Cloud Security & Identity Engineer (Microsoft)

Location: Athens, Attica, Greece; hybrid working with periodic customer-site travel and possible planned out-of-hours maintenance.

Company

Quento Technologies S.A., the ICT arm of hirify.global, delivers AI, digital engineering, cloud, and cybersecurity solutions across Greece, Luxembourg, and Belgium.

What you will do

• Operate Microsoft Defender for Endpoint, including onboarding, ASR, TVM, alert triage handoff, disk encryption, and removable-media policies.
• Manage Microsoft Defender for Cloud posture, secure-score improvements, security recommendations, Entra ID administration, MFA/passwordless workflows, Conditional Access, and PIM reviews.
• Operate privileged-access endpoint safes, session recording reviews, break-glass procedures, LAPS rotation, Intune compliance policies, and Purview endpoint DLP.
• Support customer knowledge transfer, onboarding, documentation, daily notes, reusable security playbooks, and multi-client managed-security engagements.
• Provide first escalation for endpoint isolation events, coordinate with the SOC, contribute forensic evidence, and prepare GDPR/EUDPR and ISO 27001 audit evidence.
• Carry out all activities in compliance with regulatory requirements and support implementation of the Group Anti-Bribery and Corruption Policy.

Requirements

• University degree in Computer Science, Engineering, or a related field.
• 3–5 years of experience in cloud/endpoint security or identity operations at enterprise scale.
• Experience supporting enterprise customers in managed-services or multi-client environments and troubleshooting production security and identity incidents.
• Experience with ITSM ticketing and change-management processes, plus strong analytical, troubleshooting, and communication skills.
• Technical knowledge of Microsoft Defender for Endpoint, including onboarding, ASR rules, TVM triage, EDR block mode, and alert investigation.
• Technical knowledge of Entra ID/Azure AD, Conditional Access, MFA/passwordless, PIM, group-based licensing, and identity protection.
• Knowledge of Microsoft Defender for Cloud, PAM tools, Microsoft Purview endpoint DLP, sensitivity labels, Intune compliance policies, PowerShell, and Microsoft Graph.
• Understanding of SIEM concepts, preferably Microsoft Sentinel, including alert interpretation and query construction; network/WAF security exposure.
• Familiarity with EUDPR, GDPR, and ISO 27001 controls.
• Fluent English at B2 minimum is required for customer-facing interaction.

Nice to have

• Knowledge of ITIL and operational support practices.
• Microsoft SC-300 or SC-200 certification.
• Experience in 24x7 or multi-customer managed-security environments.
• Experience in regulated or highly available environments.

Culture & Benefits

• Competitive compensation, restaurant card, and annual bonus programs.
• Flexible hybrid model with home-equipment benefits; periodic customer-site travel and planned out-of-hours maintenance may be required.
• Private health insurance, occupational doctor, workplace counselor, modern facilities, parking, company bus, gym, and wellness facilities.
• IT equipment, mobile and data plan, mentoring, coaching, and a personalized annual learning and development plan.
• Referral bonuses and regular wellbeing, ESG, volunteering, and talent-development activities.
• Equal-opportunity environment focused on ability and behavior.