Senior Cloud Security Engineer

Fagron Tech; Rotterdam; Hybrid; EUR 70,000 - 100,000; Full time

Benefits offered by this job

Hybrid work arrangement

Annual bonus

Travel allowance / public transport

Job summary

Fagron Tech is seeking a hands-on Cloud Security Engineer to own and raise the security posture of our Azure and Entra ID environment, working shoulder-to-shoulder with our SOC, IT, Architecture, and Risk & Compliance teams. This role is high-trust, high-ownership security work within a mission-driven program, spanning cloud identity security, security operations, DevSecOps, and risk & compliance.

You will help harden the cloud estate, automate security tasks via IaC (Terraform/Bicep) and

Qualifications

• 4-6 years in cloud / information security with Azure & Entra ID.
• Strong grounding in identity, security operations, and a pragmatic, risk-based mindset.
• Comfortable partnering with both technical and non-technical stakeholders.

Responsibilities

• Own and harden cloud estate with Defender for Cloud, Azure Policy, and secure landing-zone patterns.
• Manage identity & access in Entra ID — Conditional Access, PIM, RBAC, secure app onboarding.
• Continuously assess posture and close gaps across cloud, identity, endpoints, and logging.
• Investigation and response to alerts in Microsoft Sentinel, correlating events with KQL & Log Analytics.

Skills

Azure security

Entra ID

Cloud security

PowerShell

Terraform/Bicep

KQL

Tools

Microsoft Sentinel

Entra ID

Terraform

Bicep

PowerShell

Job description

About the job

We're looking for a hands-on Cloud Security Engineer to own and continuously raise the security posture of our Azure and Entra ID environment, working shoulder-to-shoulder with our SOC, IT, Architecture, and Risk & Compliance teams.

It's high-trust, high-ownership, and genuinely mission-driven security work.

What you'll do

Cloud & Identity Security (Azure & Entra ID) • Own and harden our cloud estate with Defender for Cloud, Azure Policy, and secure landing-zone patterns • Manage identity & access in Entra ID — Conditional Access, PIM, RBAC, secure app onboarding — enforcing least privilege • Continuously assess posture and close gaps across cloud, identity, endpoints, and logging

Security Operations & Incident Response • Investigate and respond to alerts in Microsoft Sentinel, correlating events with KQL & Log Analytics • Drive root-cause analysis and turn findings into stronger detections and controls

DevSecOps & Automation • Embed security into CI/CD pipelines and Infrastructure-as-Code (Terraform/Bicep) - shifting security left • Automate recurring security tasks with PowerShell and policy-as-code

Risk, Compliance & Projects • Run assessments aligned to our ISMS and support audits across ISO 27001, NIS2, GDPR, and GxP/GMP • Lead security initiatives (cloud hardening, monitoring, identity improvements) and coordinate pen-testing

Set yourself apart

What you bring

• 4-6 years in cloud / information security, with strong hands-on Azure & Entra ID
• Solid grounding in identity, security operations, and a pragmatic, risk-based mindset
• Comfortable partnering with both technical and non-technical stakeholders

Nice to have

• Cloud security certifications - AZ-500, SC-200, SC-300, or CCSP
• DevSecOps / IaC experience and PowerShell automation
• CISSP / CISM, or regulated-industry (pharma / GxP) exposure
• Join a security function with real ownership, executive visibility, and a mission that matters

What's on offer?

• Being part of an international team.
• Fixed-term contract with the possibility and intention to extend.
• A market-conform salary, all in line with your knowledge & experience.
• Hybrid working with 3 days in the office.
• Annual bonus.
• 28 vacation days.
• Collective health insurance.
• Travel allowance of € 0.23 per KM (with a max of 150KM per day) or 100% public transportation reimbursement.

At Fagron, you'll find plenty of chances to grow - both personally and professionally. We work in an open, dynamic environment where your ideas and talents can shine.

We're proud to be an equal opportunity employer. Diversity makes us stronger, and we're committed to creating an inclusive workplace where everyone feels welcome.

Ready for the challenge?

Please note: we do not accept agency referrals for this position.