Senior Cloud Security Engineer — Azure, IAM & XDR (Onsite FL)

Morgan & Morgan, P.A.; Tampa (FL); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Medical and dental insurance

401(k) plan

Paid time off and holidays

Job summary

Morgan & Morgan, P.A. is seeking a Senior Cloud Security Engineer to advance our Microsoft-centered security program. This hands-on role focuses on threat detection, tenant hardening, identity modernization, and security automation, with clear risk communication to technical teams and leadership.

You will secure Azure and AI workloads, govern data, and enforce least-privilege access across the firm, enabling secure collaboration for a large, multi-state practice.

Qualifications

• Hands-on expertise with Defender XDR and Microsoft Sentinel; proficient in KQL.
• M365 tenant hardening across Entra ID, Exchange, Teams, SharePoint.
• Azure infrastructure security and security automation (SOAR).
• Entra ID, Conditional Access, vulnerability assessment; Defender for Endpoint, Intune.
• Purview DSPM/IP/DLP/IRM/DLM and AI governance familiarity.

Responsibilities

• Detect, respond, and tune detections and response workflows using Defender XDR and Sentinel; author queries and rules.
• Lead tenant hardening across the E5 stack and maintain secure baselines.
• Build security automation (Logic Apps, PowerShell, Azure Functions) to reduce manual effort.
• Oversee vulnerability tracking and remediation with IT and infra teams.
• Govern Azure resources, data governance, DLP and insider risk; strengthen IAM practices.

Skills

Defender XDR

Microsoft Sentinel

KQL

M365 security

Entra ID

Conditional Access

PowerShell

Azure Functions

Education

Experience at a law firm or in a regulated environment

Tools

Azure

Intune

Purview

Defender for Endpoint

Microsoft Defender

Job description

Morgan & Morgan, P.A. is seeking a Senior Cloud Security Engineer to advance our Microsoft-centered security program. This hands-on role focuses on threat detection, tenant hardening, identity modernization, and security automation, with clear risk communication to technical teams and leadership.

You will secure Azure and AI workloads, govern data, and enforce least-privilege access across the firm, enabling secure collaboration for a large, multi-state practice.