Senior Microsoft Cloud Security Engineer

Project overview

For our client in the real estate industry, we are looking for a Senior Microsoft Cloud Security Engineer on a freelance basis, starting as soon as possible:

Project: Support our security audit cycle 2026/27 from execution to implementation of measures – hands-on, not just consulting.

Facts:

• Start: asap, latest start: 01.01.2027
• Duration: 6 months, option to extend up to 12 months
• Scope: Full-time
• Presence in Frankfurt 3 days per week
• Project language: German fluent (C1), English fluent (B2+) – parts of the documentation are in English

Responsibilities

Technical Skills / Technologies

• Support the M365/Azure Cloud Security Assessment by an external auditor (scoping, evidence provision, interface to the auditor), possibly also a physical audit of our locations
• Processing findings from customer-vendor risk assessments: remediation plan, implementation, evidence
• Implementation of mitigations in Entra ID / M365 / Intune / Azure: Conditional Access, PIM and privileged roles, group and permission model, shared and break-glass accounts, Intune hardening (Windows and macOS), Secure Score
• Security governance: update incident response plan, set up security awareness, assess logging/SIEM requirements
• Manage our MSP on security topics, documentation in Atlassian Confluence & Jira
• Expected results: Audit completed; all high/critical findings closed or with documented, accepted residual risk; measures sustainably handed over to the team and MSP (documentation, runbooks).

Requirements

• Microsoft 365 Security and Entra ID (Conditional Access, PIM, Identity Governance), Intune for Windows
• Azure security fundamentals (Defender for Cloud, VM/network hardening)
• Experience on the auditee side: evaluate, prioritize, implement findings, provide evidence
• Hands-on implementation, including PowerShell / Microsoft Graph

Nice to have

Environment: Microsoft 365 (Business Premium, E3/E5), Entra ID, Intune, Azure, SharePoint, SentinelOne, Hornetsecurity, Jira/Confluence; external MSP; some legacy hosting being decommissioned.

Experience / Seniority

• SentinelOne, Hornetsecurity, Microsoft Defender XDR / Sentinel
• Practical experience with ISO 27001, NIS2 or DORA
• Experience managing an external MSP
• Senior: at least 5 years of hands-on security experience, several years of which in the Microsoft cloud environment
• Medium-sized business / professional services / finance-related environment advantageous
• Certifications advantageous, not mandatory: SC-100, SC-300, SC-200, AZ-500, CISSP/CISM

Project details

• Start: ab sofort
• Duration: 6 Monate
• Remote: hybrid
• Location: Frankfurt am Main, Deutschland, DE
• Languages: German