Hybrid Azure Security Engineer – Entra ID & Policy as Code

Doghouse Recruitment; Amsterdam; Hybrid; EUR 72,000 - 120,000; Full time

Benefits offered by this job

Lease car

Job summary

Doghouse Recruitment seeks a Cloud Security Engineer to own security across live Azure platforms, from identity to egress. Entra ID starts with CA, PIM, RBAC, and governance; guardrails are codified with Terraform and Azure DevOps.

Defender for Cloud and Sentinel are used for posture and detection, with KQL tuning by the engineer. There is active focus on supply chain security, vulnerability management, and secure AI agent development.

Qualifications

• 6+ years in Azure infrastructure or cloud engineering with security focus
• Entra ID at depth: CA, PIM, RBAC, identity governance
• Sentinel and Defender for Cloud with own KQL
• Terraform and Azure DevOps pipelines, plus PowerShell, and ideally Ansible
• Supply chain security and vulnerability management focus
• Comfortable in regulated environments (DORA, NIS, ISO)
• Fluent English, Dutch is a plus

Responsibilities

• Secure a live Azure platform from identity to egress controls
• Implement guardrails in code via Terraform and Azure DevOps
• Manage Defender for Cloud posture and Sentinel detections and tune KQL
• Address supply chain security and vulnerability management
• Support how teams build with AI agents in a compliant environment
• Operate within regulatory frameworks and collaborate with clients' teams

Skills

Azure infrastructure

Entra ID

Conditional Access

PIM

RBAC

Identity governance

Sentinel

Defender for Cloud

KQL

Terraform

Azure DevOps

PowerShell

Ansible

Supply chain security

Vulnerability management

Regulatory compliance (DORA, NIS, ISO)

English (fluency)

Dutch (bonus)

Tools

Terraform

Azure DevOps

PowerShell

Ansible

Job description

Doghouse Recruitment seeks a Cloud Security Engineer to own security across live Azure platforms, from identity to egress. Entra ID starts with CA, PIM, RBAC, and governance; guardrails are codified with Terraform and Azure DevOps.

Defender for Cloud and Sentinel are used for posture and detection, with KQL tuning by the engineer. There is active focus on supply chain security, vulnerability management, and secure AI agent development.