Defender for Cloud Engineer

The technical anchor of the engagement. Builds and validates the API integrations between Armis and Clients systems of record, tunes correlation and de-duplication, and produces the reports, assessment, and runbooks that evidence the program outcomes.

• Support Armis in standing up the platform in the dedicated tenant with CMK; validate reachability and data flow.
• Establish and validate baseline integrations (DNS/Infoblox, Cisco ISE, Remedy, Forescout, QRadar) and expand to up to ~70 sources.
• Correlate and de-duplicate asset data across sources; tune the platform and build required reports and dashboards.
• Map assets to authoritative systems to identify "known knowns"; produce the Initial Attack Surface Assessment.
• Develop operational runbooks, the CMDB change workflow, and recurring reporting for Vulnerability and Endpoint Security teams.
• Lead knowledge transfer and technical handover at program close.

5+ years security/network engineering with hands-on asset visibility, CAASM, or NAC platforms. Strong API integration skills across IAM, EDR, VM, DNS/IPAM, cloud, and ITSM/CMDB systems (e.g., AD, Remedy/ServiceNow, Infoblox, Cisco ISE, Panorama, Tenable, Defender). Data correlation, de-duplication, and reporting/dashboarding proficiency. Ability to translate raw asset data into business-context identity and defensible findings.

Armis, Active Directory, Remedy/ServiceNow, Infoblox, Cisco ISE, Forescout, QRadar, Panorama, Tenable, MS Defender, SCCM, Jamf, Intune, Wiz

• Baseline & expanded integrations (D3, D5); Pilot Validation Report (D4); Initial Attack Surface Assessment (D6); runbooks (D8); reporting package (D9)

For applications and inquiries, contact:View email address on us.fitly.work