Cloud Security Engineer T&M

Responsibilities

• Own the full lifecycle of security findings and recommendations through triage, remediation, verification, and closure
• Root-cause recurring issues and implement systemic fixes using policy-as-code and automated guardrails
• Secure and govern modern authentication flows including OIDC, OAuth 2.0, and mTLS
• Administer and harden Microsoft Entra ID (Azure Entra) including app registrations and service principals
• Design and implement Conditional Access policies
• Build and enforce guardrails using Azure Policy and Terraform
• Operate Microsoft Defender for Cloud to drive secure-score improvement
• Secure cloud and SaaS administrative portals and strengthen privileged access via PIM
• Apply security controls to AI workloads, services, and AI agents

Requirements

• 5+ years in cloud security or security engineering with deep Azure experience
• Strong Microsoft Entra ID expertise
• Solid working knowledge of modern authentication (OIDC, OAuth 2.0 / PKCE, JWT, and mTLS)
• Proficiency with Terraform and Azure Policy
• Experience with Microsoft Defender for Cloud and CSPM
• Demonstrable track record of root-causing and permanently closing security findings
• Working understanding of AI and AI security considerations

Preferred Qualifications

• Multi-cloud exposure (AWS, GCP)
• Relevant certifications (e.g., Microsoft SC-100, AZ-500, SC-300, or CISSP)
• Experience with CI/CD pipeline security and secrets management
• Scripting and automation skills (PowerShell, Python)
• Hands-on experience securing LLM-based or agentic systems in production