Defender for Cloud Engineer

Administer and harden Microsoft Entra ID: app registrations and Enterprise Application permissions, consent governance, service principals and managed identities, credential and secret hygiene, and least-privilege scoping.

Secure and govern modern authentication flows across the estate: OIDC, OAuth 2.0 with PKCE, JWT validation and handling, and mTLS.

Design, implement, and continuously tune Conditional Access policies.

MFA enforcement, Privileged Identity Management (PIM) / just-in-time elevation, role minimization, and break-glass procedures.

App registrations and Enterprise Application permissions, consent governance, service principals and managed identities, credential and secret hygiene, and least-privilege scoping.

Own the full lifecycle of security findings and recommendations through triage, remediation, verification, and closure.

Root-cause recurring issues and implement systemic fixes using policy-as-code, automated guardrails, and secure baselines.

Drive secure-score improvement, remediate recommendations, and manage cloud security posture (CSPM).

Build and enforce guardrails using Azure Policy; maintain secure-by-default baselines and detect or remediate configuration drift.

Contribute to standards, control definitions, exception handling, and audit evidence.

Secure all cloud and SaaS administrative portals, including Azure, Microsoft 365 admin, identity providers, and additional cloud platforms in use.

Build and enforce guardrails using Terraform; maintain secure-by-default infrastructure-as-code baselines and detect or remediate configuration drift.

Apply security controls to AI workloads, services, and AI agents.

Agent and workload identities, tool and permission scoping, data-exposure and prompt-injection risk, and emerging AI security best practices.

For applications and inquiries, contact:View email address on us.fitly.work