Azure Cloud Security Engineer - Remediation & Guardrails

Quantum Technologies. LLC; Chicago (IL); Presencial; USD 140.000 - 190.000; Jornada completa

Descripción de la vacante

Quantum Technologies. LLC in Chicago is hiring a Senior Azure Cloud Security Engineer to own remediation and hardening across our cloud environment.

This hands-on role turns security findings into durable fixes and ensures recurring issues do not reappear. You will own the full lifecycle of findings from triage to closure, implement policy-as-code and guardrails, and strengthen identity, authentication, and privileged access controls.

Formación

• 5+ years in Cloud Security or Security engineering with hands-on Azure experience.
• Strong Microsoft Entra ID expertise: app registrations, Enterprise Apps, permissions, and Conditional Access.
• Solid knowledge of modern authentication: OIDC, OAuth 2.0 / PKCE, JWT, and mTLS.
• Proficiency with Terraform and Azure Policy for policy-as-code and automated guardrails.
• Experience with Microsoft Defender for Cloud and CSPM.
• Proven track record of root-causing and permanently closing security findings.

Responsabilidades

• Own the full lifecycle of security findings from triage to closure.
• Develop systemic fixes using policy-as-code and guardrails.
• Secure admin portals and strengthen privileged access controls.
• Improve cloud security posture and track risk trends.
• Apply security controls to AI workloads and related platforms.

Conocimientos

Azure cloud security

Microsoft Entra ID

OAuth 2.0 / PKCE

JWT / mTLS

Terraform

CI/CD security

Herramientas

Terraform

Azure Policy

Descripción del empleo

Quantum Technologies. LLC in Chicago is hiring a Senior Azure Cloud Security Engineer to own remediation and hardening across our cloud environment.

This hands-on role turns security findings into durable fixes and ensures recurring issues do not reappear. You will own the full lifecycle of findings from triage to closure, implement policy-as-code and guardrails, and strengthen identity, authentication, and privileged access controls.