Microsoft Security, Identity & Cloud Security Engineer

We are looking for an experienced Microsoft Security, Identity & Cloud Security Engineer to strengthen identity protection, privileged access management, and cloud security across enterprise Microsoft environments.

The successful candidate will be responsible for implementing, configuring, and maintaining security controls across Microsoft Entra ID, Microsoft 365, Azure, and endpoint environments. This is a hands-on individual contributor role requiring strong technical expertise in identity security, access governance, security automation, and threat monitoring.

Key Responsibilities

• Configure and manage Microsoft Entra ID, Active Directory, Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Conditional Access policies.
• Implement identity lifecycle management for employees, contractors, service accounts, and application identities.
• Manage privileged access, including Microsoft Entra Privileged Identity Management (PIM), access reviews, emergency access accounts, and administrative permissions.
• Implement and maintain security controls across Microsoft 365, Microsoft Defender, Azure workloads, and endpoint environments.
• Integrate identity, cloud, and endpoint security logs with Microsoft Sentinel or equivalent Security Information and Event Management (SIEM) platforms.
• Investigate security alerts, support incident response, and assist with containment and evidence collection.
• Identify and remediate security misconfigurations, excessive permissions, and identity-related vulnerabilities.
• Automate security administration and recurring operational tasks using PowerShell and Microsoft Graph.
• Support secure application onboarding, secrets management, and identity integration for cloud and AI initiatives.
• Maintain security documentation, configuration records, operating procedures, and audit evidence.
• Collaborate with infrastructure teams, application owners, IT service management, and cybersecurity leadership to implement approved security standards.

Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related discipline, or equivalent practical experience.
• Minimum 5 years of relevant experience in Microsoft infrastructure, identity engineering, or cybersecurity.
• Strong hands-on experience with Microsoft Entra ID, Active Directory, Conditional Access, and MFA.
• Practical experience implementing privileged access controls and identity governance.
• Experience securing Microsoft 365 environments, Microsoft Defender, and Azure workloads.
• Knowledge of PowerShell scripting and Microsoft Graph for security automation.
• Experience with Microsoft Sentinel or another SIEM platform, including security log analysis and incident investigation.
• Strong troubleshooting, documentation, change management, and communication skills.
• Relevant Microsoft security, identity, or Azure certifications are an advantage.

Key Technical Skills

Microsoft Entra ID | Azure Active Directory | Active Directory | Conditional Access | MFA | Privileged Identity Management (PIM) | Identity and Access Management (IAM) | Microsoft 365 Security | Microsoft Defender | Azure Security | PowerShell | Microsoft Graph | Microsoft Sentinel | SIEM | Identity Lifecycle Management | Cloud Security

Ideal Candidate

A technically strong security engineer who has personally implemented and operated Microsoft identity and cloud security controls in an enterprise environment. Candidates whose experience is limited to general IT support, basic Microsoft 365 administration, or cybersecurity governance without hands-on engineering experience may not be suitable.