Cybersecurity Engineer

Trane Technologies is seeking a Cybersecurity Engineer to support enterprise security engineering and operational execution in a role focused on Microsoft-based protections. This onsite position in Davidson, NC centers on managing and improving security capabilities that safeguard identities, endpoints, applications, and data, with a strong emphasis on Conditional Access and secure access controls.

You will be responsible for engineering work and day-to-day support for security functions within the Microsoft Security Suite, partnering with internal teams to maintain access controls, troubleshoot authentication and authorization issues, and improve security maturity through monitoring, automation, and continuous optimization.

Key Responsibilities

• Manage, maintain, configure, and support security capabilities within the Microsoft Security Suite.
• Implement and maintain security controls using Microsoft Entra and Microsoft Defender technologies.
• Support platform lifecycle management activities, including upgrades, integrations, configuration changes, testing, and operational support.
• Evaluate new Microsoft security capabilities and support implementation and adoption efforts.
• Participate in projects that use Microsoft security technologies to improve the organization’s security posture.
• Design, implement, test, deploy, and support Conditional Access policies.
• Maintain access control policies aligned with cybersecurity requirements while minimizing unnecessary operational and user impact.
• Support initiatives involving device compliance, strong authentication, risk-based access decisions, and secure application access.
• Investigate and troubleshoot authentication, authorization, and access-related issues.
• Assist with onboarding applications and services into established access-control frameworks.
• Support day-to-day operation of assigned security technologies and monitor platform effectiveness.
• Recommend improvements that increase security maturity and operational efficiency.
• Participate in security incident investigations and support remediation when applicable, including root cause analysis and corrective action planning.
• Assist with vulnerability remediation, platform hardening, and security improvement initiatives.
• Identify opportunities to automate repetitive operational activities, including developing scripts and automation solutions for efficiency and scalability.
• Improve monitoring, reporting, and visibility across managed security technologies.
• Maintain technical documentation, implementation standards, support procedures, and operational guides.
• Support audit and compliance activities as required.
• Ensure managed security capabilities remain aligned with company standards and cybersecurity requirements.
• Provide technical guidance and knowledge-sharing across Security Engineering and partner teams.
• Develop and maintain operational metrics related to managed security capabilities, and support Monthly Operating Reviews (MORs), Project Status Reviews (PSRs), and leadership reporting.
• Track platform health, adoption, effectiveness, and improvement opportunities.
• Partner with Security Operations, Infrastructure, IAM, Digital Risk, and Application teams to implement and operate security controls.
• Provide backup and support for additional Security Engineering capabilities as business priorities require.
• Contribute to a collaborative, continuously improving Security Engineering team environment.

Required Qualifications

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or a related field (or equivalent experience).
• 5+ years of experience in cybersecurity, systems administration, or security engineering.
• Experience implementing and supporting enterprise security technologies.
• Hands-on experience with Microsoft Entra and Microsoft Defender capabilities.
• Experience implementing and supporting Conditional Access policies.
• Strong understanding of cybersecurity principles and best practices, including identity and access security concepts.
• Strong understanding of authentication and authorization technologies.
• Strong understanding of endpoint security fundamentals.
• Strong understanding of cloud security fundamentals.
• Strong understanding of enterprise networking fundamentals.
• Experience troubleshooting complex security and access-related issues.

Technologies

• Microsoft Security Suite
• Microsoft Entra
• Microsoft Defender
• Conditional Access

Compensation and Incentives

• Annual base salary range: $117,673.33 - $164,675.00
• Compensation type: Salary
• Incentive eligible: Yes
• Sales commission eligible: No

Work Schedule

• Monday to Thursday: work onsite with colleagues.
• Friday: choose your work location, balancing what your work requires.

Benefits

• Health insurance and holistic wellness programs that include generous incentives
• Fertility coverage and adoption/surrogacy assistance
• Paid time off including up to 15 vacation days, paid holidays, and sick leave
• 401K match
• Educational and training opportunities through company programs, along with tuition assistance and student debt support
• Up to 15 vacation days, paid holidays, sick leave, and additional options to support volunteer and parental leave

Safety-Sensitive Role

• This role is not designated as safety sensitive.

Location: Davidson, NC (onsite)