Cloud Security Engineer

Onsite in Warren, NJ, this Cloud Security Engineer position in the Security Engineering organization focuses on hands-on remediation and hardening across the cloud environment. If you want your work to translate directly into improved cloud posture and fewer repeat findings, this role centers on turning security recommendations into durable fixes enforced by policy and guardrails.

What You’ll Do

• Own the full lifecycle of security findings and recommendations, including triage, remediation, verification, and closure for items originating from the security team, Microsoft Defender for Cloud, or other tooling.
• Investigate root causes behind recurring issues and implement systemic solutions such as policy-as-code, automated guardrails, and secure baselines to prevent findings from reappearing quarter after quarter.
• Track remediation SLAs and report on risk reduction and cloud posture trends over time, with measurable improvements in security outcomes.
• Secure and govern modern authentication flows across the environment, including OIDC, OAuth 2.0 with PKCE, JWT validation/handling, and mTLS.
• Build and enforce cloud security guardrails using Azure Policy and Terraform, including detection and remediation of configuration drift.

What You Bring

• 9+ years in cloud security or security engineering with deep, hands-on Azure experience.
• Strong, hands-on Microsoft Entra ID expertise, including app registrations, Enterprise Application permissions, consent governance, service principals, managed identities, and least-privilege scoping.
• Solid working knowledge of modern authentication: OIDC, OAuth 2.0 / PKCE, JWT, and mTLS.
• Proficiency with Terraform and Azure Policy for policy-as-code and automated guardrails.
• Experience with Microsoft Defender for Cloud and cloud security posture management, including a demonstrable track record of permanently closing security findings.

Technologies You’ll Work With

• Azure, Microsoft Entra ID, Microsoft Defender for Cloud
• OIDC, OAuth 2.0, PKCE, JWT, mTLS
• Azure Policy, Terraform, policy-as-code
• Service principals, managed identities

Compensation and Schedule

Pay range: $50 - $55 per hour

Location: Warren, NJ (onsite)

Weekly pay is provided.

Benefits

• Medical and Prescription Drug Plans
• Dental Plan
• Vision Plan
• Health Savings Account
• Health Flexible Spending Account
• Dependent Care Flexible Spending Account
• Supplemental Life Insurance
• Short Term and Long Term Disability Insurance
• Business Travel Insurance
• 401(k), Plus Match

Benefits Eligibility After Waiting Period

• Medical and Prescription Drug Plans
• Dental Plan
• Vision Plan
• Health Savings Account
• Health Flexible Spending Account
• Dependent Care Flexible Spending Account
• Supplemental Life Insurance
• Short Term and Long Term Disability Insurance
• Business Travel Insurance
• 401(k), Plus Match
• Weekly Pay