Description

Own the full lifecycle of cloud security remediation, identity governance, and infrastructure-as-code guardrails across Azure environments.

This role is hybrid.

Responsibilities

• Drive remediation and recurrence prevention for security findings from Microsoft Defender for Cloud and internal teams, implementing systemic fixes via policy-as-code and automated guardrails.
• Secure and govern modern authentication flows (OIDC, OAuth 2.0, PKCE, JWT, mTLS) and harden Microsoft Entra ID including app registrations, consent governance, and Conditional Access policies.
• Build and enforce cloud security guardrails using Azure Policy and Terraform, maintaining secure-by-default IaC baselines and detecting configuration drift.
• Operate Microsoft Defender for Cloud to improve secure scores, manage cloud security posture (CSPM), and drive risk reduction trends.
• Apply security controls to AI workloads and agents, addressing identity scoping, data exposure, and prompt-injection risks.

Required Skills

• 8+ years in cloud security or security engineering with deep, hands-on Azure experience.
• Strong expertise in Microsoft Entra ID: app registrations, Enterprise Apps, permissions, consent, and Conditional Access.
• Proficiency in modern authentication standards: OIDC, OAuth 2.0 / PKCE, JWT, and mTLS.
• Hands-on experience with Terraform and Azure Policy for policy-as-code and automated guardrails.
• Experience with Microsoft Defender for Cloud and cloud security posture management.
• Proven track record of root-causing and permanently closing security findings, not just patching.
• Working understanding of AI, AI agents, and AI security considerations.

Preferred Skills

• Multi-cloud exposure (AWS, GCP).
• Scripting and automation skills (PowerShell, Python).
• Experience with CI/CD pipeline security, secrets management, and SIEM/SOAR.

Key Skills

Education

Any Graduate