Cloud Security Engineer
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Cloud Security Engineer securing Azure infrastructure, identities, and AI workloads for a global IT transformation leader. Driving remediation, policy-as-code guardrails, and Microsoft Defender for Cloud posture improvement.
Responsibilities:
- Own the full lifecycle of security findings and recommendations through triage, remediation, verification, and closure
- Root-cause recurring issues and implement systemic fixes using policy-as-code, automated guardrails, and secure baselines
- Track remediation SLAs and report on risk reduction and security posture trends
- Secure and govern authentication flows including OIDC, OAuth 2.0 with PKCE, JWT validation and handling, and mTLS
- Administer and harden Microsoft Entra ID, including app registrations, Enterprise Application permissions, consent governance, service principals, managed identities, credential hygiene, and least-privilege scoping
- Design, implement, and continuously tune Conditional Access policies
- Build and enforce guardrails using Azure Policy and Terraform
- Maintain secure-by-default infrastructure-as-code baselines and detect or remediate configuration drift
- Operate Microsoft Defender for Cloud to improve secure score, remediate recommendations, and manage CSPM
- Contribute to security governance, including standards, control definitions, exception handling, and audit evidence
- Secure cloud and SaaS administrative portals, including Azure, Microsoft 365 admin, and identity providers
- Strengthen privileged access through MFA, PIM / just-in-time elevation, role minimization, and break-glass procedures
- Apply security controls to AI workloads, services, and AI agents, including identity, tool and permission scoping, data-exposure mitigation, and prompt-injection risk mitigation
Requirements:
- 5+ years in cloud security or security engineering, with deep, hands-on Azure experience
- Strong, hands-on Microsoft Entra ID expertise, including app registrations, Enterprise Apps, permissions and consent, and Conditional Access
- Solid working knowledge of OIDC, OAuth 2.0 / PKCE, JWT, and mTLS
- Proficiency with Terraform and Azure Policy for policy-as-code and automated guardrails
- Experience with Microsoft Defender for Cloud and cloud security posture management
- Demonstrable track record of root-causing and permanently closing security findings
- Working understanding of AI, AI agents, and AI security considerations
- Resilience, emotional intelligence, and focus on agile delivery
- Deep understanding of the difference between coding and engineering
- Advanced oral English
- Advanced Spanish
- Multi-cloud exposure (AWS, GCP)
- Relevant certifications such as Microsoft SC-100, AZ-500, SC-300, or CISSP
- Experience with CI/CD pipeline security, secrets management, and SIEM/SOAR
- Scripting/automation proficiency with PowerShell or Python
- Hands-on experience securing LLM-based or agentic systems in production
- Familiarity with cloud-native foundations or AI coding assistants
Benefits:
- Remote work arrangement
- Flexibility to support your lifestyle
- Global career opportunities
- Exposure to high-impact projects
- World-class, high-impact projects
- Collaboration with global teams
- Work within an international network of expertise
- Opportunity to work for an award-winning employer
- Opportunity to work for a sustainable corporation
Similar Jobs
Security Engineer – GRC
Security Engineer owning governance, risk, and compliance for Alan’s health insurance and prevention platform. Managing ISO 27001, DORA, HDS, audits, risk, and security automation.
Associate Security Architect
Associate Security Architect detecting and mitigating cyberattacks for Akamai's managed security customers. Protecting digital properties through Akamai's distributed cloud, edge, and security platform.
Portuguese Speaking Cybersecurity Customer Expert
Cybersecurity customer experts supporting Portuguese-speaking clients with security software and incident inquiries. Mercier Consultancy Group provides recruitment and BPO services across Europe.
Senior Cybersecurity Financial Compliance SME
Senior cybersecurity compliance SME ensuring DoW and Army audit readiness for ASRC Federal’s Vantage system. Applying NIST controls, FIAR requirements, and financial management overlays.
Security Architect
Arquiteto de Segurança da Informação na Verity, consultoria de transformação e engenharia digital. Projetando controles, riscos e práticas DevSecOps para ambientes Cloud e on-premises.
Security System Analyst – Lenel, Milestone
Security Systems Analyst supporting Lenel OnGuard and Milestone physical security systems for Securitas UK. Owning incident resolution, troubleshooting faults, and coordinating third-party engineers.
Signalling Security Specialist
Telecom signalling security specialist auditing telecom networks with PTA and supporting PTM IDS deployments. Delivering customer reports, presentations, troubleshooting, and operational improvements.
Cybersecurity Engineer
Cybersecurity Engineer automating cybersecurity operations, scripting, and API integrations for The Home Depot. Troubleshooting incidents and strengthening threat defense and access management.
Transit Safety Security Specialist
Transit safety specialist leading U.S. infrastructure safety, security, and certification projects for AECOM. Developing risk analyses, PTASPs, compliance documentation, and client training.
Manager, Cyber Security
Cyber Security Manager leading incident response, detection engineering, and security operations. Protecting Ping Identity’s cloud identity platform and enterprise systems.
Senior Domain Consultant – AI Security
AI Security Domain Consultant securing enterprise AI agents, applications, data, and supply chains. Leading customer PoVs, executive demos, architectures, and Prisma AIRS roadmap feedback.
Senior Security Architect – AD/Entra ID
Senior Security Architect securing Microsoft Active Directory and Entra ID environments for GuidePoint Security’s cybersecurity clients. Designing IAM architecture, automating administration and resolving complex identity security issues.
Information Security Engineer
Information Security Engineer securing Keyfactor’s cryptographic trust infrastructure. Managing monitoring, vulnerability assessments, incident response, and ISO 27001/SOC 2 compliance.
Cybersecurity Governance Analyst
Cybersecurity governance analyst developing enterprise policies, vendor risk assessments, and compliance controls. Supporting Agero’s digital driver assistance services through audits, remediation, and security awareness.
Senior Software Engineer – Security, Distributed Systems
Senior software engineer building backend distributed systems for RapidFort’s cybersecurity and software supply chain platform. Developing secure, scalable services across Linux, containers, Kubernetes, and cloud environments.
Staff Security Engineer, Proactive Security
Staff Security Engineer leading proactive security services, infrastructure protection, and secure engineering paths at DoorDash. Building resilient products for the technology and logistics company’s delivery network.
Managing Director, Enterprise Security Architecture – Engineering
Managing Director leading enterprise security architecture and cybersecurity platforms for The Cigna Group. Advancing cloud, DevSecOps, AI security, and cyber defense at scale.
Offensive Security Engineer / Penetration Tester
Offensive Security Engineer conducting web, mobile, Active Directory and cloud penetration tests for Genesis’s global product IT ecosystem. Building automation and AI-agent workflows for offensive security.
Senior Data Security Specialist – Data Security Strategy
Especialista sênior liderando estratégia de segurança e governança de dados corporativos. Proteção de informações sensíveis com DLP, DSPM, Purview e ambientes cloud.
Senior Manager, Global Security Technology
Global Security Technology leader shaping strategy, platforms, and modernization. Managing enterprise security projects, vendors, budgets, and global capability delivery for Johnson & Johnson healthcare operations.