Senior Cloud Security Engineer - IR, IAM & Compliance

Kuvare Holdings; California (MO); Hybrid; USD 120,000 - 165,000; Full time

Job summary

Kuvare Holdings is seeking a hands-on Security Administrator to join the Information Security team. The role focuses on engineering, hardening, and operating security controls across a hybrid environment spanning Microsoft Azure, Entra ID, and Microsoft 365.

You will directly contribute to incident response, identity hardening, cloud security engineering, and vulnerability remediation from day one. The ideal candidate will have deep technical security expertise, a DevSecOps mindset, and fluency

Qualifications

• 7+ years of Information Technology experience, with at least 3 years focused on cybersecurity.
• Minimum of 4 years on Microsoft technologies in hands-on administration, engineering, or operations capacity.
• Advanced cybersecurity certifications in good standing (e.g., CEH, OSCP, AZ-500, SC-300, SC-200, SC-100).
• Deep, hands-on knowledge of Microsoft services such as Defender (Cloud/Endpoint/XDR), Intune, Sentinel, and Entra ID, sufficient to operate and troubleshoot in a live environment on day one.
• Extensive experience operating hybrid cloud security architecture and controls.
• Strong background in security tooling administration, configuration, and tuning.
• Proven experience with endpoint security and modern device management (Intune).
• Advanced knowledge of network security concepts, including VPNs, firewalls, and SASE.
• Demonstrated experience leading security monitoring, incident response, and day-to-day security operations.

Responsibilities

• Operate, tune, and build detections in Microsoft Defender XDR and Sentinel.
• Design and automate response with SOAR playbooks (Logic Apps / Sentinel automation rules).
• Lead and coordinate hands-on incident response for data breaches, malware outbreaks, and identity compromises across cloud and on‑premises systems.
• Partner with Security and Risk leadership to translate policies into enforceable, technically implemented controls.
• Develop, test, and validate disaster recovery and resilience strategies from a security perspective.
• Engineer and administer Microsoft Entra ID: CA, PIM, Privileged Access Groups, and hybrid identity.
• Coordinate third-party penetration testing and remediate findings.
• Harden PaaS/IaaS workloads and secure-by-design cloud implementations (RBAC, private endpoints, Key Vault).
• Perform regular security assessments and vulnerability scans; drive remediation to closure.
• Build automation and IaC solutions (PowerShell, Python, Terraform) to deploy controls reliably.
• Provide security architecture guidance for cloud and infrastructure initiatives.
• Mentor IT team members on security best practices and secure engineering patterns.
• Partner with network, application, and database teams to implement secure solutions.

Skills

Cybersecurity

Security Operations

Incident Response

Cloud Security

DevSecOps

Hybrid Cloud

Automation

Tools

Microsoft Sentinel

Microsoft Defender XDR

Entra ID

Intune

PowerShell

Python

Terraform

Bicep/ARM

Job description

Kuvare Holdings is seeking a hands-on Security Administrator to join the Information Security team. The role focuses on engineering, hardening, and operating security controls across a hybrid environment spanning Microsoft Azure, Entra ID, and Microsoft 365.

You will directly contribute to incident response, identity hardening, cloud security engineering, and vulnerability remediation from day one. The ideal candidate will have deep technical security expertise, a DevSecOps mindset, and fluency