Cloud Security Engineer

Zeektek; Sacramento (CA); On-site; USD 150,000 - 190,000; Full time

Job summary

Zeektek is seeking an experienced Cloud Security Engineer to design, implement, and manage security controls across Azure environments. You will drive security posture, embed protections in architecture, and support cloud migrations with a security-first approach.

The role requires hands-on Azure security expertise, strong IAM skills (Entra ID, RBAC, Conditional Access), and experience with Microsoft Defender for Cloud and Intune for device compliance.

Qualifications

• 7+ years of information security or systems engineering with hands-on Azure security experience.
• Experience securing Azure cloud environments and enterprise infrastructure.
• Strong knowledge of identity, access management, and data protection.

Responsibilities

• Design, implement, and manage security controls across Azure by embedding security into architecture and deployment.
• Monitor posture with Defender for Cloud/Azure Security Center and maintain secure baselines.
• Lead threat modeling, security reviews, and incident response activities.

Skills

Cloud security architecture

Entra ID

Intune

Azure Defender

RBAC

Conditional Access

Incident response

Threat detection

PowerShell scripting

Automation workflows

Vulnerability management

Cloud migration experience

Education

Bachelor's degree in CS/IS

Tools

Microsoft Defender for Cloud

Azure Security Center

Intune

Job description

• Designs, implements, and manages security controls across the organization's Azure cloud environment, ensuring secure configurations, access controls, and compliance with company standards.
• Supports the organization's transition from on-prem infrastructure to Azure by embedding security into architecture, migration, and deployment processes.
• Establishes and maintains cloud security baselines, guardrails, and configuration standards (identity, networking, and data protection).
• Configures and manages Microsoft Defender for Cloud and Azure Security Center to monitor posture, secure score, and alerts.
• Acts as the organization's cloud security SME, supporting IT and engineering teams through design reviews, threat modeling, and security validation.
• Partners with infrastructure, application, and data teams to integrate security into system design and project delivery.
• Identifies and remediates security gaps in Azure and hybrid architectures.
• Impl implements and manages secure identity and access controls using Entra ID and related technologies (RBAC, Conditional Access, least privilege principles).
• Supports the design and implementation of identity strategies across cloud and on-prem environments.
• Manages and enhances device compliance and endpoint security using Microsoft Intune, including compliance policies and conditional access enforcement.
• Develops and enhances threat detection capabilities across Azure and enterprise environments using Microsoft-native telemetry.
• Participates in incident response activities, including investigation, containment, and post-incident reviews.
• Builds and maintains automation workflows for security monitoring, alerting, and response.
• Improves security processes through scripting and integration with existing tools and platforms.
• Develops and tracks KPIs and metrics to measure cloud security posture and program effectiveness.
• Supports security audits and helps ensure compliance with applicable regulatory frameworks.
• Develops and maintains cloud-specific security standards, procedures, and documentation.
• Contributes to vulnerability management and risk remediation efforts across cloud and enterprise systems.
• Works closely with IT, security, and business stakeholders to align security initiatives with organizational goals.
• Serves as the organization's primary point of contact for cloud security given the company's size, including managing relevant vendor relationships (a plus, not required).
• Provides guidance on emerging cloud threats, risks, and best practices.
• Supports disaster recovery and business continuity planning for cloud systems.
• Other duties as assigned.

Qualifications

• 7+ years of progressive experience in information security or systems engineering, with hands-on experience securing Azure cloud environments and enterprise infrastructure.
• Strong technical experience with Entra ID, Intune, and Microsoft Defender for Cloud / Azure Security Center.
• Strong technical experience with cloud security controls, identity and access management (RBAC, Conditional Access), endpoint security, and device compliance.
• Proven ability to collaborate across IT operations, engineering, and businesses teams to embed security into system design, implementation, and ongoing operations.
• Experience with vulnerability management, incident response, and threat detection.
• Strong analytical and problem-solving skills with the ability to translate risk into actionable recommendations.
• Experience supporting cloud migrations or transformation initiatives.
• Experience with scripting or automation (PowerShell preferred).
• Leadership experience or vendor relationship management is a plus, given this role acts as the primary cloud security resource for the company.