Microsoft Security, Identity & Cloud Security Engineer

We are looking for an experienced Microsoft Security Identity & Cloud Security Engineer to strengthen identity protection privileged access management and cloud security across enterprise Microsoft environments.

The successful candidate will be responsible for implementing configuring and maintaining security controls across Microsoft Entra ID Microsoft 365 Azure and endpoint environments. This is a hands-on individual contributor role requiring strong technical expertise in identity security access governance security automation and threat monitoring.

Key Responsibilities

• Configure and manage Microsoft Entra ID Active Directory Single Sign-On (SSO) Multi-Factor Authentication (MFA) and Conditional Access policies.
• Implement identity lifecycle management for employees contractors service accounts and application identities.
• Manage privileged access including Microsoft Entra Privileged Identity Management (PIM) access reviews emergency access accounts and administrative permissions.
• Implement and maintain security controls across Microsoft 365 Microsoft Defender Azure workloads and endpoint environments.
• Integrate identity cloud and endpoint security logs with Microsoft Sentinel or equivalent Security Information and Event Management (SIEM) platforms.
• Investigate security alerts support incident response and assist with containment and evidence collection.
• Identify and remediate security misconfigurations excessive permissions and identity-related vulnerabilities.
• Automate security administration and recurring operational tasks using PowerShell and Microsoft Graph.
• Support secure application onboarding secrets management and identity integration for cloud and AI initiatives.
• Maintain security documentation configuration records operating procedures and audit evidence.
• Collaborate with infrastructure teams application owners IT service management and cybersecurity leadership to implement approved security standards.

Requirements

• Bachelors degree in Computer Science Information Technology Cybersecurity Engineering or a related discipline or equivalent practical experience.
• Minimum 5 years of relevant experience in Microsoft infrastructure identity engineering or cybersecurity.
• Strong hands-on experience with Microsoft Entra ID Active Directory Conditional Access and MFA.
• Practical experience implementing privileged access controls and identity governance.
• Experience securing Microsoft 365 environments Microsoft Defender and Azure workloads.
• Knowledge of PowerShell scripting and Microsoft Graph for security automation.
• Experience with Microsoft Sentinel or another SIEM platform including security log analysis and incident investigation.
• Strong troubleshooting documentation change management and communication skills.
• Relevant Microsoft security identity or Azure certifications are an advantage.

Key Technical Skills

Microsoft Entra ID Azure Active Directory Active Directory Conditional Access MFA Privileged Identity Management (PIM) Identity and Access Management (IAM) Microsoft 365 Security Microsoft Defender Azure Security PowerShell Microsoft Graph Microsoft Sentinel SIEM Identity Lifecycle Management Cloud Security

Ideal Candidate

A technically strong security engineer who has personally implemented and operated Microsoft identity and cloud security controls in an enterprise environment. Candidates whose experience is limited to general IT support basic Microsoft 365 administration or cybersecurity governance without hands-on engineering experience may not be suitable.