F5/CloudFlare/LB/GTM- Network_Security_Engineer

Role overview

Identity and access

• Process approved PIM role assignments and access elevations, validate approvals, and support access reviews.
• Create app registrations and service principals, rotate secrets and certificates, and apply requested API permissions.
• Provision managed identities and assign requested RBAC roles.
• Troubleshoot sign-in and MFA issues; apply approved Conditional Access changes and manage exclusions.
• Support SSO application onboarding and troubleshoot common federation and SAML/OIDC issues.

Security operations

• Monitor Logic Apps security automations, investigate failed runs, perform first-line fixes, and make minor guided updates.
• Triage alerts and incidents, investigate and contain them using playbooks, and escalate confirmed or high-severity incidents with documented evidence.
• Remediate Azure Policy non-compliance and process approved policy assignments and exemptions.
• Review Defender for Cloud secure score and recommendations, track remediation tasks, and report progress.
• Monitor server and container threats, including AKS workloads, and process just-in-time VM access requests.
• Administer Defender for Endpoint and Intune, including device onboarding, compliance troubleshooting, and app and certificate profile deployment.

PKI and operations

• Process certificate issuance, renewal, and revocation under PKI policy, including certificates from private GCP certificate authorities.
• Manage Azure Key Vault keys and secrets, including scheduled rotation and approved access-policy or RBAC updates.
• Maintain certificate and key inventories, monitor expiries, and raise renewal tickets in advance.
• Work within ticket SLAs, maintain complete notes, and raise standard changes with implementation and rollback steps.
• Follow and help maintain runbooks and SOPs, document resolutions, and participate in shift handovers and on-call rotation as required.

Qualifications and experience

• Bachelor's or college degree in Computer Science, Information Technology, or a related field.
• 4–6 years of IT experience, including at least 2–3 years of hands-on cloud security or cloud operations work at L2 level.
• Practical Microsoft Entra ID administration, including RBAC, PIM, App Registrations, and Conditional Access; experience operating Microsoft Defender products.
• Required experience with ticket work in incident and change management processes (ITSM).

Technical skills and knowledge

• Hands-on experience with Entra ID, Azure RBAC and Policy, Defender for Cloud, Defender for Servers and Endpoint, Intune, and Azure Key Vault.
• Familiarity with Logic Apps, Defender for Containers or AKS, and GCP Certificate Authority Service.
• Basic scripting ability with PowerShell, Azure CLI, or KQL for investigation and routine tasks.
• Knowledge of identity and access, PKI certificate lifecycle and key management, trust chains, and common cloud security threats.
• Ability to follow runbooks, prioritize tickets, and escalate appropriately; clear communication, careful ticket documentation, teamwork, and ability to work under time pressure.

Preferred qualifications

• Exposure to GCP or OCI is a plus.
• Relevant professional certifications are desirable. Examples include Microsoft Azure security, identity, security operations, administrator or endpoint certifications; Google Cloud Associate Cloud Engineer; and vendor-agnostic certifications such as CompTIA Security+ or CCSK.