Role: Senior Cloud Security Engineer
Location: Warren NJ (100% Onsite)
Duration:6-12 months
Category Skill Description from the JD Customer Priority
Identity & Access Management Microsoft Entra ID Administer and harden Microsoft Entra ID: app registrations and Enterprise Application permissions, consent governance, service principals and managed identities, credential and secret hygiene, and least-privilege scoping. Mandatory
Modern Authentication Secure and govern modern authentication flows across the estate: OIDC, OAuth 2.0 with PKCE, JWT validation and handling, and mTLS. Good to Have
Conditional Access Design, implement, and continuously tune Conditional Access policies. Good to Have
Privileged Access Security MFA enforcement, Privileged Identity Management (PIM) / just-in-time elevation, role minimization, and break-glass procedures. Mandatory
App Registrations & Enterprise Applications App registrations and Enterprise Application permissions, consent governance, service principals and managed identities, credential and secret hygiene, and least-privilege scoping. Good to Have
Cloud Security Security Findings Remediation Own the full lifecycle of security findings and recommendations through triage, remediation, verification, and closure. Mandatory
Recurrence Prevention Root-cause recurring issues and implement systemic fixes using policy-as-code, automated guardrails, and secure baselines. Mandatory
Microsoft Defender for Cloud Drive secure-score improvement, remediate recommendations, and manage cloud security posture (CSPM). Mandatory
Azure Policy Build and enforce guardrails using Azure Policy; maintain secure-by-default baselines and detect or remediate configuration drift. Good to Have
Security Governance Contribute to standards, control definitions, exception handling, and audit evidence. Mandatory
Cloud & SaaS Admin Portal Security Secure all cloud and SaaS administrative portals, including Azure, Microsoft 365 admin, identity providers, and additional cloud platforms in use. Mandatory
Terraform for IaC Terraform & Secure IaC Baselines Build and enforce guardrails using Terraform; maintain secure-by-default infrastructure-as-code baselines and detect or remediate configuration drift. Optional
AI Security AI Workloads, Services & Agents Apply security controls to AI workloads, services, and AI agents. Mandatory
AI Identities, Permissions & Risk Agent and workload identities, tool and permission scoping, data-exposure and prompt-injection risk, and emerging AI security best practices.
Never miss an opportunity! Create an alert based on the job you applied for.
