Senior Security Engineer

Robert Half is partnering with a well-known brand are seeking an experienced Azure Security Engineer to help design, implement, and manage identity, access, and cloud security controls predominately across a Microsoft Azure environment. This FTE role will focus on securing cloud resources through strong identity governance, secrets management, threat detection, privileged access controls, and Zero Trust security principles. The ideal candidate will have hands-on experience with Azure Key Vault, Microsoft Entra ID (Azure AD), RBAC, Managed Identities, Microsoft Defender, Microsoft Sentinel, PKI/Certificate Management, and Privileged Access Management (PAM). This position is full time with full benefits and hybrid 3 days per week on the Westside.

Responsibilities

• Design and administer secure cloud identity and access management solutions using Microsoft Entra ID (Azure AD).
• Implement and maintain Azure Key Vault for secrets, certificate, and encryption key management.
• Develop and enforce Azure RBAC models based on least-privilege access principles.
• Configure and manage Managed Identities for secure application-to-service authentication.
• Oversee encryption key lifecycle management, including key generation, rotation, protection, and retirement.
• Manage enterprise PKI infrastructure, digital certificates, and certificate lifecycle processes.
• Implement and administer Privileged Access Management (PAM) and Just-In-Time (JIT) access controls.
• Deploy and optimize Microsoft Defender security solutions across Azure workloads.
• Configure, manage, and investigate alerts within Microsoft Sentinel SIEM.
• Perform security monitoring, incident response, threat hunting, and remediation activities.
• Conduct security assessments, access reviews, and compliance audits.
• Partner with infrastructure, data engineering, and application teams to implement secure cloud architectures.
• Create security policies, standards, and operational documentation.

Required Qualifications

• 5+ years of cybersecurity, cloud security, or identity security experience.
• 3+ years supporting Microsoft Azure environments.

Strong experience with:

• Microsoft Entra ID (Azure AD)
• Azure Key Vault
• Azure RBAC
• Managed Identities
• Microsoft Defender Suite
• Microsoft Sentinel
• Privileged Identity Management (PIM) / PAM
• PKI and certificate management
• Experience with incident response and security operations.
• Knowledge of authentication protocols including SAML, OAuth, OpenID Connect, and Kerberos.
• Familiarity with Azure governance, policy management, and security best practices.
• Experience working within regulated or compliance-driven environments.

Preferred Qualifications

• Microsoft Certified: Azure Security Engineer Associate (AZ-500)
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• CISSP, CISM, CCSP, or equivalent security certifications