Azure Security Engineer

Duration of Contract: 06 months + Possible Extension

We are looking for a skilled Azure Security Engineer with 6+ years of overall IT experience to secure our Microsoft Azure cloud environment. The ideal candidate will implement security controls, monitor threats, manage identity and access, and ensure compliance across Azure workloads, working closely with platform, DevOps, and compliance teams.

Responsibilities

• Design, implement, and manage security controls across Azure subscriptions, resource groups, and workloads.
• Configure and manage Microsoft Defender for Cloud for threat protection and security posture management.
• Implement and maintain Azure network security: NSGs, Azure Firewall, Web Application Firewall (WAF), and DDoS protection.
• Manage identity and access security using Azure AD (Entra ID): Conditional Access, MFA, Privileged Identity Management (PIM), and RBAC.
• Configure and manage Azure Key Vault for secrets, certificates, and encryption key management.
• Monitor security events and respond to incidents using Defender.
• Conduct security assessments, vulnerability scans, and remediation of identified risks.
• Implement and enforce Azure Policy and governance controls for security and compliance.
• Support security integration into CI/CD pipelines (DevSecOps) including SAST/DAST scanning.
• Assist in achieving and maintaining compliance with standards such as ISO 27001, SOC 2, BIO, or GDPR.
• Perform log analysis using Azure Monitor and Log Analytics.
• Collaborate with platform and DevOps teams to embed security best practices into architecture.
• Prepare security documentation, reports, and audit evidence.
• Stay current on emerging Azure security features, threats, and best practices.

Required Skills & Experience

• 6+ years of overall IT experience, with 3+ years specifically in Azure/cloud security.
• Hands-on experience with Microsoft Defender for Cloud and Microsoft Sentinel.
• Strong understanding of Azure AD (Entra ID): Conditional Access, MFA, PIM, RBAC.
• Experience with Azure network security tools: NSGs, Azure Firewall, WAF, VPN/ExpressRoute security.
• Proficiency with Azure Key Vault for secrets and certificate management.
• Experience with Azure Policy, Blueprints, and governance/compliance frameworks.
• Familiarity with Infrastructure as Code security scanning (Terraform, ARM, Bicep).
• Scripting skills: PowerShell, Python, or Bash for security automation.
• Understanding of DevSecOps practices and integrating security into CI/CD pipelines is good to have.
• Knowledge of compliance standards such as ISO 27001, SOC 2, NIST, GDPR, or HIPAA.
• Experience with vulnerability management is good to have.
• Strong analytical, troubleshooting, and incident response skills.
• Good communication skills to work with cross-functional and compliance teams.
• Clear Understanding of Infrastructure as a code (IaC).

Certifications

• Microsoft Certified: Azure Security Engineer Associate (AZ-500)
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Certified Information Systems Security Professional (CISSP)
• CompTIA Security+
• Security Architect: (SC-300)