Senior Cloud Security Engineer: Remediation & Hardening

Pyramid Consulting, Inc; Mexico; On-site; PHP 7,524,000 - 11,285,000; Full time

Job summary

Pyramid Consulting, Inc is seeking a Senior Cloud Security Engineer to own remediation and hardening across our cloud environment. This is hands-on engineering, not advisory, focusing on durable fixes and reducing recurring findings.

You’ll manage the full lifecycle of security findings, implement guardrails with Terraform and Azure Policy, and strengthen authentication with Entra ID and Conditional Access. Experience with Defender for Cloud and CSPM is beneficial.

Qualifications

• 5+ years in cloud security or security engineering with Azure experience.
• Hands-on expertise with Microsoft Entra ID and Conditional Access.
• Solid knowledge of modern authentication: OIDC, OAuth 2.0, PKCE, JWT, and mTLS.
• Experience with policy-as-code and guardrails (Terraform, ARM templates).
• Proven track record of root-causing and permanently closing security findings.

Responsibilities

• Own the full lifecycle of security findings—from triage to closure.
• Implement systemic fixes to prevent recurring issues (policy-as-code, automated guardrails).
• Track remediation SLAs and report risk reduction and posture trends.
• Secure and govern authentication flows across the estate: OIDC, OAuth 2.0 with PKCE, JWT, mTLS, Entra ID governance, and CA policies.
• Build guardrails using Azure Policy and Terraform; maintain secure-by-default infrastructure-as-code baselines.
• Operate Microsoft Defender for Cloud and drive secure-score improvements.
• Contribute to security governance: standards, control definitions, and audit evidence.

Skills

Azure security

Security engineering

Cloud security

Identity & access management

Terraform

Policy-as-code

Defender for Cloud

Root-cause analysis

Privileged access management

Tools

Terraform

Azure Policy

Microsoft Defender for Cloud

Job description

Pyramid Consulting, Inc is seeking a Senior Cloud Security Engineer to own remediation and hardening across our cloud environment. This is hands-on engineering, not advisory, focusing on durable fixes and reducing recurring findings.

You’ll manage the full lifecycle of security findings, implement guardrails with Terraform and Azure Policy, and strengthen authentication with Entra ID and Conditional Access. Experience with Defender for Cloud and CSPM is beneficial.