Enviri Corporation is a US-based global provider of environmental and industrial solutions, headquartered in Philadelphia, Pennsylvania. With operations across 30+ countries and 250+ locations, Enviri serves the global steel, metals, and railway industries. Backed by a 170-year legacy of innovation, on-site expertise, and global reach, the company is committed to advancing industrial sustainability and creating long-term value for its customers, people, and communities.
Enviri operates through two key business units, supported by its Global Service Centre (GSC):
Harsco Environmental: A leading provider of environmental services and material processing solutions to the steel industry, specializing in slag management, metal recovery, and resource optimization.
Harsco Rail: A global supplier of railway track maintenance and construction equipment, advanced technologies, and support solutions.
Enviri Global Service Centre (GSC): Provides centralized shared services and global business support across Finance & Accounting, Human Resources, IT, Engineering, Knowledge Services, and other functional areas, supporting Enviri's operations across geographies.
Job DescriptionAbout the Role
- The Senior Security Engineer is the enterprise security Subject Matter Expert (SME) for identity, messaging, authentication, monitoring and security integrations. The role provides strategic security input, develops technical designs, secure integration, documentation and operational governance of Microsoft Entra ID, Active Directory, Exchange, Microsoft Sentinel, Silverfort, PKI, DNS and related enterprise services.
- The role provides security expertise for business-critical application integrations, including Microsoft 365, Azure, HR, ERP and third-party platforms, ensuring secure access, provisioning, logging, monitoring, resilience and compliance closely working with security partners and internal IT teams.
- Key Responsibilities
- Security Partnerships
- Partner with internal cybersecurity teams, external security vendors, technology partners, and business stakeholders to design, implement, and continuously improve enterprise security controls and capabilities.
- Implementation of NIST Cybersecurity Framework (CSF) and industry security best practices across identity, cloud, infrastructure, messaging, monitoring, and business application platforms.
- Assess security risks, recommend remediation strategies, and lead the implementation of security improvements, ensuring alignment with enterprise security standards, compliance requirements, and Zero Trust principles.
- Identity & Access Security
- Own Microsoft Entra ID, Active Directory, Azure AD Connect and cloud synchronization architecture, health and security.
- Manage identity automation scripts, Administrative Units, RBAC, Conditional Access, MFA, domains, trusts and privileged access controls.
- Design secure SSO, authentication, user lifecycle and provisioning integrations for Microsoft 365 and other enterprise applications.
- Validate service accounts, API permissions, role mappings, access reviews and joiner-mover-leaver controls for integrated platforms.
- Security Platforms
- Lead Microsoft Sentinel management, documentation, data onboarding, detection use cases, workbooks and operational support.
- Integrate and monitor logs from Domain Controllers, Azure, Exchange, servers, applications and security platforms.
- Define logging, retention, alerting, incident workflow and operational runbook standards.
- Tune analytics rules and dashboards to improve detection quality, investigation and response.
- Effective use of Microsoft Security Copilot and AI-powered security capabilities to improve threat detection, investigation, and incident response.
- Evaluate, secure, and govern AI integrations and enterprise AI solutions, ensuring compliance with security, privacy, identity, and NIST best practices.
- Silverfort & Authentication Security
- Serve as the Silverfort SME, platform owner and primary technical point of contact.
- Design, build, configure and operate Silverfort nodes in Azure and hybrid environments.
- Manage integrations, authentication policies, licensing, vendor engagement, upgrades, health monitoring, high availability and recovery testing.
- Messaging, PKI & Enterprise Services
- Provide security oversight for Exchange Online, Hybrid Exchange, load balancers, mail flow, Exchange rules and Teams integrations.
- Manage Enterprise Certificate Authority, public certificates, PKI, KMS and certificate lifecycle controls.
- Oversee public DNS, domain registration and deregistration, billing, DMARC, SPF and DKIM.
- Architecture, Integration & Governance
- Act as the security design authority and SME for cloud, identity, HR, ERP, business application and third-party integrations.
- Review authentication, authorization, data flows, APIs, service principals, service accounts, certificates, and SIEM logging.
- Maintain reference architectures, diagrams, standards, runbooks, dependency maps and recovery procedures.
- Support audits, compliance reviews, security incidents, platform upgrades and Domain Controller post-upgrade testing.
Experience:
- 6 - 8years of experience in security engineering, identity, infrastructure security or security architecture.
- Strong expertise in Entra ID, Active Directory, Azure AD Connect, Exchange, Microsoft Sentinel, Silverfort, PKI and Azure security.
- Experience securing SaaS and enterprise integrations, Microsoft 365, HR and ERP platforms.
- Working knowledge of SAML, OAuth/OIDC, APIs, Microsoft Graph, service principles, certificates and privileged access controls.
- Proficiency in PowerShell automation, SIEM integration, troubleshooting, and security documentation.
- Desirable certifications: CISSP, CISM, SC-100, SC-300, SC-200 or AZ-500.
- Success Measures
- Secure and reliable operation of identity, messaging, Sentinel and Silverfort platforms.
- Secure, documented and supportable integrations
- Complete SIEM visibility across identity, cloud, messaging, Domain Controllers and priority infrastructure.
- Current architecture diagrams, runbooks, ownership records and knowledge-transfer documentation.
- Improved security posture, authentication resilience, audit readiness and operational recovery.
Key Technologies
Entra ID | Active Directory | Azure AD Connect | Microsoft Sentinel | Silverfort | Exchange Online | Teams | NetSuite | SuitePeople | PKI | DNS | DMARC | Azure | PowerShell | Microsoft Graph | SAML | OAuth/OIDC | SCIM | SSO | MFA | Conditional Access | KMS
Additional InformationDisclaimer
The information about this job description given above has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications required of employees assigned to this job.
Skills Required
- 6-8 years of experience in security engineering, identity, infrastructure security, or security architecture
- Strong expertise in Entra ID, Active Directory, Azure AD Connect, Exchange, Microsoft Sentinel, Silverfort, PKI, and Azure security
- Experience securing SaaS and enterprise integrations, Microsoft 365, HR, and ERP platforms
- Working knowledge of SAML, OAuth/OIDC, APIs, Microsoft Graph, service principals, certificates, and privileged access controls
- Proficiency in PowerShell automation, SIEM integration, troubleshooting, and security documentation
- CISSP, CISM, SC-100, SC-300, SC-200, or AZ-500 certification
What We Do
Enviri Corporation is a global provider of environmental solutions for industrial and specialty waste streams, and equipment and technology for the rail sector.
