CFG I is hiring a Network/Cloud Infrastructure Security Engineer to help build and secure cloud and identity foundations across Microsoft Entra ID and Azure, with direct ownership of IAM and cloud security controls. This hybrid role (United States) is focused on practical engineering work that supports governance, compliance readiness, and escalation for infrastructure and identity requests across IT.
In this position, you will design secure Azure environments, standardize deployments using infrastructure as code and policy, and improve how CFGI protects access to internal and external applications. You will also lead the technical evidence, documentation, and incident support needed for ongoing client and audit requirements, in coordination with the firm’s managed 24/7 SOC provider.
Technologies
Microsoft Entra ID, Azure, Azure Policy, Terraform, Bicep, Microsoft 365, Microsoft Sentinel, Microsoft Defender, Defender for Cloud, Microsoft Secure Score, CIS Benchmarks, Zoho ServiceDesk, PowerShell, Microsoft Graph, Python, Azure CLI, Power Automate, Logic Apps, REST APIs, Exchange Online, Mimecast, Zscaler, Azure Key Vault, RBAC, Microsoft Purview, DLP, SharePoint, OneDrive, Intune, Microsoft Sentinel detection rules, Microsoft Sentinel data connectors, GitHub, GitHub Actions, SAML, OIDC, SCIM, MFA, passwordless authentication, Conditional Access, identity protection, least-privilege RBAC, API permissions and admin consent, certificate and secret expiration, branch protection, secret scanning, OIDC federation, SOCs (managed 24/7 SOC provider), SOC 2, ISO 27001, NIST CSF, CIS, AWS, ARM, Git, Active Directory, Entra Connect, Cloud Sync, Multi-Geo
