Description

You own cloud security remediation and hardening, turning security team recommendations into durable, automated fixes and preventing recurring findings.

This role is hybrid.

Responsibilities

• Own the full lifecycle of security findings from triage through verification and closure, ensuring permanent root-cause resolution.
• Implement systemic fixes using policy-as-code, Terraform, and Azure Policy to enforce secure baselines and prevent drift.
• Secure and govern modern authentication flows including OIDC, OAuth 2.0 with PKCE, JWT, and mTLS across the enterprise.
• Administer Microsoft Entra ID, including app registrations, consent governance, service principals, and Conditional Access policies.
• Operate Microsoft Defender for Cloud to drive secure-score improvement and manage cloud security posture (CSPM).

Required Skills

• 8+ years in cloud security or security engineering with deep, hands-on Azure experience.
• Strong expertise in Microsoft Entra ID: app registrations, Enterprise Apps, permissions, consent, and Conditional Access.
• Proficiency in Terraform and Azure Policy for infrastructure-as-code baselines and automated guardrails.
• Experience with Microsoft Defender for Cloud and cloud security posture management (CSPM).
• Solid working knowledge of modern authentication: OIDC, OAuth 2.0, JWT, and mTLS.
• Proven track record of root-causing and permanently closing security findings rather than applying patches.
• Understanding of AI security considerations, including agent identities, tool scoping, and data-exposure risks.

Preferred Skills

• Multi-cloud exposure (AWS, GCP) or relevant certifications (SC-100, AZ-500, CISSP).
• Experience securing LLM-based or agentic systems in production.

Key Skills

Education

Any Graduate