Defender for Cloud Engineer

Role: Cloud Infra & Security Engineer

Location: NY, remote

Employment Type: Contract

Cloud & Server Infrastructure Microsoft Azure / Entra

Client is an Azure- and Microsoft Entra ID-centric organization. Entra ID serves as the identity platform underpinning authentication, access, and (per the MDM section below) device management.

Cloud-hosted servers/workloads in Microsoft Azure

Microsoft Entra ID as the core identity provider

On-Premises Infrastructure VMware ESX hypervisor environment 10 virtual servers running on-premises

A new Membership system is currently being built and hosted in AWS, running alongside the Azure/on-prem footprint. This represents Client's first significant AWS presence and will require the vendor to support a multi-cloud environment (Azure + AWS).

Legacy System IBM i An IBM i (AS/400) server remains in production and is in the process of being retired. Vendors should expect limited-duration support needs for this platform; timeline and replacement details to be confirmed during discovery.

Networking & Security Networking Meraki for networking (switching/wireless/SD-WAN, per standard Meraki deployment)

Cisco Firepower as the perimeter firewall

Remote Access Remote and hybrid staff connect to internal resources via Cisco AnyConnect client VPN through the existing Firepower firewall.

Security Tooling Microsoft Defender endpoint/threat protection Microsoft Sentinel SIEM / security monitoring Tenable vulnerability management KnowBe4 security awareness training / phishing simulation

End-User Computing Devices Windows laptops Mac laptops Mobile Device Management (MDM) Microsoft Intune Windows device management JAMF Mac device management

IT Service Management Client uses ServiceNow as its helpdesk/ITSM ticketing platform. Vendor support workflows are expected to integrate with or operate through ServiceNow.

Backup & Disaster Recovery Veeam is the primary backup solution in use.

Areas of MSP Support The following outlines the specific areas where Client is looking for MSP support as part of this engagement.

Cloud Architecture and Engineering (AWS and Azure) The initial focus of this workstream is infrastructure visibility and logging across both cloud platforms.

Work should proceed in the following priority order:

• Network inventory establish what is on the network and what is currently visible
• Logging ensure logging is configured across all assets
• Conditional access and policies more user-impacting, to be addressed after inventory and logging are in place.

Sentinel Coverage Gaps Identified The following gaps in Microsoft Sentinel coverage have been identified and should be addressed as part of this workstream:

• IoT devices (printers, HVAC, Pelotons) are not currently feeding into Sentinel
• Some endpoints are missing telemetry, likely due to firewall rules blocking Defender data
• The IBM i system is not contributing sufficient data/logs to Sentinel.

For applications and inquiries, contact:View email address on us.fitly.work