Cloud & Security Engineer

Company Overview

Unified Door & Hardware Group (UDHG) is a premier provider of commercial door, frame, and architectural hardware solutions serving customers across North America.  UDHG supports a wide range of construction and architectural projects, delivering specialized expertise, professional installation, and reliable service to commercial, institutional, and multi-family markets.

As part of Foundation Building Materials (FBM), a leading construction materials distribution company, UDHG operates within a broader organization that combines scale, specialty expertise, and a customer-first mindset.  Together, FBM and UDHG’s 8,000+ team members are committed to operational excellence, innovation, and employee development.  Following the recent acquisition of FBM by Lowe’s, the organization continues to invest in strong, forward-thinking talent to support national growth, enhance customer experience, and drive long-term success across both businesses.

Position Overview

At Unified Door & Hardware Group (UDHG), Cloud & Security Engineer is responsible for managing and supporting the organization’s cloud, infrastructure, and security environments with a strong focus on Microsoft Azure, Microsoft 365, and compliance-driven operations. This role supports the business by maintaining secure and reliable hybrid infrastructure, optimizing cloud operations, leading remediation of security vulnerabilities, and ensuring compliance with CMMC, DoD, and other regulatory security standards.

• Design, deploy, and manage Azure resources including Virtual Machines, App Services, Storage, Networking, and Azure AD/Entra ID
• Support hybrid infrastructure environments integrating on-premises systems with Azure cloud services
• Implement Infrastructure as Code (IaC) solutions using ARM Templates, Bicep, and Terraform
• Monitor, maintain, and optimize system performance using Azure Monitor, Log Analytics, and Application Insights
• Manage backup, disaster recovery, business continuity, and high-availability solutions

• Administer Windows Server environments including Active Directory, DNS, DHCP, and Group Policy
• Manage virtualization platforms such as VMware and Hyper-V
• Perform system patching, upgrades, maintenance, and lifecycle management
• Support Remote Desktop environments, file servers, and enterprise applications
• Troubleshoot and resolve system, network, and application-related issues

• Lead remediation efforts for vulnerabilities identified through tools such as Wiz, CrowdStrike, Microsoft Defender, and penetration testing reports
• Ensure compliance with CMMC, DoD, NIST, and related cybersecurity frameworks and standards
• Implement and enforce security controls including RBAC, MFA, Conditional Access, and least-privilege access models
• Conduct system hardening across Azure cloud and on-premises environments
• Support audit readiness activities including documentation, evidence collection, and compliance assessments
• Partner with internal stakeholders to identify, track, and remediate security gaps

• Manage and secure Microsoft 365 services including Exchange Online, SharePoint, Teams, and OneDrive
• Implement Microsoft 365 security and compliance features such as DLP, eDiscovery, Defender for O365, and Conditional Access
• Manage identity and access administration through Azure AD / Entra ID
• Monitor, investigate, and respond to security alerts and incidents within the Microsoft 365 ecosystem

• Perform other duties as assigned to support IT and corporate objectives

• Bachelor’s degree in IT, Computer Science, or related field (or equivalent experience)
• Strong hands-on experience with Microsoft Azure and Microsoft 365
• Proven experience with CMMC, DoD, NIST, or similar compliance frameworks
• Solid knowledge of Windows Server, Active Directory, and networking fundamentals
• Experience with vulnerability management and remediation

• Azure certifications (AZ-104, AZ-500, AZ-305)
• Microsoft 365 certifications (MS-102, SC-200, SC-300)
• Experience with security platforms such as Wiz, CrowdStrike, and Microsoft Defender
• Familiarity with DevOps practices and CI/CD tools
• Experience with SIEM tools (Microsoft Sentinel preferred)
• Knowledge of containers and Kubernetes (AKS)

• Base: $123,000 - $140,000 per year
• Bonus: 10% Target Bonus
• Total Compensation (Base + Bonus): The successful candidate could reasonably expect a Total Compensation Package in the range of $126,000 - $160,000
• Equity: This role is not eligible for equity opportunities, awards or grants

• Medical, Dental and Vision plans with leading national providers
• Health Savings Account (HSA) / Flexible Spending Account (FSA)
• Company Provided Basic Life and Accident Death & Dismemberment (AD&D)
• Voluntary Life and Accidental Death & Dismemberment (AD&D)
• Critical illness, Hospital Indemnity, Accident Coverage
• Legal Insurance Plan
• Paid Time Off (PTO) & Paid Company Holidays
• 401(k) plan with generous company match

Equal Opportunity Employer

Unified Door and Hardware Group is an Equal Opportunity Employer and is committed to providing equal employment opportunities to all individuals. We value diversity and inclusion and are dedicated to creating a workplace where all employees feel respected and empowered. All employment decisions are made without regard to race, color, religion, sex, pregnancy (including childbirth, breastfeeding, or related medical conditions), sexual orientation, gender identity or expression, national origin, age, disability status, genetic information, veteran status, or any other characteristic protected by federal, state, or local law.

In accordance with the Americans with Disabilities Act (ADA) and applicable state and local laws, we provide reasonable accommodations to qualified individuals with disabilities to help them perform the essential functions of their job. If you need assistance or an accommodation during the application process or while employed, please contact Human Resources at Talent@myfbm.com.

Posting Period

This job will be posted for at least 5 days, starting on the initial post date reflected above.