Cloud Security Engineer: IAM, IR & DevSecOps

Kuvare; Cedar Rapids (IA); On-site; USD 100,000 - 125,000; Full time

Job summary

Kuvare is seeking a hands-on Security Administrator to join our Information Security team in Rosemont, IL. You will engineer, harden, and operate security controls across a hybrid environment including Azure, Entra ID, and Microsoft 365, focusing on incident response and secure‑by‑design practices.

The role requires deep technical expertise in security operations, cloud security, and DevSecOps with automation using PowerShell, Python, and IaC.

Qualifications

• 7+ years IT experience with at least 3 years in cybersecurity.
• 4+ years hands-on with Microsoft technologies in administration, engineering or ops.
• Advanced cybersecurity certifications (e.g., CEH, OSCP, AZ-500, SC-300/SC-200/SC-100).
• Deep knowledge of Defender, Intune, Sentinel, and Entra ID to operate in a live environment.
• Extensive experience with hybrid cloud security architecture and controls.
• Proven experience leading security monitoring and incident response.
• Strong tooling administration, configuration and tuning skills.

Responsibilities

• Operate, tune, and build detections in Microsoft Sentinel and Defender XDR to detect and respond to threats.
• Design and automate response with SOAR playbooks and automation rules.
• Lead incident response for data breaches, malware outbreaks, and identity compromises across cloud and on-premises systems.
• Translate security policies into enforceable technical controls with risk leadership.
• Develop, test, and validate disaster recovery and resilience strategies from a security perspective.
• Engineer and administer Entra ID and privileged access controls; conduct access reviews.

Skills

Cybersecurity

Microsoft technologies

Incident response

Cloud security

Security operations

Automation

PowerShell

Python

Tools

PowerShell

Python

Terraform

Bicep/ARM

Job description

Kuvare is seeking a hands-on Security Administrator to join our Information Security team in Rosemont, IL. You will engineer, harden, and operate security controls across a hybrid environment including Azure, Entra ID, and Microsoft 365, focusing on incident response and secure‑by‑design practices.

The role requires deep technical expertise in security operations, cloud security, and DevSecOps with automation using PowerShell, Python, and IaC.