---
title: 'Senior Information Security Engineer at KPA'
canonical: 'https://feeny.ai/job/senior-information-security-engineer-kpa-lafayette-metjmbs9ymdb'
type: 'job'
last_seen: '2026-09-07'
---

# Senior Information Security Engineer at KPA

- **Company:** KPA
- **Location:** Lafayette, CO
- **Employment:** full-time
- **Work type:** remote
- **Posted:** 2026-08-21
- **Last confirmed live:** 2026-09-07
- **Apply:** https://jobs.lever.co/kpaonline/3cab404f-74c1-4b3f-9d4f-64a4bac01cbe

## Job description

Position Description: KPA is seeking a Senior Security Engineer to serve as the senior technical counterpart to the Director of Security & Technology. This role owns KPA's security platforms, cloud security, identity, automation, and technical security initiatives. The ideal candidate is a hands-on security engineer with strong cloud and infrastructure experience who can independently lead complex security projects, partner effectively with IT Operations and DevOps, and continuously improve KPA's security posture.

Responsibilities:

- Own KPA's enterprise security platforms, including CrowdStrike, Rapid7 (InsightIDR, InsightVM, InsightAppSec, MDR), Cisco Umbrella, Cisco Duo, KnowBe4, and related technologies.
- Lead vulnerability management and remediation, endpoint security, identity security, privileged access, penetration testing, and security hardening initiatives.
- Lead security incident response, investigations, containment, remediation, and post-incident reviews.
- Own the ongoing operation of SOC 2 controls, security audit requirements, and technical compliance initiatives.
- Own Cisco Meraki security, VPN infrastructure, network security controls, and secure cloud connectivity.
- Secure Azure, AWS, Microsoft 365, Entra ID, AWS Identity Center, Auth0, and cloud-native workloads using modern security best practices.
- Administer and improve identity governance across Microsoft Entra ID, Cisco Duo, AWS Identity Center, Auth0, SSO, SCIM, Conditional Access, PIM, privileged accounts, service accounts, and authentication architecture.
- Partner with DevOps to integrate security into CI/CD pipelines, Infrastructure as Code, containers, Kubernetes, and cloud workloads, including SAST, DAST, Snyk, and other application security technologies.
- Own and continually improve KPA's cloud security posture management, workload protection, identity controls, logging, alerting, detection engineering, and remediation processes.
- Own email security across Microsoft 365, SendGrid, Amazon SES, SPF, DKIM, DMARC, and phishing protection.
- Build security automation using PowerShell, Python, Microsoft Graph, REST APIs, and AI-assisted development.
- Lead security assessments for new vendors, SaaS platforms, cloud services, and third-party integrations; administer third party vendor management (TPVM) and support ongoing vendor risk management.
- Administer and improve KPA's security awareness program, security policies, standards, and technical procedures.
- Support AI security and governance initiatives, including ChatGPT Enterprise, Claude, MCP, and emerging AI technologies.
- Support security architecture reviews for new cloud services, platforms, integrations, and technical initiatives.
- Proactively identify security gaps, technical debt, and opportunities to improve KPA's security posture through automation, AI, and modern engineering practices.

Qualifications:

- 5+ years of experience in security engineering, cloud security, infrastructure security, or a related senior technical role.
- Strong knowledge of identity security, endpoint security, vulnerability management, network security, incident response, and zero trust principles.
- Experience securing Azure, AWS, Microsoft 365, Entra ID, Windows, and Linux.
- Familiarity with CI/CD pipelines, Kubernetes, container security, application security scanning, and DevSecOps practices.
- Scripting and automation experience using PowerShell, Python, REST APIs, or similar technologies.
- Experience supporting SOC 2 & NIST CSF or comparable security and compliance frameworks.
- Relevant certifications such as CompTIA Security+, CISSP, CCSP, AWS Certified Security, or equivalent certifications are preferred.
- Excellent communication, documentation, project leadership, and problem-solving skills.
- Bachelor's degree in Computer Science, Information Technology or Cybersecurity or equivalent experience.

Success Criteria:

- Work ethic that aligns with KPA's core values:
- Trust: earning trust through integrity, expertise, and acting in the client's best interest.
- Innovation: continuously seeking out ways to better serve clients.
- Excellence: holding ourselves to high standards in everything we do.
- Results: moving with purpose to deliver meaningful outcomes.
- Owns and continually improves KPA's enterprise security platforms and technical security controls.
- Improves KPA's security posture across endpoints, identity, networking, cloud, and DevOps environments.
- Delivers complex security initiatives with strong planning, communication, documentation, testing, and post-implementation validation.
- Reduces manual security work through automation and modern engineering practices.
- Serves as the senior escalation point for complex security incidents and technical security issues.
- Partners effectively with IT Operations and DevOps to embed security into operational and development workflows.

Physical Requirements:

Physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

- Working at a computer typing and view a screen - Constantly
- Stationary sitting or standing - Constantly
- Visual Recognition - Constantly
- Hearing/Listening - Occasionally
- Communicating verbally and/or in writing - Occasionally
- Travel - Seldom

Compensation:

- Annual base salary range between $110-150k commensurate with experience.
- Bonus potential of 10% annually.
- This is a full time, exempt position.

## About KPA

## Company Overview
- **One-liner**: KPA helps automotive businesses manage regulatory compliance, workplace safety, and HR risk through software, consulting, and training.
- **Entity Type**: Private (PE-backed; acquired by Providence Equity Partners in 2018) [linkedin.com](https://linkedin.com/company/kpa-llc)
- **Headquarters**: Westminster, Colorado, United States [linkedin.com](https://linkedin.com/company/kpa-llc)
- **Founded**: 1986 [linkedin.com](https://linkedin.com/company/kpa-llc) [builtin.com](https://builtin.com/company/kpa)
- **Founders**: Not publicly available in the sources reviewed
- **Other Offices**: Pittsburgh, Tigard, and Lafayette; workforce distributed across 6 countries including the US, Kenya, Indonesia, Canada, and South Africa [linkedin.com](https://linkedin.com/company/kpa-llc)

## Core Business
- **Primary Industry**: Environmental health & safety (EHS), regulatory compliance, HR/risk management software and services for the automotive industry.
- **Target Customers**: B2B; automotive dealerships, service centers, and related automotive businesses — from SMBs to enterprise operations.
- **Mission/Purpose**: KPA’s stated purpose is helping automotive businesses “keep their people safe, protect their operations, and stay ahead of compliance” as the automotive industry’s #1 trusted compliance partner [hs.kpa.io](https://hs.kpa.io/who-we-are).

## Products & Services
- **[Vera Suite](https://hs.kpa.io/who-we-are)**: Compliance and safety management software that keeps compliance programs organized, automated, and audit-ready. It surfaces risk across multiple locations at a glance.
- **Compliance Consulting**: Expert consulting services that help clients interpret regulations, handle audit findings, and build practical, ongoing compliance solutions. KPA has 125+ EHS and F&I consultants.
- **Compliance Training**: An award-winning training library focused on real-world automotive scenarios and role-specific courses.
- **KPA Partner Program**: Flexible partnership structures for consulting firms, industry associations, and compliance experts to deliver KPA’s software, training, and expertise to their clients.
- **Reynolds DMS Integration**: A direct integration with Reynolds’ dealership management system, connecting daily dealership operations with compliance tracking in one workflow.

## Market Standing
- **Valuation/Market Cap**: Not disclosed (private company).
- **Key Metric (Private)**: Third-party reported total funding of $5M; estimated annual revenue of $68.3M [linkedin.com](https://linkedin.com/company/kpa-llc)
- **Notable Investors/Partners**: Providence Equity Partners (owner); Reynolds (DMS integration partner); various consulting firms and industry associations via the KPA Partner Program.
- **Growth Signals**:
  - KPA’s website reports 15,000+ automotive businesses served; Built In lists 10,000+ clients — conflicting reports [hs.kpa.io](https://hs.kpa.io/who-we-are) [builtin.com](https://builtin.com/company/kpa)
  - Recent acquisitions: Compli (2019), Multimedia Training Systems (2020), iScout (2021), Auto Advisory Services, and Tddm [linkedin.com](https://linkedin.com/company/kpa-llc)
  - LinkedIn following grew to 23,566, up 42.8% year-over-year [linkedin.com](https://linkedin.com/company/kpa-llc)
  - Employee count data conflicts: LinkedIn/Growjo reports 253 employees (-4% YoY), while Built In reports 405 total employees [linkedin.com](https://linkedin.com/company/kpa-llc) [builtin.com](https://builtin.com/company/kpa)

## Competitive Advantages
- **100% automotive focus**: KPA’s products, training, and consulting are built around the specific regulations, risks, and operational realities of automotive businesses [hs.kpa.io](https://hs.kpa.io/who-we-are).
- **Integrated three-pillar model**: Software + consulting + training form one continuous compliance program rather than point solutions.
- **Deep domain expertise**: 40 years of EHS and F&I experience, backed by 125+ specialized consultants.
- **Ecosystem integrations**: Direct integration with Reynolds DMS creates switching costs and daily operational stickiness.
- **Scale and trust**: Tens of thousands of businesses rely on KPA for compliance, reducing incidents and violations.

## Strategic Focus
- Continue building a complete, integrated compliance platform for automotive businesses.
- Deepen partnerships and integrations, including dealer management systems like Reynolds.
- Expand software automation, training, and consulting capabilities through acquisitions and organic innovation.
- Position KPA as the proactive “safety steward” that helps clients see around corners and avoid incidents before they happen [hs.kpa.io](https://hs.kpa.io/who-we-are).

## Why Work Here
- **Remote-first hybrid workplace**: Most roles are primarily remote, with some in-office collaboration. Daily office attendance is optional, and teams meet in person for collaboration and on-site work [hs.kpa.io](https://hs.kpa.io/careers) [builtin.com](https://builtin.com/company/kpa)
- **Company culture**: KPA emphasizes meaningful work, safety stewardship, proactive partnership, DEI, and open communication. It describes itself as combining “the stability of a 40-year-old industry leader with the energy of a company that’s still growing” [hs.kpa.io](https://hs.kpa.io/careers).
- **Benefits**: Competitive PTO, paid holidays, paid parental leave, 401(k) with company match, paid volunteer days, tuition reimbursement, certification funding, and ongoing learning/development [hs.kpa.io](https://hs.kpa.io/careers).
- **Employee sentiment is mixed**: LinkedIn employer rating is 3.4/5 from 181 reviews; work-life balance (3.6) and compensation (3.5) rate highest, while culture (3.3) and career growth (3.2) rate lower [linkedin.com](https://linkedin.com/company/kpa-llc).
- **Open roles at time of research**: Environmental Health & Safety Consultant, Automotive F&I Consultant, Account Executive, Legal & Compliance Specialist, Demand Generation Manager, and General Interest [jobs.lever.co](https://jobs.lever.co/kpaonline) [builtin.com](https://builtin.com/company/kpa)

## Sources
1. [hs.kpa.io](https://hs.kpa.io/who-we-are)
2. [hs.kpa.io](https://hs.kpa.io/careers)
3. [linkedin.com](https://linkedin.com/company/kpa-llc)
4. [jobs.lever.co](https://jobs.lever.co/kpaonline)
5. [builtin.com](https://builtin.com/company/kpa)

## Other roles at KPA

- [Demand Generation Manager](https://feeny.ai/job/demand-generation-manager-kpa-lafayette-ryngpj150r46) — Lafayette, CO
- [Legal & Compliance Specialist – Auto Retail](https://feeny.ai/job/legal-compliance-specialist-auto-retail-kpa-westminster-vhdd878746vv) — Westminster, CO
- [Environmental Health & Safety Consultant](https://feeny.ai/job/environmental-health-safety-consultant-kpa-livermore-9mpfyxrzm8x7) — Livermore, CA
- [Technical Support Specialist](https://feeny.ai/job/technical-support-specialist-kpa-remote-fp7x51f9pg71)
- [Account Executive - Automotive](https://feeny.ai/job/account-executive-automotive-kpa-atlanta-y22gtmbvah12) — Atlanta, GA
- [Environmental Health & Safety Consultant](https://feeny.ai/job/environmental-health-safety-consultant-kpa-baltimore-z9c24666pbxt) — Baltimore, MD
- [Environmental Health & Safety Consultant](https://feeny.ai/job/environmental-health-safety-consultant-kpa-phoenix-yz3h1vb5sdd5) — Phoenix, AZ
- [Help Desk Technician](https://feeny.ai/job/help-desk-technician-kpa-lafayette-gs53nmjrcq9d) — Lafayette, CO
- [General Interest Application](https://feeny.ai/job/general-interest-application-kpa-remote-67jsmpbd0drq)
- [Senior Information Security Engineer](https://feeny.ai/job/senior-information-security-engineer-betsson-group-malta-n87d69273277) — Malta