About the role

Role Overview

CPA is seeking an Engineer, Cloud Security to serve as a technical lead for cybersecurity architecture and operations. The role focuses on designing, implementing, and overseeing security controls across identity, endpoints, cloud infrastructure, and data protection within CPA’s Microsoft enterprise ecosystem, aligned to NIST security frameworks.

Responsibilities

Design, oversee, and implement security controls across:
- Identity (Microsoft enterprise identity ecosystem)
- Endpoints
- Cloud infrastructure
- Data protection
- Overall Microsoft enterprise environment
Lead technical cybersecurity architecture and operational security.
Balance security, usability, and operational efficiency.
Stay current with and assess the threat landscape relevant to critical infrastructure/energy organizations.
Collaborate with technology teams, external stakeholders/consultants, and business partners (including Southern California Edison (SCE)).
Partner with internal teams across Energy Risk, Finance, Power Supply, Customer Care, and broader stakeholder functions (e.g., regulatory/rates, government affairs).

Requirements

Microsoft Office Suite proficiency.
Ability to act with integrity, professionalism, and confidentiality.
Strong ownership of tasks/processes with minimal oversight; can manage multiple priorities and meet deadlines, escalating key issues as needed.
Proficiency with data visualization tools such as Tableau or Power BI.
Hands-on administration of Microsoft Entra ID, including:
- Identity governance
- Conditional access
- Privileged identity management
Deep expertise with Microsoft Defender XDR (Defender for Endpoint, Identity, Office 365, and Cloud) for threat detection and response.
Proven experience operating Microsoft Sentinel for SIEM, including:
- KQL
- Analytics rules
- Workbooks
- Automation
Hands-on experience with Microsoft Intune for endpoint management (configuration profiles, compliance policies, application protection).
Working knowledge of Microsoft Purview for data classification, DLP, insider risk, and information protection (text truncated in posting).

Reporting Line / Team Context

Reports to the Senior Director, Data & Systems and works with internal technology professionals and external stakeholders/consultants.

About Clean Power Alliance

Clean Power Alliance (CPA) is Southern California’s locally operated not-for-profit electricity provider serving 38 communities across Los Angeles and Ventura counties. The organization supplies clean, renewable energy at competitive rates to over three million residents and businesses through about one million customer accounts, making it one of California’s largest electricity providers.