Hybrid Azure Cloud Security Engineer — Identity & DevSecOps

Fagron; Rotterdam; Hybrid; EUR 65,000 - 105,000; Full time

Benefits offered by this job

Travel allowance

Collective health insurance

Annual bonus

28 vacation days

Hybrid work (3 days in office)

Job summary

Fagron is seeking a hands-on Cloud Security Engineer to own and raise the security posture of our Azure and Entra ID environment. You will work shoulder-to-shoulder with our SOC, IT, Architecture, and Risk & Compliance teams.

In this role, you’ll harden cloud estates with Defender for Cloud, Azure Policy, and secure landing-zone patterns while managing identity and access via Entra ID—enforcing least privilege.

Qualifications

• 4–6 years in cloud and information security with hands-on Azure & Entra ID.
• Strong grounding in identity, security operations, and a pragmatic, risk-based mindset.
• Comfortable partnering with both technical and non-technical stakeholders.

Responsibilities

• Own and harden the cloud estate using Defender for Cloud, Azure Policy, and secure landing-zone patterns, focusing on Azure & Entra ID.
• Manage identity and access in Entra ID (Conditional Access, PIM, RBAC, secure app onboarding) with least privilege.
• Continuously assess posture and close gaps across cloud, identity, endpoints, and logging.
• Investigate and respond to security alerts in Microsoft Sentinel and perform root-cause analyses to improve detections.
• Embed security into CI/CD pipelines and IaC (Terraform/Bicep) and automate tasks with PowerShell.

Skills

Cloud security

Azure & Entra ID

Identity & access management

Security operations

DevSecOps / IaC

PowerShell

Security certifications (CCSP/CISSP)

Regulated-industry exposure (pharma/Gx

Job description

Fagron is seeking a hands-on Cloud Security Engineer to own and raise the security posture of our Azure and Entra ID environment. You will work shoulder-to-shoulder with our SOC, IT, Architecture, and Risk & Compliance teams.

In this role, you’ll harden cloud estates with Defender for Cloud, Azure Policy, and secure landing-zone patterns while managing identity and access via Entra ID—enforcing least privilege.