Cloud Security Engineer

Job not on LinkedIn

🔥 0 minutes ago

🇲🇽 Mexico – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 25%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Sequoia Connect

WebsiteLinkedInAll Job Openings

11 - 50 employees

💼 Consulting

📣 Marketing

📦 Logistics

Consulting • Marketing • Logistics

Sequoia Connect is a company that specializes in IT advisory and talent services particularly focused on digital transformation. They provide headhunting services for technology specialists, IT consulting, and recruitment process outsourcing. With operations spread across multiple countries including the USA, Mexico, India, and regions in Latin America, they connect technologists with global companies. They aim to optimize processes, reduce operating costs, and maintain high standards of technological innovation. Sequoia Connect supports digital transformation for both multinational corporations and agile startups, serving over 700 clients across 50+ countries.

📋 Description

• Own the full lifecycle of security findings and recommendations through triage, remediation, verification, and closure • Root-cause recurring issues and implement systemic fixes using policy-as-code, automated guardrails, and secure baselines • Track remediation SLAs and report on risk reduction and security posture trends • Secure and govern authentication flows including OIDC, OAuth 2.0 with PKCE, JWT validation and handling, and mTLS • Administer and harden Microsoft Entra ID, including app registrations, Enterprise Application permissions, consent governance, service principals, managed identities, credential hygiene, and least-privilege scoping • Design, implement, and continuously tune Conditional Access policies • Build and enforce guardrails using Azure Policy and Terraform • Maintain secure-by-default infrastructure-as-code baselines and detect or remediate configuration drift • Operate Microsoft Defender for Cloud to improve secure score, remediate recommendations, and manage CSPM • Contribute to security governance, including standards, control definitions, exception handling, and audit evidence • Secure cloud and SaaS administrative portals, including Azure, Microsoft 365 admin, and identity providers • Strengthen privileged access through MFA, PIM / just-in-time elevation, role minimization, and break-glass procedures • Apply security controls to AI workloads, services, and AI agents, including identity, tool and permission scoping, data-exposure mitigation, and prompt-injection risk mitigation

🎯 Requirements

• 5+ years in cloud security or security engineering, with deep, hands-on Azure experience • Strong, hands-on Microsoft Entra ID expertise, including app registrations, Enterprise Apps, permissions and consent, and Conditional Access • Solid working knowledge of OIDC, OAuth 2.0 / PKCE, JWT, and mTLS • Proficiency with Terraform and Azure Policy for policy-as-code and automated guardrails • Experience with Microsoft Defender for Cloud and cloud security posture management • Demonstrable track record of root-causing and permanently closing security findings • Working understanding of AI, AI agents, and AI security considerations • Resilience, emotional intelligence, and focus on agile delivery • Deep understanding of the difference between coding and engineering • Advanced oral English • Advanced Spanish • Multi-cloud exposure (AWS, GCP) • Relevant certifications such as Microsoft SC-100, AZ-500, SC-300, or CISSP • Experience with CI/CD pipeline security, secrets management, and SIEM/SOAR • Scripting/automation proficiency with PowerShell or Python • Hands-on experience securing LLM-based or agentic systems in production • Familiarity with cloud-native foundations or AI coding assistants

🏖️ Benefits

• Remote work arrangement • Flexibility to support your lifestyle • Global career opportunities • Exposure to high-impact projects • World-class, high-impact projects • Collaboration with global teams • Work within an international network of expertise • Opportunity to work for an award-winning employer • Opportunity to work for a sustainable corporation