Onsite Azure Cloud Security Engineer — Zero-Trust & IAM

Fairweather, LLC; Arlington (VA); On-site; USD 140,000 - 170,000; Full time

Job summary

3B Staffing LLC in Arlington, VA seeks a Senior Azure Cloud Security Engineer to design and manage conditional access, PIM, and data protection strategies within a large enterprise. The role emphasizes Zero Trust architecture, Microsoft security tools, and automation using PowerShell or Python.

Candidates should have 7+ years of enterprise security experience, strong knowledge of Azure Entra, Intune, Purview, and JAMF for Apple endpoints, with hands-on editing of DLP and incident response

Qualifications

• 7+ years of enterprise cloud/infrastructure security experience.
• Deep knowledge of Microsoft security stack (Azure Entra, Intune, Purview) and Azure Conditional Access.
• Proficiency in PowerShell or Python for automation.
• Experience with Proofpoint TAP/TRAP for phishing and malware.
• Experience managing user lifecycle and provisioning/deprovisioning.
• Experience securing Apple endpoints in an Azure environment.

Responsibilities

• Design and maintain conditional access policies using device compliance, location, and risk signals.
• Implement PIM to enforce just-in-time and just-enough-administration for high-impact roles.
• Conduct access reviews and manage identity lifecycles.
• Configure MDM/MAM policies for Windows/macOS/iOS/Android.
• Oversee patching and automate OS/app patch cycles to reduce vulnerabilities.
• Build data classification with sensitivity labels across SharePoint/Teams/Exchange.
• Develop DLP policies to prevent data exfiltration.
• Manage Endpoint, Office 365, Identity, and Cloud suites to investigate and remediate threats.

Skills

Azure security

PIM/JIT access

PowerShell/Python

Zero Trust

Azure Entra/Intune

Purview DLP

SailPoint

Jamf Pro/Protect

Education

Bachelor's degree in Cybersecurity/CS/IS

Tools

Proofpoint TAP

TRAP

SailPoint

Azure Entra

Intune

Purview

Jamf Pro

Jamf Protect

Job description

3B Staffing LLC in Arlington, VA seeks a Senior Azure Cloud Security Engineer to design and manage conditional access, PIM, and data protection strategies within a large enterprise. The role emphasizes Zero Trust architecture, Microsoft security tools, and automation using PowerShell or Python.

Candidates should have 7+ years of enterprise security experience, strong knowledge of Azure Entra, Intune, Purview, and JAMF for Apple endpoints, with hands-on editing of DLP and incident response