Azure Cloud Security Engineer

Career Opportunities with Kids Dental Brands

A great place to work.

We are seeking an experienced Cloud Security Engineer to support and strengthen security across our growing organization. This role will serve as the dedicated security operator for our Microsoft 365, Entra, and Azure environment, helping protect systems, identities, endpoints, and cloud infrastructure across the business.

This is a highly hands‑on role focused on security operations, identity & access management, threat detection, endpoint protection, and cloud/network security. The ideal candidate is analytical, organized, and proactive, with the ability to investigate security incidents thoroughly, identify root causes, and clearly communicate risks and recommendations.

Additional responsibilities include supporting broader security initiatives, improving governance and organization within the environment, and contributing to scalable processes as the company continues to grow. This role is best suited for someone who enjoys problem solving, works well independently, and thrives in a fast‑moving environment with evolving priorities.

At Kids Dental Brands, you’ll have the opportunity to directly impact the security and stability of a rapidly growing organization. You’ll work within a Microsoft‑native security environment and play a key role in protecting systems, supporting compliance efforts, and helping shape the future of security operations across the company.

• Identity & Access Management
  :
  Own Microsoft Entra security configuration – Conditional Access, Privileged Identity Management, MFA and passwordless, app‑registration governance, and access reviews of privileged and high‑impact groups.
• Threat Detection & Response
  :
  Triage and remediate security alerts across Microsoft Defender XDR, Entra Identity Protection, and Exchange Online Protection within defined service‑level targets. Own the Security Incident Response Process, maintain audit‑log coverage, write KQL detections, and document remediation as the work is being done.
• Cloud & Network Security
  :
  Maintain the security posture of KDB's Azure subscriptions – network controls, firewalls, Key Vault, and Defender for Cloud secure‑score remediation.
• Email & Collaboration Security
  :
  Maintain Exchange Online Protection, Defender for Office 365, transport rules, and Microsoft Purview DLP. Drive email‑authentication maturity.
• Compliance
  :
  Serve as KDB's designated HIPAA Security Officer; configure and evidence security controls aligned to HIPAA; support internal and external audits.
• Vulnerability, Documentation & DR
  :
  Run regular vulnerability and configuration assessments; keep documentation of policies, configurations, and incidents current; coach IT peers; contribute to disaster‑recovery planning and testing.
• Maintain and exhibit our core values of compassion, authenticity, talent, and teamwork.
• All other duties as assigned or apparent.

• Location Requirements
  :
  Must be based in or around Phoenix, Arizona
• Experience Required
  : 5+ years of IT/security experience preferred, with strong Microsoft Azure and Microsoft 365 security experience
• Certifications Required
  : at least one of:
  Microsoft AZ-500, SC-200, or SC-300
• Job Type
  :
  Full‑time

• Salary
  : $90,000 - $110,000 depending on experience
• Schedule
  :
  Full‑time with standard business hours and flexibility as needed

• Education
  :
  Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field, or equivalent professional experience.
• Experience
  : 7+ years in IT, including 3+ years focused on security in the Microsoft Azure and Microsoft 365 ecosystem. Hands‑on experience with Microsoft Entra and Microsoft Defender XDR is required. Experience operating in a HIPAA‑regulated environment is strongly preferred.
• Certifications
  :
  Required – at least one of:
  Microsoft AZ-500, SC-200, or SC-300. Preferred – Microsoft SC-100, CISSP, GIAC GCIH or GCSA, or CCSP.
• Computer Skills
  :
  Hands‑on experience administering and securing Azure, Microsoft Entra, Exchange Online, and Microsoft…