Cloud Security Engineer T&M

VALCE T@lent Solutions; United States; A distancia; USD 140.000 - 190.000; Jornada completa

Descripción de la vacante

VALCE T@lent Solutions is seeking a highly skilled Cloud Security Engineer with deep Azure experience to own security findings from triage to closure. You will root-cause issues and implement systemic fixes using policy-as-code and automated guardrails, while securing authentication flows like OIDC/OAuth 2.0/mTLS and hardening Entra ID.

You will design Conditional Access policies, enforce Azure Policy, and drive secure-score improvements via Defender for Cloud, including safeguarding

Formación

• 5+ years in cloud security or security engineering with deep Azure experience.
• Strong Microsoft Entra ID expertise.
• Solid working knowledge of modern authentication (OIDC, OAuth 2.0 / PKCE, JWT, and mTLS).
• Proficiency with Terraform and Azure Policy.
• Experience with Microsoft Defender for Cloud and CSPM.
• Demonstrable track record of root-causing and permanently closing security findings.
• Working understanding of AI and AI security considerations.

Responsabilidades

• Own the full lifecycle of security findings and recommendations through triage, remediation, verification, and closure.
• Root-cause recurring issues and implement systemic fixes using policy-as-code and automated guardrails.
• Secure and govern modern authentication flows including OIDC, OAuth 2.0, and mTLS.
• Administer and harden Microsoft Entra ID (Azure Entra) including app registrations and service principals.
• Design and implement Conditional Access policies.
• Build and enforce guardrails using Azure Policy and Terraform.
• Operate Microsoft Defender for Cloud to drive secure-score improvement.
• Secure cloud and SaaS administrative portals and strengthen privileged access via PIM.
• Apply security controls to AI workloads, services, and AI agents.

Conocimientos

Azure security

Policy-as-code

Terraform

OIDC

OAuth 2.0

JWT

mTLS

Defender for Cloud

CSPM

PIM / privileged access

Herramientas

Terraform

Azure Policy

Defender for Cloud

CSPM tooling

Descripción del empleo

Responsibilities

• Own the full lifecycle of security findings and recommendations through triage, remediation, verification, and closure
• Root-cause recurring issues and implement systemic fixes using policy-as-code and automated guardrails
• Secure and govern modern authentication flows including OIDC, OAuth 2.0, and mTLS
• Administer and harden Microsoft Entra ID (Azure Entra) including app registrations and service principals
• Design and implement Conditional Access policies
• Build and enforce guardrails using Azure Policy and Terraform
• Operate Microsoft Defender for Cloud to drive secure-score improvement
• Secure cloud and SaaS administrative portals and strengthen privileged access via PIM
• Apply security controls to AI workloads, services, and AI agents

Requirements

• 5+ years in cloud security or security engineering with deep Azure experience
• Strong Microsoft Entra ID expertise
• Solid working knowledge of modern authentication (OIDC, OAuth 2.0 / PKCE, JWT, and mTLS)
• Proficiency with Terraform and Azure Policy
• Experience with Microsoft Defender for Cloud and CSPM
• Demonstrable track record of root-causing and permanently closing security findings
• Working understanding of AI and AI security considerations

Preferred Qualifications

• Multi-cloud exposure (AWS, GCP)
• Relevant certifications (e.g., Microsoft SC-100, AZ-500, SC-300, or CISSP)
• Experience with CI/CD pipeline security and secrets management
• Scripting and automation skills (PowerShell, Python)
• Hands‑on experience securing LLM‑based or agentic systems in production