Description

Design, implement, and maintain enterprise cloud security controls for Azure identity, endpoint, and data protection.

This role is on-site.

Responsibilities

• Design and maintain conditional access policies using device compliance, location, and risk signals.
• Implement Privileged Identity Management (PIM) for just-in-time and just-enough administration.
• Conduct access reviews and manage identity lifecycles for employees, contractors, and service accounts.
• Configure MDM/MAM policies and automate OS/application patching to reduce vulnerability footprint.
• Build sensitivity labels and Data Loss Prevention (DLP) policies for SharePoint, Teams, and Exchange.

Required Skills

• 7+ years supporting enterprise cloud/infrastructure environments.
• Hands-on expertise with Azure Entra, Intune, Purview, and Conditional Access.
• Advanced PowerShell or Python for automation and incident response playbooks.
• Experience with Proofpoint TAP and TRAP for phishing/malware prevention.
• Proficiency in SailPoint for user lifecycle automation.
• Experience with JAMF Pro and JAMF Protect for Apple endpoints.
• Bachelor's degree in Cybersecurity, Computer Science, or Information Systems.

Preferred Skills

• Microsoft Certified: Azure Security Engineer Associate (AZ-500).
• SC-100 (Cybersecurity Architect) or CISSP certification.

Key Skills

Education

Bachelor's degree