Azure Security Engineer Permanent Job Sacramento, Ca. Entra/Intune/Defender

Zeektek; Sacramento (CA); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Zeektek in Sacramento, CA, seeks an experienced Cloud Security Engineer to design and manage Azure security controls, ensuring secure configurations and compliant access.

You will drive migration security, establish baselines, monitor posture with Defender for Cloud, and guide IT/engineering in threat modeling and incident response across hybrid environments.

Qualifications

• 7+ years of progressive experience in information security or systems engineering, with hands-on Azure security.
• Strong experience with Entra ID, Intune, Defender for Cloud and Azure Security Center.
• Deep knowledge of cloud security controls, IAM, endpoint security, and device compliance.
• Proven ability to collaborate across IT, engineering and business teams to embed security into design.
• Experience with vulnerability management, incident response, and threat detection.
• Strong analytical and problem-solving skills; able to translate risk into actions.
• Experience supporting cloud migrations or transformation initiatives; scripting/automation preferred.
• Leadership experience or vendor relationship management is a plus.

Responsibilities

• Designs, implements, and manages security controls across Azure cloud environments.
• Supports transition from on-prem to Azure by embedding security into architecture and deployment.
• Establishes cloud security baselines, guardrails, and configuration standards (identity, networking, data).
• Configures Microsoft Defender for Cloud and Azure Security Center to monitor posture and alerts.
• Acts as cloud security SME, guiding design reviews, threat modeling, and security validation.
• Partners with IT, engineering, and data teams to integrate security into system design.
• Identifies and remediates security gaps in Azure and hybrid architectures.
• Implements and manages secure identity/access using Entra ID (RBAC, CA, least privilege).
• Supports identity strategy across cloud and on-prem environments.
• Manages device compliance and endpoint security via Microsoft Intune, including CA enforcement.
• Develops threat detection capabilities using Microsoft telemetry; participates in incident response.
• Builds automation workflows for monitoring, alerting, and response; enhances security processes.

Skills

Azure security

Identity & access mgmt

Threat modeling

Incident response

Security architecture

Automation scripting

Security governance

Tools

Entra ID

Intune

Defender for Cloud / Azure Security Center

PowerShell

RBAC / Conditional Access

Job description

This is a Hybrid role 3 days a week on site in Sacramento 2 days remote - Permanent Job

• Designs, implements, and manages security controls across the organization's Azure cloud environment, ensuring secure configurations, access controls, and compliance with company standards.
• Supports the organization's transition from on-prem infrastructure to Azure by embedding security into architecture, migration, and deployment processes.
• Establishes and maintains cloud security baselines, guardrails, and configuration standards (identity, networking, and data protection).
• Configures and manages Microsoft Defender for Cloud and Azure Security Center to monitor posture, secure score, and alerts.
• Acts as the organization's cloud security SME, supporting IT and engineering teams through design reviews, threat modeling, and security validation.
• Partners with infrastructure, application, and data teams to integrate security into system design and project delivery.
• Identifies and remediates security gaps in Azure and hybrid architectures.
• Implements and manages secure identity and access controls using Entra ID and related technologies (RBAC, Conditional Access, least privilege principles).
• Supports the design and implementation of identity strategies across cloud and on-prem environments.
• Manages and enhances device compliance and endpoint security using Microsoft Intune, including compliance policies and conditional access enforcement.
• Develops and enhances threat detection capabilities across Azure and enterprise environments using Microsoft-native telemetry.
• Participates in incident response activities, including investigation, containment, and post-incident reviews.
• Builds and maintains automation workflows for security monitoring, alerting, and response.
• Improves security processes through scripting and integration with existing tools and platforms.
• Develops and tracks KPIs and metrics to measure cloud security posture and program effectiveness.
• Supports security audits and helps ensure compliance with applicable regulatory frameworks.
• Develops and maintains cloud-specific security standards, procedures, and documentation.
• Contributes to vulnerability management and risk remediation efforts across cloud and enterprise systems.
• Works closely with IT, security, and business stakeholders to align security initiatives with organizational goals.
• Serves as the organization's primary point of contact for cloud security given the company's size, including managing relevant vendor relationships (a plus, not required).
• Provides guidance on emerging cloud threats, risks, and best practices.
• Supports disaster recovery and business continuity planning for cloud systems.
• Other duties as assigned.

Qualifications

• 7+ years of progressive experience in information security or systems engineering, with hands-on experience securing Azure cloud environments and enterprise infrastructure.
• Strong technical experience with Entra ID, Intune, and Microsoft Defender for Cloud / Azure Security Center.
• Strong technical experience with cloud security controls, identity and access management (RBAC, Conditional Access), endpoint security, and device compliance.
• Proven ability to collaborate across IT operations, engineering, and business teams to embed security into system design, implementation, and ongoing operations.
• Experience with vulnerability management, incident response, and threat detection.
• Strong analytical and problem-solving skills with the ability to translate risk into actionable recommendations.
• Experience supporting cloud migrations or transformation initiatives.
• Experience with scripting or automation (PowerShell preferred).
• Leadership experience or vendor relationship management is a plus, given this role acts as the primary cloud security resource for the company.