Join us as a Systems Engineer, Cloud Security and help protect and modernize a Microsoft-powered enterprise spanning cloud and on-prem environments. You'll play a key role in strengthening security, governance, and cyber resilience using cutting-edge tools and platform-native controls. In this role, you'll design and deliver security solutions across Microsoft Azure, Microsoft 365, and identity platforms, embedding security into every stage of cloud adoption and operations. You'll collaborate closely with infrastructure, network, and application teams to build secure, scalable systems from the ground up. We're looking for a hands-on engineer with experience in Azure security, identity and access management, and cloud networking, who can turn security strategy into real-world impact. If you enjoy solving complex challenges and driving secure innovation in a hybrid environment, this role is for you. This position will be based at our West Los Angeles, CA office. We work a hybrid schedule with an in-office requirement Monday-Wednesday and the option to work remotely on Thursday and Friday. Job Description - Administer and secure Active Directory and Entra ID, including Conditional Access, MFA, and identity policy governance - Design, implement, and maintain secure architecture and design principles across Microsoft Azure infrastructure - Develop, implement, and operate cybersecurity and data governance controls using Microsoft Purview - Manage and optimize Azure Privileged Identity Management (PIM) and privileged access workflows - Support and contribute to automation and Infrastructure-as-Code (IaC) initiatives to improve security consistency and scalability - Collaborate with cross-functional teams to design, review, and enhance cloud and on-premises security architectures - Monitor and respond to security alerts and incidents across hybrid cloud and on-prem environments - Conduct security investigations, perform incident remediation, and complete root-cause analysis with actionable improvement recommendations - Provide support for SharePoint Online and general Microsoft 365 administration as needed - Assist with certificate lifecycle management (CLM) tools, processes, and operational support Qualifications - 4+ years of experience with Microsoft infrastructure, including Active Directory, Entra ID (Azure AD), and Microsoft Azure - Hands-on experience securing identity and access using MFA, Conditional Access, and cloud network security controls - Working knowledge of identity and access management (IAM), privileged access management (PIM), and identity governance - Familiarity with automation, DevOps practices, and Infrastructure-as-Code (IaC) approaches - Strong communication and technical documentation skills, with the ability to clearly articulate security requirements and designs Pay Range: $130,000 - $145,000 and may include a discretionary bonus. Final compensation will be dependent upon skills & experience. Additional Information - Thriving Wellness Community: Access to top-notch medical coverage comprehensive vision and dental plans, and a 401k with match eligibility to secure your financial future and including: - 24/7 online physician consultations - virtual mental health resources - life coaching - engaging employee community groups - cash rewards for healthy habits and fitness reimbursements - library of on-demand fitness videos - Career Advancement Opportunities: Unlock your potential with clear paths for career progression and internal mobility across our diverse family of brands and business units. - Focused Learning and Development: Grow as a leader with our dedicated Learning and Organizational Development department, offering extensive resources like People Manager and leadership training, webinars, and eLearning courses. - Empowering Mentorship Program: Connect with colleagues through our company-wide mentorship program to share goals, overcome challenges, and drive your career forward. - Continuous Improvement Training: Participate in training that empowers all employees to learn and implement concepts that drive significant, positive change in the workplace. - Building a Healthy Society: To date, our co-Founders Lynda and Stewart Resnick, through their foundations and The Wonderful Company, have invested more than $2.5 billion in education, health and wellness, community development, and sustainability initiatives across California's Central Valley, Fiji, and the world. In 2025, Wonderful ranked as #1 in PEOPLE's "100 Companies That Care" list and was named one of Fortune magazine's 100 Best Companies to Work For. To learn more about our corporate social responsibility efforts, visit csr.wonderful.com. - Giving Back to the Community: Make a difference with Wonderful Giving, allowing you to allocate company-provided funds to up to three charities of your choice, and join Wonderful Neighbor to contribute to group service projects within our local communities. #LI-JB1 #LI-Hybrid Videos To Watch