IT Security Engineer

Overview

Pattern Energy is a leading renewable energy company that develops, constructs, owns, and operates high-quality wind and solar generation, transmission, and energy storage facilities. Our mission is to transition the world to renewable energy through the sustainable development and responsible operation of facilities with respect for the environment, communities, and cultures where we have a presence. Our approach begins and ends with establishing trust, accountability, and transparency. Our company values of creative spirit, pride of ownership, follow-through, and a team-first attitude drive us to pursue our mission every day. Our culture supports our values by fostering innovative and critical thinking and a deep belief in living up to our promises. Headquartered in the United States, Pattern has a global portfolio of more than 30 power facilities and transmission assets, serving various customers that provide low-cost clean energy to millions of consumers.

Responsibilities

The Senior IT Security Engineer is responsible for developing and executing cybersecurity strategy and architecture while designing, implementing, and continuously improving security controls across Pattern and its subsidiaries’ enterprise IT and cloud environments.
The position serves as a senior technical authority for IT security, translating cybersecurity strategy, risk, and business requirements into scalable security architectures, technical standards, and engineering solutions. The role partners closely with IT Operations, SecurityOperations, Business Applications, Enterprise Architecture, and third-party technology and security providers to reduce cyber risk and strengthen the organization’s overall security posture.
KEY ACCOUNTABILITIES1. Develop and execute Security strategy and roadmap. Identify capability gaps, emerging risks, and opportunities to improvesecurity maturity, and translate business and cybersecurity objectives into prioritized technical initiatives.2. Define and maintain security architecture principles, patterns, and reference architectures across cloud and enterprise IT. Leadsecurity architecture reviews for new technologies, applications, infrastructure, and significant changes, providing risk-baseddesign requirements and recommendations.3. Design, implement, and continuously improve security controls across Azure, Microsoft 365, Microsoft Defender, Entra ID, Intune,endpoints, servers, networks, and other enterprise technologies. 4. Develop and maintain security standards, secure configuration baselines, architecture requirements, hardening guidance, andengineering documentation. Ensure technical controls align with the organization's security strategy and frameworks such as NISTCybersecurity Framework 2.0. 5. Lead vulnerability and security exposure management across enterprise IT systems, including identification, technical riskassessment, prioritization, mitigation strategy, remediation coordination, and risk tracking. Evaluate emerging vulnerabilitiesand threats to determine potential organizational impact. 6. Evaluate security technologies and make recommendations regarding architecture, adoption, configuration, integration, consolidation, and retirement. Ensure security investments provide appropriate risk reduction while balancing operational requirements, integration complexity, and cost.7. Partner with Security Operations to improve detection, logging,SIEM, EDR/XDR, and security monitoring integrations. Providesenior technical expertise during significant cybersecurity incidents, including containment, remediation, recovery, and implementation of longer-term corrective controls. 8. Serve as a senior cybersecurity technical authority and trusted advisor to Security, IT Operations, Enterprise Architecture,Business Applications, and technology leadership. Provide technical direction on complex security issues, mentor otherengineers, influence secure technology decisions, and work with MSSP/MDR, network, cloud, and other external partners toensure security requirements are effectively implemented.

Qualifications

7+ years of experience in Information Security Engineering, Cybersecurity Engineering, Infrastructure Security or other applicable fields. Demonstrated experience developing and executing security strategy, technical roadmaps, and target-state security architectures, including identifying capability gaps and translating organizational risk into prioritized security initiatives. Strong experience with security architecture and design, including architecture reviews, threat-informed design, defense-in-depth, Zero Trust principles, reference architectures, security patterns, and development of technical security standards. Strong understanding of the Microsoft suite (MS Defender, Intune, Azure/Entra, M365). Experience applying recognized cybersecurity frameworks and practices, partic