Cybersecurity Engineer

Be a part of our mission! As a world leader in creating comfortable, sustainable, and efficient climate solutions for buildings, homes and transportation, it's our responsibility to put the planet first. For us at Trane Technologies, and through our businesses including Trane® and Thermo King,  sustainability is not just how we do business—it is our business.  Do you dare to look at the world's challenges and see impactful possibilities?  Do you want to contribute to making a better future?  If the answer is yes, we invite you to consider joining us in boldly challenging what's possible for a sustainable world.

Learn about our benefits designed for you to thrive at work and at home.

We boldly go.

Where is the work:

Monday to Thursday, work onsite with your colleagues. Fridays, choose your work location, balancing what your work requires.

What's in it for you:
The Security Engineer is responsible for managing, maintaining, configuring, and supporting security technologies that protect enterprise identities, endpoints, applications, and data.

This role serves as a hands-on member of the Security Engineering team, with primary responsibility for engineering and operational support of capabilities within the Microsoft Security Suite. Particular emphasis is placed on Conditional Access, secure access controls, cloud security technologies, and continuous improvement of Microsoft security capabilities.

The engineer will partner with Infrastructure, Security Operations, Digital Risk, IAM, and application teams to implement security controls, support strategic initiatives, improve operational maturity, and strengthen the organization's overall cybersecurity posture.

The ideal candidate possesses broad cybersecurity knowledge, strong troubleshooting skills, and hands-on implementation experience operating security technologies in a complex enterprise environment.

What you will do:

• Microsoft Security Platform Engineering
  • Manage, maintain, configure, and support security capabilities within the Microsoft Security Suite.
  • Implement and maintain security controls utilizing Microsoft Entra and Microsoft Defender technologies.
  • Support platform lifecycle management activities, including upgrades, integrations, configuration changes, testing, and operational support.
  • Evaluate new Microsoft security capabilities and assist with implementation and adoption efforts.
  • Participate in projects that leverage Microsoft security technologies to improve enterprise security posture.
• Conditional Access & Secure Access Controls
  • Design, implement, test, deploy, and support Conditional Access policies.
  • Maintain access control policies aligned with cybersecurity requirements while minimizing unnecessary operational and user impact.
  • Support initiatives involving device compliance, strong authentication, risk-based access decisions, and secure application access.
  • Investigate and troubleshoot authentication, authorization, and access-related issues.
  • Assist with onboarding applications and services into established access-control frameworks.
• Security Engineering Operations
  • Support day-to-day operation of assigned security technologies.
  • Monitor platform effectiveness and recommend improvements that increase security maturity and operational efficiency.
  • Participate in security incident investigations and support remediation efforts where applicable.
  • Perform root cause analysis and corrective action planning for security-related issues.
  • Assist with vulnerability remediation, platform hardening, and security improvement initiatives.
• Automation & Continuous Improvement
  • Identify opportunities to automate repetitive operational activities.
  • Develop scripts and automation solutions to improve efficiency, consistency, and scalability.
  • Improve monitoring, reporting, and visibility across managed security technologies.
  • Support ongoing optimization efforts and engineering improvements.
• Documentation & Governance
  • Maintain technical documentation, implementation standards, support procedures, and operational guides.
  • Support audit and compliance activities as required.
  • Ensure managed security capabilities remain aligned with company standards and cybersecurity requirements.
  • Provide technical guidance and knowledge-sharing across Security Engineering and partner teams.
• Metrics & Reporting
  • Develop and maintain operational metrics related to managed security capabilities.
  • Support Monthly Operating Reviews (MORs), Project Status Reviews (PSRs), and leadership reporting activities.
  • Track platform health, adoption, effectiveness, and improvement opportunities.
• Team Support & Collaboration
  • Partner with Security Operations, Infrastructure, IAM, Digital Risk, and Application teams to implement and operate security controls.
  • Provide backup and support for additional Security Engineering capabilities as required by business priorities.
  • Contribute to a collaborative and continuously improving Security Engineering team environment.

What you will bring:

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or related field (or equivalent experience).
• 5+ years of experience in cybersecurity, systems administration, or security engineering.
• Experience implementing and supporting enterprise security technologies.
• Hands-on experience with Microsoft Entra and Microsoft Defender capabilities.
• Experience implementing and supporting Conditional Access policies.
• Strong understanding of:
  o        Cybersecurity principles and best practices
  o        Identity and access security concepts
  o        Authentication and authorization technologies
  o        Endpoint security fundamentals
  o        Cloud security fundamentals
  o        Enterprise networking fundamentals
• Experience troubleshooting complex security and access-related issues.

Annual Base Salary Range or Hourly Base Pay Range:

$117,673.33 - $164,675.00

Compensation Type:

Salary

Incentive Eligible:

Yes

Sales Commission Eligible:

No

Disclaimer: We strive to provide competitive compensation for this position, tailored to a variety of factors. The actual compensation will depend on elements such as seniority, merit, geographic location, education, experience,  travel requirements, and union designation.   Our compensation range is generally based on the national average for the country.  Additionally, benefits may vary depending on the region, business alignment, union involvement, and employee status.

Thrive at work and at home:

• Benefits kick in on DAY ONE for you and your family, including health insurance and holistic wellness programs that include generous incentives – WE DARE TO CARE!
• Family building benefits include fertility coverage and adoption/surrogacy assistance.
• Paid time off includes  up to 15 vacation days, paid holidays, sick leave, and additional options to support volunteer and parental leave.
• 401K match up, educational and training opportunities through company programs along with tuition assistance and student debt support.

Disclaimer:  Benefit offerings may vary by site as well as Collective Bargaining Agreements and local/state regulations

Safety Sensitive Role:

No

The company designates certain roles as Safety Sensitive. Safety Sensitive roles may require that you pass additional drug screening.

We offer competitive compensation and comprehensive benefits and programs. We are an equal opportunity employer; all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, pregnancy, age, marital status, disability, status as a protected veteran, or any legally protected status.