Cloud Specialist

### Employment Type: Contract (Extendable Based on Performance)
Experience Required: 3-5 Years

Responsibilities

- Manage and secure Microsoft Entra ID and Azure environments.
- Implement identity, access, and privilege management controls.
- Configure PIM, Conditional Access, RBAC, and admin consent controls.
- Improve workload protection using Defender for Cloud and Azure Policy.
- Secure Azure resources including Key Vault, Storage, SQL, App Services, Private Endpoints, and Bastion.
- Strengthen Microsoft 365 auditing, email security, collaboration security, and data protection controls.
- Implement Microsoft Purview classification, sensitivity labels, and DLP controls.
- Apply Microsoft 365 Copilot security controls.
- Improve Google Cloud IAM, service identities, auditing, and organizational policies.
- Implement security controls for Google Kubernetes Engine (GKE) environments.
- Secure secrets, credentials, and key lifecycle processes.
- Configure audit logging and security monitoring capabilities.
- Validate dependencies before enforcing security restrictions or credential changes.
- Document data residency, disaster recovery, and implementation dependencies.

Must-Have

- 3-5 years of implementation experience in Microsoft Cloud, Microsoft 365 & Purview, Google Cloud, or Kubernetes environments.
- Ability to work across the assigned platforms within the engagement scope.

Good-to-Have

- Microsoft Entra ID and Azure security experience.
- Microsoft 365 and Microsoft Purview experience.
- Google Cloud IAM and security experience.
- Google Kubernetes Engine (GKE) experience.
- Experience with PIM, Conditional Access, Defender for Cloud, and Azure Policy.
- Experience with DLP, Sensitivity Labels, and audit logging.
- Experience with Workload Identity Federation and VPC Service Controls.
- Experience with Microsoft 365 Copilot governance controls.
- Relevant Microsoft, Google Cloud, or Kubernetes certifications.