Cloud Security Engineer

About the opportunity

At Sequoia Connect, we are a Talent-First Technology Ecosystem that redefines how elite professionals interact with the global digital landscape. We move beyond traditional models to act as a catalyst for the top 1% of global talent, connecting human potential with complex industrial execution. By joining our inner circle, you are not simply taking a position; you are aligning with a strategic partner dedicated to updating your "Human OS" and accelerating your growth through world-class, high-impact projects. We are currently partnering with a global IT powerhouse that represents the connected world through innovative, customer-centric experiences. As a USD 6 billion organization and one of the top 7 IT service providers globally, our client empowers over 1,200 global customers—including several Fortune 500 companies—to "Rise™." With a massive network of 163,000+ professionals across 90 countries, they are at the absolute forefront of digital transformation, leveraging next-generation technologies such as 5G, AI, Blockchain, and Quantum Computing. This is your chance to thrive in a workplace recognized as one of the most sustainable corporations in the world. You will join an environment that values innovation and societal impact, working on end-to-end digital transformation projects for global leaders. If you are a driven professional looking for global career opportunities and exposure to high-impact projects within an international network of expertise, this is where you belong. We are currently searching for a Cloud Security Engineer T&M: The Challenge (Responsibilities) Own the full lifecycle of security findings and recommendations—from Our Client's security team, Microsoft Defender for Cloud, or other tooling—through triage, remediation, verification, and closure. Root-cause recurring issues and implement systemic fixes (policy-as-code, automated guardrails, secure baselines) to prevent findings from reappearing. Track remediation SLAs and report on risk reduction and posture trends over time. Secure and govern modern authentication flows across the estate: OIDC, OAuth 2.0 with PKCE, JWT validation and handling, and mTLS. Administer and harden Microsoft Entra ID: app registrations and Enterprise Application permissions, consent governance, service principals and managed identities, credential and secret hygiene, and least-privilege scoping. Design, implement, and continuously tune Conditional Access policies. Build and enforce guardrails using Azure Policy and Terraform; maintain secure-by-default infrastructure-as-code baselines and detect/remediate configuration drift. Operate Microsoft Defender for Cloud to drive secure-score improvement, remediate recommendations, and manage cloud security posture (CSPM). Contribute to security governance: standards, control definitions, exception handling, and audit evidence. Secure all cloud and SaaS administrative portals, including Azure, Microsoft 365 admin, and identity providers. Strengthen privileged access through MFA enforcement, Privileged Identity Management (PIM) / just-in-time elevation, role minimization, and break-glass procedures. Apply security controls to AI workloads, services, and AI agents, including agent/workload identities, tool and permission scoping, and mitigating data-exposure and prompt-injection risks. Your Profile (Requirements) 5+ years in cloud security or security engineering, with deep, hands-on Azure experience. Strong, hands-on Microsoft Entra ID expertise: app registrations, Enterprise Apps, permissions and consent, and Conditional Access. Solid working knowledge of modern authentication: OIDC, OAuth 2.0 / PKCE, JWT, and mTLS. Proficiency with Terraform and Azure Policy for policy-as-code and automated guardrails. Experience with Microsoft Defender for Cloud and cloud security posture management. A demonstrable track record of root-causing and permanently closing security findings—not just patching them. Working understanding of AI, AI agents, and AI security considerations. High-Performance Mindset: Resilience, emotional intelligence, and a focus on agile delivery. Technologist DNA: A deep understanding of the difference between "coding" and "engineering." Desired Multi-cloud exposure (AWS, GCP). Relevant certifications (e.g., Microsoft SC-100, AZ-500, SC-300; CISSP). Experience with CI/CD pipeline security, secrets management, and SIEM/SOAR. Scripting/automation proficiency with PowerShell or Python. Hands-on experience securing LLM-based or agentic systems in production. Familiarity with cloud-native foundations or AI coding assistants. Languages Advanced Oral English: For seamless collaboration with global teams. Advanced Spanish. Special Notes This is a hands-on engineering and remediation role, not an advisory position. Success is measured by a measurably more secure environment and a shrinking backlog of recurring findings enforced by design. Work Arrangement We value flexibility to support your lifestyle. This position is available as: Remote If you meet these qualifications and are pursuing new challenges, start your application on our website to join an award-winning employer. Explore all our job openings | Sequoia Career’s Page: https://www.sequoia-connect.com/careers/ 5+ years in cloud security or security engineering, with deep, hands-on Azure experience. Strong, hands-on Microsoft Entra ID expertise: app registrations, Enterprise Apps, permissions and consent, and Conditional Access. Solid working knowledge of modern authentication: OIDC, OAuth 2.0 / PKCE, JWT, and mTLS. Proficiency with Terraform and Azure Policy for policy-as-code and automated guardrails. Experience with Microsoft Defender for Cloud and cloud security posture management. A demonstrable track record of root-causing and permanently closing security findings. Working understanding of AI, AI agents, and AI security considerations.

Responsibilities

• ) Own the full lifecycle of security findings and recommendations—from Our Client's security team, Microsoft Defender for Cloud, or other tooling—through triage, remediation, verification, and closure.
• Root-cause recurring issues and implement systemic fixes (policy-as-code, automated guardrails, secure baselines) to prevent findings from reappearing.
• Track remediation SLAs and report on risk reduction and posture trends over time.
• Secure and govern modern authentication flows across the estate: OIDC, OAuth 2.
• 0 with PKCE, JWT validation and handling, and mTLS.
• Administer and harden Microsoft Entra ID: app registrations and Enterprise Application permissions, consent governance, service principals and managed identities, credential and secret hygiene, and least-privilege scoping.
• Design, implement, and continuously tune Conditional Access policies.
• Build and enforce guardrails using Azure Policy and Terraform; maintain secure-by-default infrastructure-as-code baselines and detect/remediate configuration drift.

Qualifications

• ) 5+ years in cloud security or security engineering, with deep, hands-on Azure experience.
• Strong, hands-on Microsoft Entra ID expertise: app registrations, Enterprise Apps, permissions and consent, and Conditional Access.
• Solid working knowledge of modern authentication: OIDC, OAuth 2.
• 0 / PKCE, JWT, and mTLS.
• Proficiency with Terraform and Azure Policy for policy-as-code and automated guardrails.
• Experience with Microsoft Defender for Cloud and cloud security posture management.
• A demonstrable track record of root-causing and permanently closing security findings—not just patching them.
• Working understanding of AI, AI agents, and AI security considerations.