Azure Cloud Security Engineer: Remediation & Guardrails

Machine Learning Technologies, LLC; Chicago (IL); On-site; USD 140,000 - 180,000; Full time

Job summary

Machine Learning Technologies, LLC in Chicago is seeking a Senior Azure Cloud Security Engineer to own remediation and hardening across our cloud environment. This hands-on role turns security recommendations into durable fixes and ensures the same findings do not recur.

You will drive identity security, access controls, policy-as-code, and cloud posture through Azure Policy, Terraform, and Defender for Cloud, while strengthening admin portals and enforcing MFA and least privilege.

Qualifications

• 5+ years in Cloud Security or security engineering with Azure focus.
• Deep Microsoft Entra ID expertise: app registrations, permissions, and CA.
• Solid knowledge of modern authentication: OIDC, OAuth 2.0, JWT, mTLS.
• Proficiency with Terraform and Azure Policy for policy-as-code.
• Experience with Defender for Cloud and CSPM.

Responsibilities

• Own the full lifecycle of security findings from triage to closure.
• Implement systemic fixes and guardrails to prevent recurring issues.
• Track remediation SLAs and report risk reduction trends.
• Secure authentication flows and govern Entra ID across the estate.
• Design and tune Conditional Access policies.
• Build guardrails with Azure Policy and Terraform and detect drift.
• Operate Defender for Cloud and drive secure-score improvements.
• Strengthen admin portals with MFA, PIM, and least-privilege access.

Skills

Azure security

Entra ID

OIDC/OAuth PKCE

Terraform

Azure Policy

Defender for Cloud

Root-cause analysis

AI security

PIM

Tools

Terraform

Azure Policy

Defender for Cloud

PowerShell

Python

Job description

Machine Learning Technologies, LLC in Chicago is seeking a Senior Azure Cloud Security Engineer to own remediation and hardening across our cloud environment. This hands-on role turns security recommendations into durable fixes and ensures the same findings do not recur.

You will drive identity security, access controls, policy-as-code, and cloud posture through Azure Policy, Terraform, and Defender for Cloud, while strengthening admin portals and enforcing MFA and least privilege.