Senior Cloud Security Engineer

Location: Warren NJ

Job Description:

• Bachelor's degree or Master's Degree in Computer science, or a related field, with minimum 12+ Years of relevant experience

• Microsoft Entra ID: Administer and harden Microsoft Entra ID: app registrations and Enterprise Application permissions, consent governance, service principals and managed identities, credential and secret hygiene, and least-privilege scoping.
• Privileged Access Security: MFA enforcement, Privileged Identity Management (PIM) / just-in-time elevation, role minimization, and break-glass procedures.

Cloud Security:

• Security Findings Remediation: Own the full lifecycle of security findings and recommendations through triage, remediation, verification, and closure.
• Recurrence Prevention: Root-cause recurring issues and implement systemic fixes using policy-as-code, automated guardrails, and secure baselines.
• Microsoft Defender for Cloud: Drive secure-score improvement, remediate recommendations, and manage cloud security posture (CSPM).
• Security Governance: Contribute to standards, control definitions, exception handling, and audit evidence.
• Cloud & SaaS Admin Portal Security: Secure all cloud and SaaS administrative portals, including Azure, Microsoft 365 admin, identity providers, and additional cloud platforms in use.

AI Security:

• AI Workloads, Services & Agents: Apply security controls to AI workloads, services, and AI agents.
• AI Identities, Permissions & Risk: Agent and workload identities, tool and permission scoping, data-exposure and prompt-injection risk, and emerging AI security best practices.

Good to Have:

• Terraform & Secure IaC Baselines: Build and enforce guardrails using Terraform; maintain secure-by-default infrastructure-as-code baselines and detect or remediate configuration drift.
• Azure Policy: Build and enforce guardrails using Azure Policy; maintain secure-by-default baselines and detect or remediate configuration drift.
• Modern Authentication: Secure and govern modern authentication flows across the estate: OIDC, OAuth 2.0 with PKCE, JWT validation and handling, and mTLS.
• Conditional Access: Design, implement, and continuously tune Conditional Access policies.
• App Registrations & Enterprise Applications: App registrations and Enterprise Application permissions, consent governance, service principals and managed identities, credential and secret hygiene, and least-privilege scoping.
• Strong analytical and problem-solving skills, with a proven track record of identifying and resolving complex billing issues.
• Excellent communication and presentation skills, with the ability to explain complex technical concepts to both technical and non-technical audiences.