IAM Cloud Security Engineer

IAM Cloud Security EngineerLocation: Warren NJ (100% Onsite)ContractJD:Administer and harden Microsoft Entra ID: app registrations and Enterprise Application permissions, consent governance, service principals and managed identities, credential and secret hygiene, and least-privilege scoping.MFA enforcement, Privileged Identity Management (PIM) / just-in-time elevation, role minimization, and break-glass procedures.Own the full lifecycle of security findings and recommendations through triage, remediation, verification, and closure.Root-cause recurring issues and implement systemic fixes using policy-as-code, automated guardrails, and secure baselines.Drive secure-score improvement, remediate recommendations, and manage cloud security posture (CSPM).Contribute to standards, control definitions, exception handling, and audit evidence.Secure all cloud and SaaS administrative portals, including Azure, Microsoft 365 admin, identity providers, and additional cloud platforms in use.Apply security controls to AI workloads, services, and AI agents.Agent and workload identities, tool and permission scoping, data-exposure and prompt-injection risk, and emerging AI security best practices.