Senior Cloud Security Engineer (Azure) at 3Cloud

<div class="content-intro"><p>Are you looking for a role that motivates and challenges you? Are you ready for an opportunity for growth? Do you want to work on teams where people roll up their sleeves to take on tough problems together, and regularly blow the doors off our clients with their outstanding teamwork? If you answered yes to those questions, 3Cloud might just be for you!</p> <p>At 3Cloud, we hire people who aren’t afraid to experiment or fail. We hire people who are willing to give direct and candid feedback to their managers, leaders, and team members. We hire people who jump at those opportunities because they care about our collective growth and success. We hire people who challenge and hold each other accountable for living 3Cloud’s core values because they know that it will result in amazing experiences and solutions for our clients and each other.</p></div><h2>Responsibilities:</h2> <ul> <li style="font-size: 10pt;"><span style="font-size: 10pt;">Lead the implementation and optimization of cloud security solutions across complex client environments.</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;">Serve as a technical mentor and escalation point for junior and mid-level engineers.</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;">Collaborate with architects and stakeholders to design scalable, secure, and high-performance cloud architectures.</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;">Design and implement security controls across Azure services including Azure Policy, Microsoft Defender for Cloud, Sentinel, Purview, and DLP/AIP.</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;">Collaborate with infrastructure and application teams to ensure secure deployment of Azure Compute, Networking, and Storage resources.</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;">Monitor and respond to security incidents using Log Analytics and SIEM tools.</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;">Support identity and access management initiatives, including IAM, PIM, and Access Packages.</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;">Develop and maintain security documentation, standards, and best practices.</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;">Contribute to automation efforts using PowerShell, Python, or Bash to streamline security operations.</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;">Participate in security assessments, audits, and compliance initiatives.</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;">Provide guidance on secure architecture and design patterns in Azure.</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;">Stay current with emerging threats, vulnerabilities, and regulatory requirements.</span></li> </ul> <p>&nbsp;</p> <h2>Requirements:</h2> <p>&nbsp;</p> <ul> <li style="font-size: 10pt;"><span style="font-size: 10pt;">5+ years of experience in cloud security engineering, with a focus on Microsoft Azure.</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;">Hands-on experience with Azure security tools and services (Azure AD/Entra ID, Azure Policy, Azure Sentinel, Microsoft Defender suite, Microsoft Purview, Azure Firewall, etc.).</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;">Familiarity with third-party IAM and security tools (Okta and Okta integration with Entra ID, OneLogin, Splunk, etc.).</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;">Strong grasp of cloud security frameworks, risk assessment, and incident remediation techniques (HIPAA/HITRUST, FedRAMP, NIST, PCI DSS, CJIS, etc.)</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;">Familiarity with third-party firewalls such as Palo-Alto and Fortinet.</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;">Working knowledge of Azure Networking, Compute, and Storage services.</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;">Familiarity with scripting languages such as PowerShell, Python, or Bash.</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;">Strong understanding of identity and access management in Azure environments.</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;">Excellent problem-solving skills and attention to detail.</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;">Strong communication and collaboration skills.</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;">AZ-500: Azure Security Engineer Associate certification required.</span></li> </ul> <h2>Preferred Qualifications:</h2> <ul> <li style="font-size: 10pt;"><span style="font-size: 10pt;">Experience with Infrastructure as Code tools such as Terraform, Bicep, or ARM templates.</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;">Familiarity with DevSecOps practices and CI/CD pipelines.</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;">Exposure to multi-cloud environments is a plus.</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;">SC-200: Security Operations Analyst Associate certification strongly desired.</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;">SC-300: Identity and Access Administrator Associate certification strongly desired.</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;">Hashicorp Terraform Associate certification desired.</span></li> </ul> <p>&nbsp;</p> <div class="" data-block="true" data-editor="9m7c2" data-offset-key="6q7hc-0-0"> <div class="public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="6q7hc-0-0"><span data-offset-key="6q7hc-0-0">Full-time employment&nbsp;</span></div> </div> <div class="" data-block="true" data-editor="9m7c2" data-offset-key="84lit-0-0"> <div class="public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="84lit-0-0"><span data-offset-key="84lit-0-0">📌 Remote in Philippines</span></div> <div class="public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="84lit-0-0"> <div> <p><strong>This Job Posting will expire on&nbsp;<span class="TextRun SCXO74738315 BCX0" lang="EN-US" data-contrast="auto"><span class="NormalTextRun SCXO74738315 BCX0"><span class="EOP SCXO74738315 BCX0">Monday, September 8th, 2025.&nbsp;</span></span></span></strong></p> </div> <div class="job__pay-ranges"> <div class="pay-range"> <div class="description">&nbsp;</div> </div> </div> </div> </div> <p>&nbsp;</p><div class="content-conclusion"><p>Don’t meet every single requirement?&nbsp;At 3Cloud we are dedicated to building a diverse, inclusive and authentic workplace, so if you’re excited about this role but your past experience doesn’t align perfectly with every qualification in the job description, we encourage you to apply anyway.</p> <p><strong>At this time, we cannot sponsor applicants for work visas.</strong></p></div>