Microsoft Security, Identity & Cloud Security Engineer

Role overview

Identity and access security

• Configure Microsoft Entra ID, Active Directory, SSO, MFA, and Conditional Access policies.
• Manage identity lifecycles for employees, contractors, service accounts, and application identities.
• Operate privileged access controls, PIM, access reviews, emergency accounts, and administrative permissions.

Cloud security and incident response

• Maintain security controls across Microsoft 365, Microsoft Defender, Azure workloads, and endpoints; integrate their logs with Sentinel or an equivalent SIEM.
• Investigate alerts, support incident response and evidence collection, and remediate misconfigurations, excessive permissions, and identity vulnerabilities.
• Use PowerShell and Microsoft Graph to automate security administration and recurring tasks.
• Support secure application onboarding, secrets management, and identity integration for cloud and AI initiatives.

Documentation and collaboration

• Maintain security documentation, configuration records, procedures, and audit evidence.
• Work with infrastructure teams, application owners, IT service management, and cybersecurity leadership to apply approved standards.

Qualifications and experience

• A bachelor's degree in Computer Science, IT, Cybersecurity, Engineering, or a related field, or equivalent practical experience.
• At least five years of relevant experience in Microsoft infrastructure, identity engineering, or cybersecurity.
• Hands-on Microsoft Entra ID, Active Directory, Conditional Access, and MFA experience; practical privileged access and identity governance experience.
• Experience securing Microsoft 365, Microsoft Defender, and Azure workloads; knowledge of PowerShell and Microsoft Graph.
• Experience with Microsoft Sentinel or another SIEM, including log analysis and incident investigation.
• Strong troubleshooting, documentation, change management, and communication skills.
• Relevant Microsoft security, identity, or Azure certifications are advantageous.

Technical skills

• Microsoft Entra ID, Azure Active Directory, Active Directory, Conditional Access, MFA, PIM, IAM, and identity lifecycle management.
• Microsoft 365 security, Microsoft Defender, Azure security, PowerShell, Microsoft Graph, Microsoft Sentinel, SIEM, and cloud security.

Ideal candidate

• The preferred candidate has personally implemented and operated Microsoft identity and cloud security controls in an enterprise environment.
• Candidates limited to general IT support, basic Microsoft 365 administration, or cybersecurity governance without hands-on engineering may not be suitable.