Microsoft Security, Identity & Cloud Security Engineer

About the Role

We seek a skilled Microsoft Security, Identity & Cloud Security Engineer to fortify enterprise identity protection, privileged access governance, and cloud security within Microsoft environments. This role demands a hands-on professional experienced in configuring, managing, and maintaining advanced security controls covering Microsoft Entra ID, Microsoft 365, Azure, and endpoints.

Key Responsibilities

• Set up and oversee Microsoft Entra ID, Active Directory, Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Conditional Access rules.
• Manage identity lifecycle processes for employees, contractors, service accounts, and applications.
• Handle privileged access including Microsoft Entra Privileged Identity Management (PIM), conduct access reviews, manage emergency access, and control administrative permissions.
• Deploy and sustain security measures across Microsoft 365, Defender, Azure workloads, and endpoint devices.
• Integrate security alerts and logs from identity, cloud, and endpoint sources into Microsoft Sentinel or similar Security Information and Event Management (SIEM) solutions.
• Perform security alert investigations, assist in incident response, containment, and evidence gathering.
• Detect and resolve security gaps, excessive access rights, and vulnerabilities related to identity.
• Automate security-related administrative and operational tasks through PowerShell and Microsoft Graph scripting.
• Facilitate secure onboarding of applications, secrets management, and identity integration especially for cloud and AI-related services.
• Maintain thorough documentation including security settings, procedures, and audit trails.
• Collaborate with infrastructure, applications, IT service teams, and cybersecurity leadership to implement and uphold approved security protocols.

Qualifications and Requirements

• A bachelor's degree in Computer Science, IT, Cybersecurity, Engineering or equivalent professional experience.
• At least five years of relevant experience in Microsoft infrastructure management, identity engineering, or cybersecurity roles.
• Proven proficiency with Microsoft Entra ID, Active Directory, Conditional Access, and MFA technologies.
• Experience in privileged access implementation and identity governance solutions.
• Demonstrated expertise securing Microsoft 365, Microsoft Defender, and Azure services.
• Competency in PowerShell scripting and Microsoft Graph for security task automation.
• Experience using Microsoft Sentinel or alternative SIEM platforms for log analysis and incident handling.
• Excellent skills in troubleshooting, documentation, change management, and communication.
• Relevant Microsoft certifications in security, identity, or Azure are advantageous.

Technical Skills

The ideal candidate will have a strong operational background in Microsoft Entra ID, Azure Active Directory, Active Directory, Conditional Access, MFA, Privileged Identity Management (PIM), identity and access management (IAM), Microsoft 365 security, Microsoft Defender, Azure security, PowerShell scripting, Microsoft Graph API, Microsoft Sentinel, SIEM tools, identity lifecycle management, and cloud security.

Ideal Candidate Profile

We are looking for an adept security engineer with direct, practical experience implementing and managing Microsoft identity and cloud security controls within enterprise settings. Candidates primarily experienced in general IT support, basic Microsoft 365 administration, or cybersecurity governance without deep engineering exposure are unlikely to match the requirements.