Security & Development Operations Engineer

About the role

About Galvanize

Galvanize is a global asset manager focused on delivering compelling returns through deep specialization in energy and the business of decarbonization. The firm invests across asset classes including real estate, private credit, venture and growth capital, and public equities to accelerate commercially competitive technology and solutions. Built by investors with proven track records scaling multibillion dollar strategies, Galvanize pairs top-tier institutional investment talent with expertise across technology, science, market development, policy, and geopolitics to identify and execute on investment opportunities across all sectors of the economy. The firm has offices in San Francisco, New York, and London.

Role

Galvanize Climate is seeking a highly skilled and hands-on DevOps / Security Operations (SecOps) Engineer to manage, secure, and optimize our cloud-first enterprise environment. This role combines systems administration, identity and access management, endpoint security, compliance operations, cloud infrastructure, and SaaS application integration to support a secure and scalable technology ecosystem.

The ideal candidate will have strong experience administering Microsoft 365 Workspace environments, implementing security controls, managing endpoint devices, supporting compliance requirements, and integrating enterprise applications through modern authentication and automation technologies.

Essential Job Responsibilities

Identity & Access Management

- Administer and maintain Microsoft 365, Microsoft Entra ID, and Google Workspace

- Configure and maintain Single Sign-On (SSO), SCIM and OIDC provisioning, conditional access policies, and MFA.

- Administer Azure Enterprise Applications

- Manage Bring Your Own Device (BYOD) controls and mobile device compliance

- Support enterprise application registration, authentication, and authorization

Security Operations

- Monitor, investigate, and respond to security alerts and

- Administer and optimize CrowdStrike Falcon and other security monitoring

- Implement and maintain endpoint protection, vulnerability management, and threat detection

- Review security posture across cloud and SaaS platforms and recommend

- Partner with internal stakeholders and external vendors to remediate security

Endpoint & Device Management

- Manage Windows, macOS, and mobile device

- Administer Microsoft Entra-based device management and JAMF for Apple

Cloud & Infrastructure Administration

- Provision and manage Azure resources and cloud

- Support Windows Virtual Desktop (Azure Virtual Desktop)

- Maintain networking infrastructure and troubleshoot connectivity

- Manage domain registrations, DNS records, certificates, and cloud networking

- Support LAN/Wi-Fi health (switching, APs, DHCP/DNS, VLANs, QoS for real-time media) and coordinate with providers on circuits and SD-WAN/VPN.