governance
• Protect sensitive data using Data Loss Prevention (DLP) across cloud services, endpoints, collaboration platforms, and AI-enabled applications
• Implement and manage Privileged Access Management (PAM) capabilities for privileged administrative and service identities
• Establish security policies and governance for AI and agentic AI technologies, including authentication, authorization, monitoring, and lifecycle management

Key Responsibilities

• Analyze cloud infrastructure to understand and communicate risks, concerns, and the outcomes of security decisions
• Lead IAM initiatives, including authentication, authorization, privileged access management, conditional access, and identity governance
• Develop and maintain DLP controls to protect sensitive business data across cloud services, endpoints, collaboration platforms, and AI-enabled applications
• Design, implement, and operate PAM solutions, including privileged account lifecycle management, just-in-time access, credential protection, session monitoring, and privileged access governance
• Define security policies and governance for AI and agentic AI technologies that require authentication, authorization, monitoring, and lifecycle management
• Track cloud application vulnerabilities using security tooling and coordinate with development teams to plan remediation
• Conduct threat modeling, security assessments, and architecture reviews for cloud services, AI applications, and new technology deployments
• Partner with IT, infrastructure, and application teams to integrate security controls into cloud platforms, identity services, and AI-powered business solutions
• Participate in tabletop exercises and simulations to test and improve incident response plans
• Support compliance, audit, and risk management by documenting security controls, procedures, and technical standards

Required Qualifications

• Education: Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field
• Experience: 5+ years in Cloud Security, Identity and Access Management, Information Security, or a similar enterprise-level role
• Certifications: Professional certifications such as Security+, Cloud+, AZ-300, AZ-500, CCSP, CISSP, or other relevant security certifications
• Experience designing, implementing, and supporting security controls in Microsoft Azure, AWS, or other enterprise cloud environments
• Hands-on experience with IAM technologies including authentication, authorization, single sign-on (SSO), federation, identity governance, and conditional access
• Experience administering or supporting PAM solutions, including privileged account governance, just-in-time access, credential vaulting, and privileged session management
• Experience implementing and managing DLP, information protection, and data governance controls across cloud services, endpoints, and collaboration platforms
• Knowledge of AI and agentic AI security concepts, including governance, identity lifecycle management, authorization models, and monitoring of AI agents
• Knowledge of security frameworks and standards such as NIST CSF, CIS Controls, ISO 27001, and Zero Trust Architecture
• Strong analytical, troubleshooting, and problem-solving skills
• Experience with change-management policies and procedures
• Strong communication skills in writing and verbally, with the ability to convey complex technical concepts to non-technical stakeholders

Technologies and Tools

• Microsoft Azure, AWS
• Microsoft Entra ID
• PIM, Identity Governance, Conditional Access
• Microsoft Purview DLP and Information Protection
• CyberArk, OneIdentity, Delinea
• Security+, Cloud+, AZ-300, AZ-500, CCSP, CISSP
• NIST CSF, CIS Controls, ISO 27001
• Zero Trust Architecture

Preferred Skills

• Microsoft Entra ID, PIM, Identity Governance, and Conditional Access
• Microsoft Purview DLP and Information Protection
• CyberArk, OneIdentity, Delinea, or similar PAM platforms
• Security automation and orchestration experience
• AI and agentic AI security governance
• Experience managing machine identities, service accounts, and workload identities
• Threat modeling and cloud security architecture review experience

Benefits

• Exceptional Retirement Plan: 2-to-1 company match on up to 4% of eligible compensation (salary + bonus) plus additional profit-sharing contribution
• Comprehensive Health Coverage: Low-cost medical, dental, and vision insurance options
• Time Off: Personal leave, flexible scheduling, floating holidays, and half-day Fridays
• Financial Wellness: Student loan matching in the 401(k) and performance-based bonuses
• Professional Development: Tuition reimbursement and extensive internal training programs
• Family-Friendly Benefits: New Parent Leave, family building benefits, and childcare resources