IT & Security Engineer at Albedo

Department: IT/Security

Compensation

$119,507 – $140,000/yr

Setup: On-site
Location: Broomfield, Colorado
Type: Full-time
Level: senior
Posted: Sep 16, 2026

Description

Albedo is hiring an IT & Security Engineer to own identity, endpoints, cloud infrastructure, network, detection and response, compliance, and SaaS systems for its satellite operations. The role includes infrastructure as code in Terraform on AWS, Entra ID, Intune, Microsoft Sentinel and Defender XDR, CMMC/NIST/ITAR controls, vulnerability management, Linux endpoint management, network operations, logging, incident response, and postmortem remediation. It requires six-plus years of IT operations, infrastructure, or security engineering experience, on-site work in Broomfield, Colorado, and offers a salary of $119,507–$140,000 per year plus equity, retirement matching, health insurance, and other benefits.

Required Skills

Identity
Endpoints
Cloud infrastructure
Network
Terraform
AWS
Entra ID
Intune
Microsoft Sentinel
Defender XDR
CMMC Level 2
NIST 800-171
ITAR
Linux
Python
TypeScript
Go
Vulnerability management
Network architecture

Additional Information

Required Previous Experiences: Six-plus years of IT operations, infrastructure, or security engineering experience, including at least two years owning production systems.
Experience closing loops in unfamiliar domains and delivering finished, working solutions.
Experience with agentic engineering for production systems, including access control, observability, and evaluation.
Experience with infrastructure as code.
Experience owning production code in Python, TypeScript, Go, or similar.
Experience building tools for other people and ensuring adoption.
Experience managing Linux workstations or lab machines as a supported platform.
Experience designing access models in Entra ID or an equivalent identity system.
Experience owning security-relevant detections, incidents, identity models, or access boundaries.
Experience managing vulnerabilities across infrastructure and application findings.
Experience designing and implementing on-premises network architecture.
Preferred Qualifications: Microsoft 365 and Entra ID experience in GCCH.
Cybersecurity background in SIEM, EDR, detection engineering, threat hunting, or incident response.
Exposure to CMMC Level 2, NIST 800-171, or ITAR.
Intune experience at fleet scale across macOS, Windows, and Linux.
Experience as an early member of a small infrastructure or security team with independent scope.
Translation Company Name: Albedo