Azure Security engineer

We are looking for a skilled Azure Security Engineer with 6+ years of overall IT experience to secure our Microsoft Azure cloud environment. The ideal candidate will implement security controls, monitor threats, manage identity and access, and ensure compliance across Azure workloads, working closely with platform, DevOps, and compliance teams.

Essential Skills: • Design, implement, and manage security controls across Azure subscriptions, resource groups, and workloads

• Configure and manage Microsoft Defender for Cloud for threat protection and security posture management

•

Implement and maintain Azure network security: NSGs, Azure Firewall, Web Application Firewall (WAF), and DDoS protection

• Manage identity and access security using Azure AD (Entra ID): Conditional Access, MFA, Privileged Identity Management (PIM), and RBAC

• Configure and manage Azure Key Vault for secrets, certificates, and encryption key management

• Monitor security events and respond to incidents using Defender

• Conduct security assessments, vulnerability scans, and remediation of identified risks

• Implement and enforce Azure Policy and governance controls for security and compliance

• Support security integration into CI/CD pipelines (DevSecOps) including SAST/DAST scanning

• Assist in achieving and maintaining compliance with standards such as ISO 27001, SOC 2, BIO, or GDPR

• Perform log analysis using Azure Monitor and Log Analytics• Collaborate with platform and DevOps teams to embed security best practices into architecture• Prepare security documentation, reports, and audit evidence• Stay current on emerging Azure security features, threats, and best practices

• 6+ years of overall IT experience, with 3+ years specifically in Azure/cloud security• Hands-on experience with Microsoft Defender for Cloud and Microsoft Sentinel• Strong understanding of Azure AD (Entra ID): Conditional Access, MFA, PIM, RBAC• Experience with Azure network security tools: NSGs, Azure Firewall, WAF, VPN/ExpressRoute security• Proficiency with Azure Key Vault for secrets and certificate management• Experience with Azure Policy, Blueprints, and governance/compliance frameworks• Familiarity with Infrastructure as Code security scanning (Terraform, ARM, Bicep)• Scripting skills: PowerShell, Python, or Bash for security automation• Understanding of DevSecOps practices and integrating security into CI/CD pipelines is good to have• Knowledge of compliance standards such as ISO 27001, SOC 2, NIST, GDPR, or HIPAA• Experience with vulnerability management is good to have• Strong analytical, troubleshooting, and incident response skills• Good communication skills to work with cross-functional and compliance teamsClear Understanding of Infrastructure as a code(IaC)

• Microsoft Certified: Azure Security Engineer Associate (AZ-500)

• Microsoft Certified: Identity and Access Administrator Associate (SC-300) —• Certified Information Systems Security Professional (CISSP) — • CompTIA Security+ —Secirity Architect:(SC-300) — • Strong attention to detail and risk-aware mindset• Ability to work independently while collaborating across teams• Effective communication of security risks to technical and non-technical stakeholders• Ownership mindset with a focus on proactive threat detection and continuous improvement