Cloud Security Engineer T&M

Remotedxb; Dubai; On-site; AED 400,000 - 560,000; Full time

Job summary

Remotedxb is seeking a Senior Cloud Security Engineer to own the full lifecycle of security findings in a complex Azure environment. You will drive triage, remediation, verification and closure while shaping security posture across cloud and SaaS platforms.

In this role you will strengthen authentication flows (OIDC, OAuth 2.0, mTLS), administer Microsoft Entra ID, and implement Conditional Access policies.

Qualifications

• 5+ years in cloud security or security engineering with deep Azure experience.
• Strong Microsoft Entra ID expertise.
• Solid working knowledge of modern authentication (OIDC, OAuth 2.0 / PKCE, JWT, and mTLS).
• Proficiency with Terraform and Azure Policy.
• Experience with Microsoft Defender for Cloud and CSPM.
• Demonstrable track record of root-causing and permanently closing security findings.
• Working understanding of AI and AI security considerations.

Responsibilities

• Own the full lifecycle of security findings and recommendations through triage, remediation, verification, and closure
• Root-cause recurring issues and implement systemic fixes using policy-as-code and automated guardrails
• Secure and govern modern authentication flows including OIDC, OAuth 2.0, and mTLS
• Administer and harden Microsoft Entra ID (Azure Entra) including app registrations and service principals
• Design and implement Conditional Access policies
• Build and enforce guardrails using Azure Policy and Terraform
• Operate Microsoft Defender for Cloud to drive secure-score improvement
• Secure cloud and SaaS administrative portals and strengthen privileged access via PIM
• Apply security controls to AI workloads, services, and AI agents

Skills

Azure security

Microsoft Entra ID

Modern authentication

Tools

Terraform

Azure Policy

Defender for Cloud

Job description

Responsibilities

• Own the full lifecycle of security findings and recommendations through triage, remediation, verification, and closure
• Root-cause recurring issues and implement systemic fixes using policy-as-code and automated guardrails
• Secure and govern modern authentication flows including OIDC, OAuth 2.0, and mTLS
• Administer and harden Microsoft Entra ID (Azure Entra) including app registrations and service principals
• Design and implement Conditional Access policies
• Build and enforce guardrails using Azure Policy and Terraform
• Operate Microsoft Defender for Cloud to drive secure-score improvement
• Secure cloud and SaaS administrative portals and strengthen privileged access via PIM
• Apply security controls to AI workloads, services, and AI agents

Requirements

• 5+ years in cloud security or security engineering with deep Azure experience
• Strong Microsoft Entra ID expertise
• Solid working knowledge of modern authentication (OIDC, OAuth 2.0 / PKCE, JWT, and mTLS)
• Proficiency with Terraform and Azure Policy
• Experience with Microsoft Defender for Cloud and CSPM
• Demonstrable track record of root-causing and permanently closing security findings
• Working understanding of AI and AI security considerations

Preferred Qualifications

• Multi-cloud exposure (AWS, GCP)
• Relevant certifications (e.g., Microsoft SC-100, AZ-500, SC-300, or CISSP)
• Experience with CI/CD pipeline security and secrets management
• Scripting and automation skills (PowerShell, Python)
• Hands-on experience securing LLM-based or agentic systems in production