Senior Azure Cloud Security Engineer: Remediation & Guardrails

Cloud Analytics Technologies, LLC; Chicago (IL); On-site; USD 150,000 - 190,000; Full time

Job summary

Cloud Analytics Technologies, LLC is seeking a Senior Azure Cloud Security Engineer to own remediation and hardening across our Azure environments. You will turn security findings into durable fixes, reduce recurring issues, and design security into infrastructure by design.

The role is hands-on, focusing on implementation, automation, and governance to shrink the backlog of findings and raise overall security posture. A strong Azure background and Entra ID expertise are required.

Qualifications

• 5+ years in Cloud Security or security engineering, with deep Azure experience.
• Strong hands-on Microsoft Entra ID expertise: app registrations, permissions, and CA.
• Solid knowledge of modern authentication: OIDC, OAuth 2.0 / PKCE, JWT, and mTLS.
• Proficiency with Terraform and Azure Policy for policy-as-code and automated guardrails.
• Experience with Microsoft Defender for Cloud and cloud security posture management.
• A demonstrable track record of root-causing and permanently closing security findings.

Responsibilities

• Own the full lifecycle of security findings and recommendations, triage/remediation/verification/closure.
• Root-cause recurring issues and implement systemic fixes (policy-as-code, automated guardrails, secure baselines).
• Track remediation SLAs and report on risk reduction and posture trends over time.
• Secure and govern modern authentication flows: OIDC, OAuth 2.0 with PKCE, JWT, and mTLS.
• Administer and harden Microsoft Entra ID: app registrations, permissions, consent governance, service principals, secret hygiene, least-privilege.
• Design, implement and tune Conditional Access policies.
• Build guardrails using Azure Policy and Terraform; maintain secure-by-default IaC baselines and detect drift.
• Operate Defender for Cloud, drive secure-score improvement, remediate recommendations, manage CSPM.
• Contribute to security governance: standards, control definitions, exception handling, and audit evidence.
• Secure cloud/SaaS admin portals; strengthen privileged access with MFA, PIM, just-in-time elevation.

Skills

Azure security

Microsoft Entra ID

OIDC / OAuth 2.0 / PKCE

JWT / mTLS

Terraform

Azure Policy

Defender for Cloud

Root-cause analysis

AI security

Privileged Access Management (PIM)

Tools

Terraform

Azure Policy

Defender for Cloud

Job description

Cloud Analytics Technologies, LLC is seeking a Senior Azure Cloud Security Engineer to own remediation and hardening across our Azure environments. You will turn security findings into durable fixes, reduce recurring issues, and design security into infrastructure by design.

The role is hands-on, focusing on implementation, automation, and governance to shrink the backlog of findings and raise overall security posture. A strong Azure background and Entra ID expertise are required.