As a Cloud Security Consultant, you will play a key role in enhancing the security posture of enterprise cloud environments. Your work will center on designing and deploying secure configurations across Microsoft cloud platforms, ensuring clients meet both operational and compliance goals.
What You'll Do
- Architect and manage Microsoft Entra ID environments, including identity lifecycle, multi-factor authentication, and conditional access policies.
- Configure and optimize Privileged Identity Management for just-in-time access and emergency break-glass scenarios.
- Implement secure hybrid identity setups with hardened federation and synchronized on-premises directories.
- Build and enforce secure landing zones using infrastructure-as-code tools like Bicep, Terraform, and Azure Policy.
- Apply security baselines for networking, compute, and storage resources, ensuring encryption and private connectivity by default.
- Deploy and fine-tune Microsoft Defender solutions across cloud workloads, endpoints, identities, and applications.
- Set up Microsoft Sentinel with data ingestion, detection rules, behavioral analytics, and automated response workflows.
- Manage data governance and compliance through Microsoft Purview, including labeling, DLP policies, and insider risk detection.
- Secure collaboration platforms like Teams, SharePoint, and Exchange Online with anti-phishing, safe attachments, and access controls.
- Enforce device compliance using Intune and conditional access, supporting both corporate and personal devices.
- Design and implement data classification strategies, access reviews, and entitlement management for sensitive resources.
- Ensure cryptographic protection using customer-managed keys, key rotation, and double encryption where applicable.
- Support legal and audit requirements with eDiscovery, retention policies, and audit logging.
Requirements
- Minimum of one year in information security with direct experience in Azure or Microsoft 365 environments.
- Hands-on experience with Microsoft cloud security services such as Entra ID, Defender suite, Sentinel, Purview, and Intune.
- Familiarity with cloud security frameworks including CIS Benchmarks and Microsoft Cloud Security Benchmark.
- Strong ability to document configurations, write reports, and communicate technical findings clearly.
- Current Microsoft cloud certification such as AZ-104, AZ-500, SC-900, SC-300, SC-200, or SC-401.
- Citizenship in one of the 32 NATO member countries is required.
Preferred Qualifications
- Degree in Computer Science, Cybersecurity, Information Technology, or a related field.
- Consulting experience in security advisory or implementation roles.
- Additional cybersecurity certifications such as SSCP, CompTIA Security+, or equivalent.
- Scripting skills in PowerShell or Python for automation and tooling.
Benefits
- 10,000€ training budget and 10 dedicated learning days every two years.
- Statutory leave plus 5 additional company-funded vacation days.
- Flexible working hours to support work-life balance.
- Monthly benefits allowance.
- Regular team events and collaborative gatherings.
- Personal coaching focused on professional growth and well-being.
