Senior Cloud Security Engineer

Overview

We are seeking a Senior Cloud Security Engineer to own cloud security remediation, hardening, and security posture improvement across our Azure environment. This is a hands-on engineering role focused on permanently resolving security findings, implementing preventive controls, and enforcing secure-by-design practices.

Key Responsibilities

• Own end-to-end remediation of security findings from Security teams, Microsoft Defender for Cloud, and other security tools.

• Identify root causes and implement permanent fixes using policy-as-code, automation, and security guardrails.

• Manage and secure Microsoft Entra ID (Azure AD), including App Registrations, Enterprise Applications, Conditional Access, RBAC, and least-privilege access.

• Secure authentication mechanisms including OIDC, OAuth 2.0, PKCE, JWT, and mTLS.

• Build and enforce security controls using Terraform and Azure Policy.

• Improve cloud security posture through Microsoft Defender for Cloud and CSPM initiatives.

• Strengthen privileged access security using MFA, PIM, and Just-In-Time access.

• Implement security controls for AI workloads, AI agents, and modern cloud services.

Required Skills

• 8+ years of Cloud Security / Security Engineering experience.

• Strong Azure Security and Microsoft Entra ID expertise.

• Hands-on experience with Terraform, Azure Policy, and Policy-as-Code.

• Experience with Microsoft Defender for Cloud and CSPM.

• Knowledge of OIDC, OAuth 2.0, PKCE, JWT, and mTLS.

• Proven experience remediating and preventing recurring security findings.

• Understanding of AI security concepts and controls.

Preferred Skills

• AWS or GCP security experience.

• CI/CD Security, Secrets Management, and SIEM/SOAR.

• PowerShell and Python automation.

• Experience securing AI/LLM-based solutions.

Certifications: AZ-500, SC-300, SC-100, CISSP.