Senior Cloud Security Engineer - Azure & Zero Trust

monexusa; Washington (District of Columbia); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Commuter benefits

401(k) with employer match

16 days PTO/Disability benefits

Paid parental leave

Catered lunches

Annual company events

Job summary

Monex invites a Senior Cyber Security Engineer to secure our cloud and hybrid infrastructure across Azure, Microsoft 365, and on-premises environments. You will be the technical authority for cloud security, collaborating with SOC, Infrastructure, and IT Operations across our global offices.

You will design and implement secure identity, device, and network controls with Defender suite, Intune, Entra ID, Azure Policy, and RBAC, while mentoring teams and guiding risk-based security governance in

Qualifications

• 7–12 years of experience in Endpoint Engineering, Infrastructure Security, Cloud Security, or related role.
• Hands-on with Microsoft Intune, Microsoft 365, Azure, and Entra ID.
• Strong experience with Defender technologies, Defender for Cloud/Endpoint/Identity/Office, and Defender XDR.
• Experience implementing Conditional Access, Zero Trust, Windows Hello for Business, BitLocker, and identity security controls.
• Knowledge of Azure security services, Azure Policy, RBAC, PIM, and cloud governance best practices.
• Experience with Terraform and/or Bicep, PowerShell and/or Python automation, and DevSecOps methods.
• Understanding of Windows 11 security, vulnerability management, patching, and enterprise mobility management.
• Experience supporting security/compliance initiatives in regulated environments.
• Excellent communication across infrastructure, security, compliance, and business teams.

Responsibilities

• Design, implement, and maintain secure cloud, endpoint, and identity management solutions across Azure, Microsoft 365, Intune, and Entra ID environments.
• Manage and optimize the Microsoft security stack including Defender suites, Defender XDR, and Sentinel.
• Deploy and manage devices through Intune with compliance policies, security baselines, encryption, and device lifecycle management.
• Support rollout and management of Windows Hello for Business, Conditional Access, MFA, and Zero Trust controls.
• Implement Azure security governance including Azure Policy, RBAC, PIM, identity governance, and compliance frameworks.
• Manage cloud and network security controls: Azure Firewall, NSGs, Private Endpoints, VPN, segmentation, secure access.
• Monitor and improve security posture with Secure Score, vulnerability management, and compliance reporting.
• Collaborate with Security Operations to investigate incidents, tune detections, and respond to alerts.
• Automate security, compliance, and deployment with IaC and CI/CD pipelines.
• Support audits, risk assessments, remediation, and regulatory requirements in a regulated environment.

Skills

Cloud security

Endpoint security

Identity governance

Automation

Vulnerability management

DevSecOps

Regulatory compliance

Security operations

Tools

Microsoft Intune

Microsoft 365

Azure

Entra ID

Defender for Cloud

Defender for Endpoint

Defender for Identity

Defender for Office 365

Microsoft Sentinel

PowerShell

Python

Terraform

Bicep

Job description

Monex invites a Senior Cyber Security Engineer to secure our cloud and hybrid infrastructure across Azure, Microsoft 365, and on-premises environments. You will be the technical authority for cloud security, collaborating with SOC, Infrastructure, and IT Operations across our global offices.

You will design and implement secure identity, device, and network controls with Defender suite, Intune, Entra ID, Azure Policy, and RBAC, while mentoring teams and guiding risk-based security governance in