Cloud Specialist – Microsoft & Google Cloud Security

About the role

The Cloud Specialist will design, implement, and secure cloud environments across Microsoft Azure, Microsoft 365, Google Cloud, and Kubernetes. You will work closely with clients to enforce identity, access, and workload protection controls while ensuring compliance with data residency and disaster‑recovery requirements.

Key responsibilities

• Manage and secure Microsoft Entra ID and Azure resources, configuring PIM, Conditional Access, RBAC, and admin‑consent controls.
• Implement workload protection using Defender for Cloud, Azure Policy, and secure services such as Key Vault, Storage, SQL, App Services, Private Endpoints, and Bastion.
• Strengthen Microsoft 365 auditing, email and collaboration security, and apply Purview classification, sensitivity labels, and DLP controls.
• Improve Google Cloud IAM, service identities, auditing, organizational policies, and secure GKE environments, including secrets and key lifecycle management.
• Configure audit logging, security monitoring, and validate dependencies before enforcing security restrictions.
• Document data residency, disaster‑recovery, and implementation dependencies.

Required profile

• 3‑5 years of hands‑on implementation experience in Microsoft Cloud, Microsoft 365, Google Cloud, or Kubernetes security.
• Ability to work across multiple platforms within the engagement scope.
• Relevant certifications in Microsoft, Google Cloud, or Kubernetes are a plus.

Required skills

• Microsoft Entra ID, Azure security, PIM, Conditional Access, RBAC, Defender for Cloud, Azure Policy.
• Microsoft 365 auditing, email security, collaboration security, Purview, sensitivity labels, DLP, Copilot governance.
• Google Cloud IAM, service identities, audit logging, VPC Service Controls, workload identity federation.
• Google Kubernetes Engine (GKE) security, secrets management, key lifecycle processes.