Security Engineer

Doghouse Recruitment; Amsterdam; Vor Ort; EUR 108.000 - 132.000; Vollzeit

Benefits dieser Stelle

Lease car

Permanent contract from day one

Office in Amsterdam (3 days/week)

Zusammenfassung

Doghouse Recruitment is seeking an Azure Security Engineer to own the security of a multi-tenant Azure platform in Amsterdam. You’ll manage Entra ID, RBAC, Conditional Access, and Privileged Identity Management, while leveraging Defender for Cloud and Microsoft Sentinel for monitoring and threat detection.

The role involves Terraform, Azure DevOps, Ansible, PowerShell, and network segmentation. Expect to contribute during design, deployment, and DR testing, with a strong emphasis on secure by

Qualifikationen

• 6+ years in Azure infrastructure or cloud engineering with security as main focus
• Entra ID in depth: RBAC, CA, PIM, identity governance
• Microsoft Sentinel and Defender for Cloud, including writing your own KQL
• IaC experience with Terraform, plus Azure DevOps pipelines and PowerShell
• Azure networking: segmentation, private endpoints
• Software supply chain and vulnerability management ownership or willingness to own
• Fluent English; Dutch is a plus

Aufgaben

• Own the security side of a live Azure platform and build it yourself
• Work with Entra ID features: RBAC, CA, PIM, identity governance
• Use Defender for Cloud and Sentinel; write own KQL
• Implement IaC with Terraform and manage Azure DevOps pipelines
• Manage Azure networking and private endpoints for secure access
• Oversee software supply chain and vulnerability management
• Participate in design sessions, deployments and disaster recovery tests

Kenntnisse

Azure security focus

Entra ID depth

RBAC & Conditional Access

Privileged Identity Mgmt

Identity governance

Microsoft Sentinel

Defender for Cloud

KQL

Terraform

Azure DevOps

Ansible/config mgmt

PowerShell

Azure networking

Software supply chain

Vulnerability management

English fluency

Tools

Terraform

Azure DevOps

Ansible

PowerShell

Datadog

Azure Monitor

KQL

Jobbeschreibung

Azure Security Engineer – Entra ID, Sentinel, Defender | Amsterdam [€120K + car]

[Business Critical IT / Managed Services]

One team is building a multi tenant Azure platform from scratch under heavy regulation. The other is merging two Entra ID tenants and putting a data and AI platform on Azure. Both need an engineer who owns security rather than one who reviews it.

My client runs business critical infrastructure for large organisations, a good part of it in regulated sectors. Every client environment belongs to one dedicated team that designs it, builds it and then runs it for years, and the technical mandate sits inside that team. A team is a group of senior engineers, one of whom carries the tech lead role, and there is no management layer above you deciding how the platform should work.

What you’ll do

You own the security side of a live Azure platform, and you build it yourself instead of writing recommendations for someone else. Identity is the biggest piece, so Entra ID in depth: role based access control, Conditional Access, Privileged Identity Management, and identity governance with access packages. Defender for Cloud gives you the posture picture, Microsoft Sentinel gives you detection and you write your own KQL rather than living off the defaults. Around that sits the platform itself: Terraform, Azure DevOps pipelines, Ansible for configuration management, PowerShell where you need it, network segmentation with private endpoints, and monitoring on Datadog and Azure Monitor. Software supply chain and vulnerability management are wide open, and so is the question of how you keep things safe while the teams build with AI agents. You will be in the design sessions, the deployments and the disaster recovery tests, because security touches all of it. The first months are heavy on implementation, after that it moves with whatever the platform needs.

Your profile

• 6+ years in Azure infrastructure or cloud engineering, with security as your main focus in recent years
• Entra ID in depth: role based access control, Conditional Access, Privileged Identity Management, identity governance
• Microsoft Sentinel and Defender for Cloud, including writing your own KQL
• Infrastructure as code with Terraform, plus Azure DevOps pipelines and PowerShell
• Azure networking: segmentation, private endpoints, and what actually makes a resource private
• Software supply chain and vulnerability management, or the appetite to own it here
• Fluent English, Dutch is a plus

What’s in it for you

Up to €120K gross per year, a lease car, and a strong package on top of that. A permanent contract from day one. Three days a week in the Amsterdam office, the rest from wherever you work best. Budget for certification, training and conferences, and the room to actually use it.