Azure Cloud Security Engineer - Guardrails & AI Security

VALCE T@lent Solutions; United States; Remote; USD 140,000 - 190,000; Full time

Job summary

VALCE T@lent Solutions is seeking a highly skilled Cloud Security Engineer with deep Azure experience to own security findings from triage to closure. You will root-cause issues and implement systemic fixes using policy-as-code and automated guardrails, while securing authentication flows like OIDC/OAuth 2.0/mTLS and hardening Entra ID.

You will design Conditional Access policies, enforce Azure Policy, and drive secure-score improvements via Defender for Cloud, including safeguarding

Qualifications

• 5+ years in cloud security or security engineering with deep Azure experience.
• Strong Microsoft Entra ID expertise.
• Solid working knowledge of modern authentication (OIDC, OAuth 2.0 / PKCE, JWT, and mTLS).
• Proficiency with Terraform and Azure Policy.
• Experience with Microsoft Defender for Cloud and CSPM.
• Demonstrable track record of root-causing and permanently closing security findings.
• Working understanding of AI and AI security considerations.

Responsibilities

• Own the full lifecycle of security findings and recommendations through triage, remediation, verification, and closure.
• Root-cause recurring issues and implement systemic fixes using policy-as-code and automated guardrails.
• Secure and govern modern authentication flows including OIDC, OAuth 2.0, and mTLS.
• Administer and harden Microsoft Entra ID (Azure Entra) including app registrations and service principals.
• Design and implement Conditional Access policies.
• Build and enforce guardrails using Azure Policy and Terraform.
• Operate Microsoft Defender for Cloud to drive secure-score improvement.
• Secure cloud and SaaS administrative portals and strengthen privileged access via PIM.
• Apply security controls to AI workloads, services, and AI agents.

Skills

Azure security

Policy-as-code

Terraform

OIDC

OAuth 2.0

JWT

mTLS

Defender for Cloud

CSPM

PIM / privileged access

Tools

Terraform

Azure Policy

Defender for Cloud

CSPM tooling

Job description

VALCE T@lent Solutions is seeking a highly skilled Cloud Security Engineer with deep Azure experience to own security findings from triage to closure. You will root-cause issues and implement systemic fixes using policy-as-code and automated guardrails, while securing authentication flows like OIDC/OAuth 2.0/mTLS and hardening Entra ID.

You will design Conditional Access policies, enforce Azure Policy, and drive secure-score improvements via Defender for Cloud, including safeguarding