Cloud Security Engineer T&M

We’re hiring a Senior Cloud Security Engineer to serve as the dedicated owner of cloud security remediation and hardening across our environment.

Our organization already has an established security team that identifies risks and issues recommendations. This role does not sit on that team. Instead, you are the engineer who turns those recommendations into durable, well-architected fixes—and, just as importantly, makes sure the same findings don’t come back.

This is a hands-on engineering role, not an advisory one. Success means a measurably more secure environment, a shrinking backlog of recurring findings, and security controls that are enforced by design rather than by manual effort or one-off patches.

• Remediation & recurrence prevention (the core of this role)
• Own the full lifecycle of security findings and recommendations—whether they come from the security team, Microsoft Defender for Cloud, or other tooling—through triage, remediation, verification, and closure.
• Root-cause recurring issues and implement systemic fixes (policy-as-code, automated guardrails, secure baselines) so the same findings don’t reappear quarter after quarter.
• Track remediation SLAs and report on risk reduction and posture trends over time.
• Identity & authentication
• Secure and govern modern authentication flows across the estate: OIDC, OAuth 2.0 with PKCE, JWT validation and handling, and mTLS.
• Adm