Cloud Security Engineer: Azure & Microsoft 365

Cloud Security Engineer

Responsibilities

• Act as the security subject matter expert for Software as a Service and Cloud-based technologies
• Assist in securing O365 and Azure cloud platforms/services
• Deploy cloud security controls based on industry recognized good practice
• Creating cloud-specific security policies, standards and procedures including identity and access management, SSO, firewall management, and vulnerability management
• Performing cloud security assessments of cloud platforms/environments using industry standard frameworks such as CIS, ISO, and NIST.
• Executing on cloud security engagements during different phases of the lifecycle assess, design, and implementation.
• Troubleshooting and resolving complex security issues in cloud environments, applying fundamental systems security understanding, skills, expertise, and experience
• Ensuring that relevant threat and vulnerability data is considered in support of security-relevant decisions
• Providing input to analyses of alternatives and to requirements, engineering, and risk trade-off analyses to achieve a cost-effective and mission/business success.
• Works with applicable teams to choose appropriate technology solutions and facilitates complete integration into the company’s Cloud environments
• Supports the administration of Azure Cloud foundations and services
• Documents service and installation actions by completing forms, reports, logs, and records; carries out Cloud services, performance monitoring and Cloud Services performance tuning
• Troubleshoots Cloud related problem areas and issues as needed to resolve operational issues and restore/optimize services
• Supports administration of Cloud services tagging, logging, and, alerting
• Carrying out administration and support for cloud backup and recovery services
• Supports automation services and scripting for cloud deployment and migrations
• Collaborates with the appropriate departments to assess and recommend technologies that support company organizational needs
• Identifies and documents vulnerabilities, and manage vulnerability resolution
• Implements architectures based on best practices and compliance with security and corporate guidelines.
• Experience working with Microsoft 365 to include administering users and groups, Azure Active Directory, Exchange Online, Teams, SharePoint, One Drive, and Office 365 applications.

Qualifications

• 3+ years' experience as a Security Engineer in a medium to large organization
• Experience with Microsoft Identity and Access Management/Single-Sign-On (SSO) solutions and securing Azure environments
• Experience developing, implementing, and maintaining security policies, standards, and procedures
• Experienced knowledge of industry recognized Web Application Firewall solutions
• Required any of the following active certifications:
  • Microsoft Certified:
    Azure Solutions Architect Expert or Azure Security Engineer Associate
  • Microsoft 365 Certified:
    Security Administrator Associate or Enterprise Administrator Expert
  • ISC CCSP Certified Cloud Security Professional
• Experience working in a fast-paced environment, ideally supporting a 24/7/365 organization
• Attention to detail with the ability to produce reliable, effective solutions
• Possess a positive attitude and ability to work in a collaborative and energetic team environment
• Bachelor’s degree in Computer Science or related field from an accredited college or university
• Five (5) years of experience in cloud infrastructure administration, or an equivalent combination of education, certification, training, and/or experience.
• MCSE:
  Cloud Platform and Infrastructure certification preferred.
• Ability to effectively communicate in technical and business terms, verbally and written
• Ability to prioritize and multi-task in a fast paced, changing environment
• Excellent understanding of Cloud Computing Services including Microsoft 365 and Azure
• Knowledge in troubleshooting and supporting enterprise level cloud infrastructure
• Extensive knowledge of data and network security, internet protocols and communication protocols
• Knowledge and in-depth understanding of how business and technical processes integrate
• Ability to perform on-call responsibilities and after hour duties as…