Position: Cloud security engineer
Category: Security
English level: upper
Years of experience: 3


8x Azure Certified:
Associate level:
•	Identity and Access Administrator Associate (SC-300)
•	Azure Security Engineer Associate (AZ-500)
•	Security Administrator Associate (MS-500)
•	Azure Administrator Associate (AZ-104, retired)

Completed all Azure-related Fundamentals exams:
•	Azure Data Fundamentals (DP-900)
•	Security, Compliance, and Identity Fundamentals (SC-900)
•	Azure AI Fundamentals (AI-900)
•	Azure Fundamentals (AZ-900)

Have good expertise in Azure Security and Microsoft 365 Security products, including:
•	Identity and Access Management
a.	Manage Azure AD groups and users
b.	Configure user and sign-in risk policies
c.	Manage secure access to the resources by implementing PIM, Conditional Access policies
d.	Configure and manage Azure MFA
e.	Integrate single-sign-on (SSO) and identity providers
f.	Manage API permissions (consents)
g.	Configure Azure roles and Azure AD roles

•	Secure data and applications
a.	Configure access control for storage accounts
b.	Configure storage account access keys (SAS)
c.	Configure Azure AD authentication for database authentication
d.	Configure Azure Key Vault (Secrets, certificates, keys)

•	Secure endpoints and implement threat protection
a.	Planning and implementation Defender for Endpoint
b.	Analyzing and remediating threats identified in Microsoft 365 Defender
c.	Secure endpoints by using Microsoft Endpoint Manager
d.	Secure collaboration with Microsoft Defender for Office 365 by configuring anti-spam, phishing, and other policies, including mail-transport rules
e.	Secure connections and governance data by implementing Microsoft Defender for Cloud Apps; configure application discovery; configure connectors to OAuth apps; configure policies and templates

•	Implement and manage information protection and compliance:
a.	Identify and manage sensitive information types
b.	Plan and implement sensitivity labels for Exchange Online, SharePoint Online sites
c.	Plan and implement DLP solution and use DLP together with other Microsoft solutions (such as Microsoft Defender for Cloud Apps)
d.	Plan and configure alert policies and audit retention policies
e.	Manage regulatory and privacy requirements