Cloud Security Engineer

Work onsite in Warren, NJ as part of the Security Engineering organization, helping strengthen cloud security through hands-on remediation and long-term hardening. This role focuses on closing recurring findings, tightening modern authentication and identity controls, and building guardrails that improve cloud posture over time.

You will support security findings and recommendations across the environment, including what comes from the security team and tools such as Microsoft Defender for Cloud. Your work will be measurable, with an emphasis on reducing risk, tracking remediation SLAs, and preventing the same issues from returning quarter after quarter.

What you’ll do

• Own the full lifecycle of security findings and recommendations: triage, remediation, verification, and closure, regardless of origin (security team, Microsoft Defender for Cloud, or other tooling).
• Investigate root causes of recurring issues and implement systemic fixes, using approaches such as policy-as-code, automated guardrails, and secure baselines.
• Track remediation SLAs and report on risk reduction and cloud posture trends over time to ensure security outcomes keep improving.
• Secure and govern modern authentication flows across the estate, including OIDC, OAuth 2.0 with PKCE, JWT validation and handling, and mTLS.
• Build and enforce cloud security guardrails using Azure Policy and Terraform, including detection and remediation of configuration drift.

What you bring

• 9+ years in cloud security or security engineering with deep, hands-on Azure experience.
• Strong, hands-on Microsoft Entra ID expertise, including app registrations, Enterprise Application permissions, consent governance, service principals, managed identities, and least-privilege scoping.
• Solid knowledge of modern authentication: OIDC, OAuth 2.0 / PKCE, JWT, and mTLS.
• Proficiency with Terraform and Azure Policy for policy-as-code and automated guardrails.
• Experience with Microsoft Defender for Cloud and cloud security posture management, including a demonstrable track record of permanently closing security findings.

Tools and technologies

Azure, Microsoft Entra ID, Microsoft Defender for Cloud, OIDC, OAuth 2.0, PKCE, JWT, mTLS, Azure Policy, Terraform, policy-as-code, service principals, managed identities

Compensation

$50 to $55 per hour (weekly pay). This position is onsite in Warren, NJ.

Benefits

• Medical and Prescription Drug Plans
• Dental Plan
• Vision Plan
• Health Savings Account
• Health Flexible Spending Account
• Dependent Care Flexible Spending Account
• Supplemental Life Insurance
• Short Term and Long Term Disability Insurance
• Business Travel Insurance
• 401(k), Plus Match
• Weekly Pay

Upon completion of the waiting period, consultants are eligible for the benefits listed above.

What’s in it for you

• Enjoy a hands-on engineering role where remediation work directly improves security posture and reduces recurring findings.
• Turn security recommendations into durable fixes enforced by design, not one-off patches.
• Build systemic guardrails across cloud governance, identity, and privileged access to reduce backlog and improve outcomes over time.
• Contribute to security governance standards, including control definitions, exception handling, and audit evidence.
• Apply security controls to AI workloads and AI agents, including identity and tool permission scoping and emerging AI security best practices.