Hybrid Cloud Security Engineer (Microsoft IAM/Azure)

Pontoon; Greater London; Hybrid; GBP 129,000 - 148,000; Full time

Job summary

Pontoon is seeking a hands-on Security Engineer to join a 6-month contract, working on a Microsoft cloud security estate. The role is hybrid with Midlands-based office visits about once per month and requires strong experience in IAM, RBAC, Privileged Access Management and vulnerability remediation.

You will implement security controls, identify weaknesses, and drive remediation while supporting external penetration testing programs over the next 3–6 months.

Qualifications

• Hands-on security engineering experience in a corporate/regulated environment.
• Experience implementing CIS controls and security hardening.

Responsibilities

• Implement, configure and maintain security controls across the Microsoft security ecosystem.
• Identify security gaps and drive remediation activities to improve overall security posture.
• Support the preparation, coordination and remediation of external penetration testing engagements.
• Manage identity, access management and privileged access controls.
• Configure and maintain Conditional Access, RBAC and Privileged Identity Management controls.
• Improve device, identity, data and cloud security controls across the estate.
• Support audit, assurance and compliance activities.
• Work with architecture, security operations and other teams to deliver improvements.
• Contribute to CIS control implementation.

Skills

Security engineering

IAM

RBAC

Privileged access management

Least privilege

Cloud security

Vulnerability remediation

Penetration testing support

Tools

Microsoft Entra ID

Microsoft Intune

Microsoft 365 Security

Microsoft Azure

Microsoft Purview

Job description

Pontoon is seeking a hands-on Security Engineer to join a 6-month contract, working on a Microsoft cloud security estate. The role is hybrid with Midlands-based office visits about once per month and requires strong experience in IAM, RBAC, Privileged Access Management and vulnerability remediation.

You will implement security controls, identify weaknesses, and drive remediation while supporting external penetration testing programs over the next 3–6 months.