Cloud Security & Identity Engineer

At Quento Technologies S.A., the ICT arm of the Qualco Group, we deliver comprehensive and innovative solutions across AI, Digital Engineering, Cloud, and Cybersecurity, helping businesses accelerate digital transformation. With a presence in Greece, Luxembourg, and Belgium, and backed by the expertise of the Qualco Group, we combine deep technical knowledge with strategic partnerships to support business growth.

At Quento Technologies S.A. we empower our people to innovate and lead in delivering transformative ICT solutions to our clients worldwide.

Quento Technologies S.A. seeks a highly motivated and experienced a Cloud Security & Identity Engineer to join our Managed Security Services team, supporting endpoint security, cloud security posture, and identity & access operations for enterprise Customers - with immediate deployment onto a strategic Customer engagement and onward deployment across Quento's Managed Security Services portfolio.

Your responsibilities will entail:

• Endpoint security (primary): Microsoft Defender for Endpoint operations (onboarding, ASR, TVM, alert triage handoff to SOC), disk encryption operations (BitLocker/FileVault), removable-media policy enforcement;
• Cloud security fundamentals: Microsoft Defender for Cloud posture management, secure-score improvements at the workload/subscription level, security recommendations triage;
• Identity operations: Entra ID day-to-day admin, MFA / passwordless operations (TAP issuance, FIDO2 enrolment, MFA reset workflows), Conditional Access authoring & change management, PIM elevation reviews;
• Privileged access: PAM endpoint-safes operations (account onboarding, session recording review, break-glass), LAPS rotation for endpoint local admin;
• Compliance & DLP: Intune compliance policy authoring, Purview endpoint DLP rules, exclusion register management;
• Knowledge transfer & onboarding: actively participate in Customer KT workshops and shadow the incumbent for security and identity sub-services; capture undocumented procedures and workflows; produce daily notes;
• Security incident support: serve as first escalation for endpoint isolation events; coordinate with SOC on active incidents; contribute post-incident forensic evidence;
• Audit & compliance support: produce evidence for GDPR/EUDPR and ISO 27001 audits; maintain security control matrix currency;
• Multi-client readiness: build reusable Quento security playbooks; support new Customer onboarding for managed security engagements;

• Ensuring that all activities and duties are carried out in full compliance with regulatory requirements and supporting the continued implementation of the Group Anti-Bribery and Corruption Policy.

Requirements

• University degree in Computer Science, Engineering, or a related field;
• 3-5 years of experience in cloud/endpoint security or identity operations at enterprise scale.
• Experience supporting enterprise Customers in a managed-services or multi-client environment.
• Experience troubleshooting security and identity incidents in production environments.
• Experience working within ITSM ticketing and change management processes.
• Strong analytical, troubleshooting, and communication skills.
• Fluent English (B2 minimum) - non-negotiable given Customer-facing interaction.

Technical Knowledge

• Microsoft Defender for Endpoint - onboarding, ASR rules, TVM triage, EDR block-mode, alert investigation;
• Entra ID / Azure AD - Conditional Access authoring, MFA/passwordless, PIM, group-based licensing, identity protection;
• Microsoft Defender for Cloud basics - secure score, recommendations, regulatory compliance dashboards;
• Privileged Access Management - PAM tool operations (e.g. CyberArk, BeyondTrust, Delinea), safes management, session recording review;
• Compliance & DLP - Microsoft Purview endpoint DLP, sensitivity labels at endpoint, Intune compliance policies;
• PowerShell and Microsoft Graph for identity/security automation;
• SIEM concepts (Microsoft Sentinel preferred) - enough to interpret alerts and construct queries;
• Familiarity with EU regulatory context (EUDPR, GDPR) and ISO 27001 controls;
• Network / WAF security exposure.

Preferred Qualifications

• Knowledge of ITIL and operational support practices;
• Microsoft SC-300 (Identity and Access Administrator) OR SC-200 (Security Operations Analyst);
• Experience working in 24x7 or multi-Customer managed-security environments;
• Experience working in regulated or highly available environments.

Working model: Standard hybrid working pattern, with periodic Customer-site travel; first-line escalation coverage for endpoint isolation events and participation in planned out-of-hours maintenance may be required.

Benefits

Your Life @ Qualco Group

On top of challenging work environment, we are offering:

Competitive compensation, ticket restaurant card, and annual bonus programs

Cutting-edge IT equipment, mobile and data plan

Modern facilities, free coffee and beverages, indoor parking, and company bus

Private health insurance, onsite occupational doctor, and workplace counselor

Flexible working model, hybrid benefits & home equipment benefits

Onsite gym, wellness facilities, and ping pong room

Career and talent development tools

Mentoring, coaching, personalized annual learning and development plan

Employee referral bonus, regular wellbeing, ESG and volunteering activities

Your race, gender identity and expression, age ethnicity or disability make no difference in Quento Technologies S.A. We want to attract, develop, promote, and retain the best people based only on their ability and behavior.

Disclaimer: Quento Technologies S.A. collects and processes personal data in accordance with the EU General Data Protection Regulation (GDPR). We are bound to use the information provided within your job application for recruitment purposes only and not to share these with any third parties. For more details on the processing of your personal data during the Recruitment procedure, please be informed in the Recruitment Notice, before the submission of your application.