Cloud Security Engineer

About the Engagement

We are seeking an experienced Cloud Security Engineer to lead a focused security review of an organization's AWS and Microsoft 365 environments. This assessment will validate secure configurations, identity and access controls, and SSO implementation prior to an external penetration test.

The ideal candidate has hands-on experience evaluating cloud security posture, identifying gaps, and providing remediation guidance aligned with industry best practices.

Key Responsibilities

• Conduct a security configuration review across AWS environments (2 tenants)
• Assess Microsoft 365 security posture, including Entra ID & access controls
• Validate SSO configuration and security impact across integrated systems
• Review privileged access, MFA, conditional access, and audit logging
• Benchmark configuration against industry best practices (CIS, NIST, etc.)
• Document findings, risk areas, and remedi...