Cloud Security Engineer (m/f/d)

About the role

As a Cloud Security Engineer at Alendris, you protect our clients' cloud and hybrid infrastructures and implement holistic security solutions in the Microsoft ecosystem. You develop and deploy Zero Trust strategies, build Identity & Access Management at enterprise level and ensure threats are detected and mitigated early through Threat Detection and Incident Response. You strategically advise our clients on securing their IT landscape and help them meet regulatory and compliance requirements. You work closely with our Cloud Engineers and Architects, embedding security as an integral part of every project.

What you'll do

• Designing and implementing Zero Trust architectures and Conditional Access Policies
• Configuring, managing and continuously optimizing Microsoft Defender for Cloud, Defender for Endpoint, Defender for Identity and Defender for Office 365
• Building and operating Microsoft Sentinel as a SIEM solution including analytics rules, playbooks and hunting queries
• Building and optimizing Identity & Access Management and Privileged Identity Management (PIM) with Entra ID
• Implementing and managing Microsoft Purview for Data Loss Prevention, Information Protection and Compliance
• Conducting security assessments, vulnerability analyses and Secure Score optimizations
• Advising on regulatory and compliance requirements (ISO 27001, BSI, GDPR, NIS2)
• Incident response, forensics and security monitoring for customer environments
• Creating security concepts, policies and documentation

What we're looking for

• Several years of experience in IT security and cloud security, ideally in the Microsoft ecosystem
• Deep knowledge of the Microsoft Security Stack (Defender Suite, Sentinel, Entra ID, Purview)
• Experience with Zero Trust concepts, Identity Governance and Privileged Access Management
• Knowledge of network security, firewall concepts and Azure Network Security (NSG, Azure Firewall, Private Endpoints)
• Understanding of regulatory requirements (ISO 27001, BSI, GDPR, NIS2)
• Experience with SIEM/SOAR solutions, ideally Microsoft Sentinel
• Relevant certifications are a plus (SC-200, SC-300, SC-400, AZ-500)
• Analytical mindset, high attention to detail and independent work approach
• Fluent German and English language skills

What we offer

• Exciting security projects with SME and enterprise clients that have real protection needs
• Flexible working – from our office in Augsburg with home office options
• Funded security certifications and conference visits
• Access to cutting-edge security tools and Microsoft partner programs
• Flat hierarchies and direct involvement in shaping the company
• Competitive salary and personal development budget