L2 Cloud Security Engineer – Multi‑Cloud (Azure, OCI, GCP)

About the role

The L2 Cloud Security Engineer will support day‑to‑day security operations across a multi‑cloud estate (Azure, OCI, and GCP). This is a hands‑on, ticket‑driven position focused on identity and access management, security automation, and routine operational tasks.

Key responsibilities

• Process identity and access requests in Microsoft Entra ID, including PIM, app registrations, managed identities, Conditional Access, and MFA.
• Monitor and maintain Logic Apps security automations, investigate failed runs, and apply minor updates.
• Triage security alerts, follow incident‑response playbooks, and coordinate remediation with L3 technical lead.
• Manage certificate lifecycle and key rotation using GCP Certificate Authority Service and Azure Key Vault.
• Maintain ITSM tickets, follow runbooks, document resolutions, and participate in shift handovers and on‑call rotation.

Required profile

• Bachelor’s degree in Computer Science, IT or related field.
• 4–6 years of IT experience with at least 2–3 years in cloud security or operations at L2 level.
• Hands‑on experience with Microsoft Entra ID, Azure RBAC, Azure Policy, and Microsoft Defender suite.
• Familiarity with GCP or OCI is a plus.
• Relevant certifications such as AZ‑500, SC‑300, SC‑200, AZ‑104, MD‑102, SC‑900, or comparable vendor‑agnostic credentials.

Required skills

• Microsoft Entra ID (RBAC, PIM, App Registrations, Conditional Access)
• Azure Policy and Azure Key Vault
• Microsoft Defender for Cloud, Servers, Containers, and Endpoint
• Microsoft Intune
• Logic Apps automation
• GCP Certificate Authority Service
• Scripting with PowerShell, Azure CLI, or KQL