Cloud Security Engineer

About Our Company:

At Patch My PC, we exist to

improve lives

. What started as a free tool to keep apps updated has grown into a trusted enterprise solution that helps IT and Security teams automate, manage, deploy, and report on third-party updates in Microsoft ConfigMgr, Intune, and WSUS. Our fully remote crew of 150 GIF-loving humans supports over 10,000 customers and more than 32 million devices. We make patching easier, boost security, and give IT teams their time back.

Our

core values

guide how we work, how we treat each other, and how we grow. They keep us focused on what matters most. We're here to improve the lives of our customers, our team members, and our communities.

About this Role:

We're hiring a Cloud Security Engineer to strengthen and operate our Microsoft cloud security stack. This is a hands-on engineering role: you'll build, tune, and maintain the security and compliance controls that protect organizational and customer data while bringing a red-team mindset to find weaknesses before attackers do. 

You'll own the day-to-day engineering of our Microsoft Purview, Defender for Cloud, Entra, and Azure monitoring capabilities, translate technical risk into clear recommendations for leadership, and act as a trusted security advisor to internal teams and customers. This role sits at the intersection of security engineering, cloud operations, and governance, ideal for someone who likes to build controls, break assumptions, and measurably improve security posture. 

Responsibilities:

Required Skills:

• 7+ years of hands-on experience engineering and operating Microsoft cloud security technologies: Purview, Defender for Cloud, Azure Log Analytics, Entra ID, PIM, Identity Governance, and DLP. 
• Solid understanding of cloud security principles and Microsoft 365 / Azure security controls. 
• Experience investigating security risks and identifying control weaknesses. 
• Comfort writing queries (e.g., KQL) and automating tasks (PowerShell, Graph API, or similar) is a strong plus. 
• Willingness and ability to travel. Tthis role may require travel to customers to discuss our security practices and showcase how our tooling improves their security posture. 
• Strong analytical and problem-solving skills, with the ability to think from an attacker's perspective. 
• Excellent written communication, able to produce professional reports and executive summaries. 
• Strong presentation and customer-facing communication skills. 
• Able to work independently in a remote setting while collaborating with distributed teams. 

Nice to Have:

• Microsoft security certifications (SC-200, SC-300, SC-400, AZ-500, or equivalent). 
• Experience with compliance frameworks such as ISO 27001, SOC 2, GDPR, or similar. 
• Experience with security governance, risk, and compliance (GRC) programmes. 
• Exposure to AI governance, security, or responsible-AI initiatives. 
• Experience as a consultant in Configuration Manager, Intune and other related technologies. 
• Experience at leading customer focused workshops.  

Compensation & Benefits:

What to Expect in the Interview Process

Curious about what comes next? Learn more about our hiring process here: http://patchmypc.com/careers#hiring-process

Equal Opportunity Employer:

Patch My PC is an Equal Opportunity Employer and is committed to a policy of equal treatment and opportunity in every aspect of its recruitment and hiring process. We encourage women, racial and ethnic minorities, individuals with disabilities, and veterans to apply.

Work Authorization:

This position is NOT eligible for Visa sponsorship.

To be eligible for consideration, candidates for fully remote positions must reside in one of the following U.S. states:

AL, AK, AR, AZ, CA, CO, CT, DE, FL, GA, HI, IA, ID, IL, IN, KS, KY, LA, ME, MI, MN, MO, MS, MT, NC, ND, NE, NH, NJ, NM, NV, OH, OK, PA, RI, SC, SD, TN, TX, UT, VA, WA, WI, WV, WY.

Compensation: USD 110,000 – 145,000 per year salary