Azure Cloud Security Engineer: Entra ID & Guardrails

Experis Technology Group; New Jersey; On-site; USD 69,000 - 76,000; Full time

Benefits offered by this job

Medical and Prescription Drug Plans

Dental Plan

Vision Plan

Health Savings Account

401(k) with Match

Job summary

ManpowerGroup's Experis is seeking a Cloud Security Engineer to join our security engineering team in Warren, NJ on-site. The role focuses on remediation and hardening across Azure, with emphasis on Entra ID, policy-as-code, and automated guardrails to reduce recurring findings.

You will own the full lifecycle of security findings, implement systemic fixes, and report on cloud posture trends. This hands-on position offers strong growth in cloud security leadership.

Qualifications

• 9+ years in cloud security or security engineering with deep Azure experience.
• Strong Entra ID expertise, including app registrations, Enterprise Application permissions, consent governance, service principals and managed identities, and least-privilege scoping.
• Solid working knowledge of OIDC, OAuth 2.0 / PKCE, JWT, and mTLS.
• Proficiency with Terraform and Azure Policy for policy-as-code and automated guardrails.
• Experience with Defender for Cloud and cloud security posture management, including a demonstrable track record of permanently closing security findings.

Responsibilities

• Own the full lifecycle of security findings and recommendations—triage, remediation, verification, and closure—whether they originate from the security team, Defender for Cloud, or other tooling.
• Root‑cause recurring issues and implement systemic fixes (e.g., policy‑as‑code, automated guardrails, secure baselines) to prevent the same findings from reappearing quarter after quarter.
• Track remediation SLAs and report on risk reduction and cloud posture trends over time, ensuring measurable improvements in security outcomes.
• Secure and govern modern authentication flows across the estate, including OIDC, OAuth 2.0 with PKCE, JWT validation/handling, and mTLS.
• Build and enforce cloud security guardrails using Azure Policy and Terraform, including detection and remediation of configuration drift.

Skills

Azure

Microsoft Entra ID

OIDC

OAuth 2.0

JWT

mTLS

Terraform

Azure Policy

Defender for Cloud

Tools

Terraform

Azure Policy

Defender for Cloud

Job description

ManpowerGroup's Experis is seeking a Cloud Security Engineer to join our security engineering team in Warren, NJ on-site. The role focuses on remediation and hardening across Azure, with emphasis on Entra ID, policy-as-code, and automated guardrails to reduce recurring findings.

You will own the full lifecycle of security findings, implement systemic fixes, and report on cloud posture trends. This hands-on position offers strong growth in cloud security leadership.