Senior Cloud Security Engineer

About the role

The Senior Cloud Security Engineer will lead security assurance across cloud platforms and modern development practices, with a strong focus on Microsoft Azure and Microsoft 365. This role blends hands‑on cloud security engineering, DevSecOps expertise, solution architecture review, and security governance.

Key responsibilities

• Partner with Service Delivery to secure Azure, Microsoft Entra, Microsoft 365 and Salesforce environments.
• Provide expert guidance and assurance for cloud architecture, SaaS integrations, design submissions and technical change processes.
• Evaluate emerging technologies and recommend future‑state secure solutions.
• Assess internally developed application designs from a security perspective.
• Operate and support the Microsoft Defender suite (Endpoint, Identity, O365, Cloud).
• Investigate and triage alerts from SIEM, vulnerability scanners and other security tools.
• Contribute to incident response, threat modelling and continuous improvement of security capabilities.
• Support secure delivery across IaaS, PaaS, containers and Infrastructure‑as‑Code environments.
• Ensure secure integration of APIs, cloud‑native services and CI/CD tooling.
• Maintain IAM capabilities including provisioning, RBAC, ABAC, SCIM, PAM and LDAP integrations.
• Provide guidance on modern authentication and authorisation frameworks (OAuth 2, OIDC, SAML) and manage certificates and token‑based authentication.

Required profile

• Senior‑level experience leading cloud security initiatives.
• Strong background in Microsoft Azure, Microsoft 365 and related security services.
• Proven ability to work with Service Delivery, Architecture and Development teams to embed security controls throughout the SDLC.
• Experience acting as an escalation point for security incidents and contributing to incident response.

Required skills

• Microsoft Azure
• Microsoft 365
• Microsoft Entra
• Salesforce
• Microsoft Defender suite (Endpoint, Identity, O365, Cloud)
• SIEM platforms
• Vulnerability scanning tools
• IaaS, PaaS, Containers, Infrastructure‑as‑Code
• Red Hat OpenShift / Azure Red Hat OpenShift
• CI/CD tooling
• API security
• Identity & Access Management (IAM), RBAC, ABAC, SCIM, PAM, LDAP
• OAuth 2, OpenID Connect (OIDC), SAML
• Certificate and token‑based authentication management