Senior Cloud Security Engineer (Azure)

3Cloud; Philippines; Remote; PHP 1,200,000 - 1,800,000; Full time

Job summary

3Cloud is seeking an experienced Cloud Security Engineer specializing in Microsoft Azure. You will lead security implementations across client environments, mentor engineers, and design scalable, secure cloud architectures.

The role emphasizes Defender, Policy, Identity, and IAM controls, with a strong focus on compliance and risk mitigation. You will collaborate with architects and stakeholders to ensure secure deployments, respond to incidents, and contribute to automation and documentation.

Qualifications

• 5+ years in cloud security engineering with a focus on Azure.
• Hands-on with Azure security tools (Azure AD/Entra ID, Defender, Purview, Policy).
• Experience with third-party IAM/security tools (Okta, Splunk).
• Knowledge of HIPAA/HITRUST, FedRAMP, NIST, PCI DSS, CJIS.
• Familiarity with Palo Alto and Fortinet firewalls.
• Scripting in PowerShell, Python or Bash; strong problem solving.
• AZ-500 Azure Security Engineer Associate certified.

Responsibilities

• Lead the implementation and optimization of cloud security solutions.
• Mentor junior and mid-level engineers and act as escalation point.
• Design scalable, secure Azure architectures with stakeholders.
• Implement security controls across Azure services (Policy, Defender, Sentinel).
• Secure deployment of Azure Compute, Networking, and Storage.
• Monitor incidents using Log Analytics and SIEM tools.
• Support IAM initiatives including PIM and Access Packages.
• Develop security documentation and best practices.
• Automate security ops with PowerShell, Python, or Bash.
• Participate in security assessments, audits, and compliance.

Skills

Azure security

Azure AD/Entra ID

PowerShell

Python

Bash

Incident remediation

IAM

Security architecture

Azure Policy

Microsoft Defender

Log Analytics

SIEM

HIPAA/HITRUST

NIST

PCI DSS

CJIS

Palo Alto

Fortinet

Okta

Splunk

Tools

Terraform

Bicep

ARM templates

PowerShell

Python

Bash

Splunk

Azure Sentinel

Okta

Job description

Are you looking for a role that motivates and challenges you? Are you ready for an opportunity for growth? Do you want to work on teams where people roll up their sleeves to take on tough problems together, and regularly blow the doors off our clients with their outstanding teamwork? If you answered yes to those questions, 3Cloud might just be for you!

At 3Cloud, we hire people who aren’t afraid to experiment or fail. We hire people who are willing to give direct and candid feedback to their managers, leaders, and team members. We hire people who jump at those opportunities because they care about our collective growth and success. We hire people who challenge and hold each other accountable for living 3Cloud’s core values because they know that it will result in amazing experiences and solutions for our clients and each other.

Responsibilities

• Lead the implementation and optimization of cloud security solutions across complex client environments.
• Serve as a technical mentor and escalation point for junior and mid-level engineers.
• Collaborate with architects and stakeholders to design scalable, secure, and high-performance cloud architectures.
• Design and implement security controls across Azure services including Azure Policy, Microsoft Defender for Cloud, Sentinel, Purview, and DLP/AIP.
• Collaborate with infrastructure and application teams to ensure secure deployment of Azure Compute, Networking, and Storage resources.
• Monitor and respond to security incidents using Log Analytics and SIEM tools.
• Support identity and access management initiatives, including IAM, PIM, and Access Packages.
• Develop and maintain security documentation, standards, and best practices.
• Contribute to automation efforts using PowerShell, Python, or Bash to streamline security operations.
• Participate in security assessments, audits, and compliance initiatives.
• Provide guidance on secure architecture and design patterns in Azure.
• Stay current with emerging threats, vulnerabilities, and regulatory requirements.

Requirements

• 5+ years of experience in cloud security engineering, with a focus on Microsoft Azure.
• Hands-on experience with Azure security tools and services (Azure AD/Entra ID, Azure Policy, Azure Sentinel, Microsoft Defender suite, Microsoft Purview, Azure Firewall, etc.).
• Familiarity with third-party IAM and security tools (Okta and Okta integration with Entra ID, OneLogin, Splunk, etc.).
• Strong grasp of cloud security frameworks, risk assessment, and incident remediation techniques (HIPAA/HITRUST, FedRAMP, NIST, PCI DSS, CJIS, etc.)
• Familiarity with third-party firewalls such as Palo-Alto and Fortinet.
• Working knowledge of Azure Networking, Compute, and Storage services.
• Familiarity with scripting languages such as PowerShell, Python, or Bash.
• Strong understanding of identity and access management in Azure environments.
• Excellent problem-solving skills and attention to detail.
• Strong communication and collaboration skills.
• AZ-500: Azure Security Engineer Associate certification required.

Preferred Qualifications

• Experience with Infrastructure as Code tools such as Terraform, Bicep, or ARM templates.
• Familiarity with DevSecOps practices and CI/CD pipelines.
• Exposure to multi-cloud environments is a plus.
• SC-200: Security Operations Analyst Associate certification strongly desired.
• SC-300: Identity and Access Administrator Associate certification strongly desired.
• Hashicorp Terraform Associate certification desired.

Full-time employment

Remote in Philippines

This Job Posting will expire on Monday, September 8th, 2025.

Don’t meet every single requirement? At 3Cloud we are dedicated to building a diverse, inclusive and authentic workplace, so if you’re excited about this role but your past experience doesn’t align perfectly with every qualification in the job description, we encourage you to apply anyway.

At this time, we cannot sponsor applicants for work visas.