Cloud Security Engineer

Skills Required

This role requires deep knowledge (300 – 400 level) in the following technology areas: o Entra ID o Role Base Access Control (RBAC) o Account Management

▪ User Accounts

▪ Service Principals o Group Management o Entra ID Enterprise Application Management o Authentication Models

▪ Cloud Auth (PTA/PHS)

▪ Federation

▪ Protocols

• OAuth
• SAML
• ODIC
• Kerberos

▪ FIDO2 \ Passkeys

▪ o Device Management

▪ Hybrid Join

▪ AADJ o Account Synchronization

▪ Entra ID Connect

▪ Entra Cloud Sync o Azure P1/P2 Features

▪ Conditional Access

• MFA
• Risk based policies
• Reporting
• Troubleshooting

▪ Self-service Password Reset (SSPR)

▪ Entra Password Protection

• Policy configuration
• Integration with Active Directory

▪ Entra ID Governance

• Privileged Identity Management
• Periodic Reviews
• Self-Service Access Reviews
• Compliance audits

▪ Entra ID Protection o Management

▪ Microsoft Graph API foundational knowledge

Relevant MIP/VBD Titles On-Demand Assessment –

Entra ID WorkshopPLUS - Microsoft Azure: Hybrid Identity WorkshopPLUS - Microsoft Entra: Identity Fundamentals Activate Azure with Multi-Factor Authentication and Conditional Access Onboarding Accelerator - Migrate Single Sign-On Applications to Entra Onboarding Accelerator - Azure Active Directory: Features Deployment Onboarding Accelerator - Entra Permissions Management WorkshopPLUS - Microsoft 365 Security and Compliance Technical Update Briefin

Relevant Certifications

Microsoft Certified: Identity and Access Administrator Associate or equivalent

Microsoft Certified: Cybersecurity Architect Expert or equivalent

Microsoft Certified Trainer or equivalent Certified Information Systems Security Practitioner (CISSP) or equivalent