Senior Cloud Security Engineer – Azure & IAM Architect

Capgemini; New Jersey; On-site; USD 51,000 - 80,000; Full time

Job summary

Capgemini in Warren, NJ is seeking a Senior Cloud Security Engineer for a hands-on contract focused on hardening cloud security. You will own remediation across the environment, reduce recurring findings, and ensure controls are built in by design.

The role emphasizes root-cause analysis, policy-as-code, and secure baselines using Azure Policy, Terraform, and Defender for Cloud, with Azure Entra ID and modern authentication at the core.

Qualifications

• 9+ years in cloud security or security engineering with hands-on Azure experience.
• Strong Entra ID expertise: apps, permissions, consent, CA policies.
• Solid knowledge of modern auth: OIDC, OAuth2/PCKE, JWT, mTLS.
• Policy-as-code and automated guardrails with Terraform/Azure Policy.
• Experience with Defender for Cloud and CSPM practices.
• Proven root-causing and permanent remediation of findings; AI security awareness.

Responsibilities

• Own remediation lifecycle from triage to closure for security findings.
• Identify root causes and implement systemic fixes and guardrails.
• Track SLAs, report risk reduction and posture trends over time.
• Secure cloud and SaaS admin portals and manage privileged access.

Skills

Azure

Entra ID

OIDC

OAuth2 PKCE

JWT

mTLS

Defender for Cloud

Root-cause analysis

AI security

PowerShell

Tools

Terraform

Azure Policy

PowerShell

Python

SIEM/SOAR

Job description

Capgemini in Warren, NJ is seeking a Senior Cloud Security Engineer for a hands-on contract focused on hardening cloud security. You will own remediation across the environment, reduce recurring findings, and ensure controls are built in by design.

The role emphasizes root-cause analysis, policy-as-code, and secure baselines using Azure Policy, Terraform, and Defender for Cloud, with Azure Entra ID and modern authentication at the core.