Azure Cloud Security Engineer | Identity & SecOps Lead

Fagron; Rotterdam; Hybrid; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Hybrid work with 3 office days

Annual bonus

28 vacation days

Collective health insurance

Travel allowance or public transport

Job summary

Fagron is seeking a hands-on Cloud Security Engineer to own and raise the security posture of our Azure and Entra ID environment. You will work with SOC, IT, Architecture, and Risk & Compliance teams in a high-trust, mission-driven role.

You will harden cloud estate, manage identity, and drive security across cloud, identity, endpoints, and logging, while integrating security into CI/CD and IaC pipelines. A hybrid work model with potential for growth awaits.

Qualifications

• 4-6 years in cloud / information security, with hands-on Azure & Entra ID
• Solid grounding in identity, security operations, and a pragmatic, risk-based mindset
• Comfortable partnering with both technical and non-technical stakeholders

Responsibilities

• Own and harden our Azure and Entra ID cloud estate using Defender for Cloud and Azure Policy
• Manage identity and access in Entra ID — Conditional Access, PIM, RBAC, secure app onboarding
• Continuously assess posture and close gaps across cloud, identity, endpoints, and logging
• Investigate and respond to alerts in Microsoft Sentinel and perform root-cause analysis
• Embed security into CI/CD pipelines and Infrastructure-as-Code (Terraform/Bicep)
• Run security assessments aligned to ISMS and support audits (ISO 27001, NIS2, GDPR, GxP/GMP)

Skills

Cloud security

Azure

Entra ID

Security operations

Risk-based mindset

Stakeholder collaboration

Tools

Defender for Cloud

Azure Policy

Terraform

Bicep

PowerShell

KQL

Log Analytics

Job description

Fagron is seeking a hands-on Cloud Security Engineer to own and raise the security posture of our Azure and Entra ID environment. You will work with SOC, IT, Architecture, and Risk & Compliance teams in a high-trust, mission-driven role.

You will harden cloud estate, manage identity, and drive security across cloud, identity, endpoints, and logging, while integrating security into CI/CD and IaC pipelines. A hybrid work model with potential for growth awaits.