Cloud Security & Identity Engineer

Evaluate and reinforce security postures in Azure and GCP subscriptions by managing policies, RBAC, and Conditional Access. Implement and maintain Security Command Center controls, review IaaS and container configurations for misconfigurations, and administer CSPM/CNAPP tools for continuous visibility. Design Zero Trust identity architectures, audit excessive permissions, and define compliance benchmarks to automate remediations. Coordinate with DevSecOps for CI/CD integration, design network segmentation, and support incident response exercises.