Cloud Security Engineer

patchmypc; United States; Remote; USD 110,000 - 145,000; Full time

Benefits offered by this job

Fully remote position

Health benefits

401(k) match

Internet stipend

Paid time off

Job summary

patchmypc is seeking a fully remote Cloud Security Engineer to design, build, and operate security controls across Microsoft 365 and Azure environments. The role blends hands-on security engineering with proactive threat hunting and advisory work for internal teams and external clients.

You will deploy, configure, and maintain Microsoft cloud security and compliance technologies, refine security controls, and translate risk into clear leadership reports.

Qualifications

• Hands-on experience engineering security controls within Microsoft 365 and Azure environments.
• Strong working knowledge of Azure monitoring, identity governance, and data protection tooling.
• Demonstrated ability to produce professional reports and executive-level summaries.

Responsibilities

• Deploy, configure, and maintain Microsoft cloud security and compliance technologies, including Purview, Defender for Cloud, Azure Log Analytics, Entra ID, Privileged Identity Management, and Identity Governance.
• Engineer and continuously refine technical security controls, automating recurring tasks to reduce manual effort and configuration drift.
• Build and maintain Data Loss Prevention policies and monitor AI technology usage, implementing governance guardrails to mitigate data exposure and leakage.
• Apply a red-team mindset to identify weaknesses through security reviews, exposure assessments, and control-effectiveness evaluations.
• Translate technical risk into clear written reports and executive summaries for leadership, and act as a trusted security advisor on customer calls.
• Partner with internal teams to ensure sensitive data is adequately protected across the organization.

Skills

MS 365 security engineering

Azure security

Threat hunting

Executive reporting

Tools

Purview

Defender for Cloud

Azure Log Analytics

Entra ID

PIM

Identity Governance

Data Loss Prevention

Job description

Role overview

A fully remote engineering role focused on designing, building, and operating cloud security controls across a Microsoft 365 and Azure environment. The position blends hands-on security engineering with proactive threat hunting and customer-facing advisory work, helping both internal teams and external clients measurably improve their security posture.

Responsibilities

• Deploy, configure, and maintain Microsoft cloud security and compliance technologies, including Purview, Defender for Cloud, Azure Log Analytics, Entra ID, Privileged Identity Management, and Identity Governance.
• Engineer and continuously refine technical security controls, automating recurring tasks to reduce manual effort and configuration drift.
• Build and maintain Data Loss Prevention policies and monitor AI technology usage, implementing governance guardrails to mitigate data exposure and leakage.
• Apply a red-team mindset to identify weaknesses through security reviews, exposure assessments, and control-effectiveness evaluations.
• Translate technical risk into clear written reports and executive summaries for leadership, and act as a trusted security advisor on customer calls.
• Partner with internal teams to ensure sensitive data is adequately protected across the organization.

Requirements

• Hands-on experience engineering security controls within Microsoft 365 and Azure environments.
• Strong working knowledge of Azure monitoring, identity governance, and data protection tooling.
• Demonstrated ability to produce professional reports and executive-level summaries.
• Strong presentation and customer-facing communication skills.
• Self-directed work style suited to a remote setting with distributed teams.

Nice to have

• Microsoft security certifications such as SC-200, SC-300, SC-400, AZ-500, or equivalent.
• Familiarity with compliance frameworks including ISO 27001, SOC 2, or GDPR.
• Experience with governance, risk, and compliance (GRC) programmes.
• Exposure to AI governance or responsible-AI initiatives.
• Background as a consultant in endpoint management platforms such as Configuration Manager or Intune.
• Experience leading customer-focused workshops.

Benefits and work setup

• Competitive base salary of $110,000 to $145,000 depending on experience and location.
• 401(k) match of 200% on the first 5% of salary contributed, for a potential total match of 10%.
• Medical, dental, and vision coverage with 99% of premiums covered for team members and dependents.
• Flexible spending account (FSA) and health savings account (HSA) options.
• Fertility benefits, parental leave, and paid time off.
• Volunteer leave and charitable donation matching.
• Tuition reimbursement, gym membership reimbursement, and an internet stipend.
• Pet insurance.
• Fully remote position; candidates must reside in one of the eligible U.S. states at the time of hire.