Cloud Engineer

Pyramid Consulting, Inc; Mexico; On-site; PHP 5,625,000 - 8,125,000; Full time

Job summary

Pyramid Consulting, Inc. seeks an experienced cloud security professional to design and implement secure cloud architectures.

You will leverage deep Azure experience and Microsoft Entra ID expertise to safeguard identities, access, and resources while aligning with modern authentication standards. Responsibilities include building policy-as-code with Terraform and Azure Policy, securing Defender for Cloud posture, and driving root-cause analysis to permanently close findings.

Qualifications

• 5+ years in cloud security or security engineering, with deep, hands-on Azure experience.
• Strong, hands-on Microsoft Entra ID expertise: app registrations, Enterprise Apps, permissions and consent, and Conditional Access
• Solid working knowledge of modern authentication: OIDC, OAuth 2.0 / PKCE, JWT, and mTLS.
• Proficiency with Terraform and Azure Policy for policy-as-code and automated guardrails.
• Experience with Microsoft Defender for Cloud and cloud security posture management.
• A demonstrable track record of root-causing and permanently closing security findings—not just patching them.
• Working understanding of AI, AI agents, and AI security considerations.

Skills

Cloud security

Azure

Microsoft Entra ID

OIDC

OAuth 2.0

JWT

mTLS

AI security

CI/CD security

Secrets management

SIEM/SOAR

PowerShell

Python

Tools

Terraform

Azure Policy

Microsoft Defender for Cloud

Job description

• 5+ years in cloud security or security engineering, with deep, hands-on Azure experience.
• Strong, hands-on Microsoft Entra ID expertise: app registrations, Enterprise Apps, permissions and consent, and Conditional Access
• Solid working knowledge of modern authentication: OIDC, OAuth 2.0 / PKCE, JWT, and mTLS.
• Proficiency with Terraform and Azure Policy for policy-as-code and automated guardrails.
• Experience with Microsoft Defender for Cloud and cloud security posture management.
• A demonstrable track record of root-causing and permanently closing security findings—not just patching them.
• Working understanding of AI, AI agents, and AI security considerations.

Nice to Have

• Experience with CI/CD pipeline security, secrets management, and SIEM/SOAR.
• Scripting/automation (PowerShell, Python).

Hands-on experience securing LLM-based or agentic systems in production.