Azure Security Engineer

Job Description:

• Design, implement, and maintain security controls across Microsoft Azure and hybrid cloud environments.
• Manage Microsoft Entra ID (Azure AD), RBAC, Conditional Access, MFA, PIM, managed identities, service principals, and least-privilege access.
• Configure and manage Azure security services including Defender for Cloud, Microsoft Sentinel, Azure Firewall, WAF, DDoS Protection, NSG and Private Link.
• Implement secure network architecture including VNets, subnet segmentation, VPN, ExpressRoute, VNet peering and private endpoints.
• Configure and manage Azure Policy, initiatives, security baselines, compliance and governance controls.
• Manage Azure Key Vault, including secrets, certificates, encryption keys, access policies and key rotation.
• Implement security for Azure VMs, Storage Accounts, Azure SQL, App Services, AKS/containers and other PaaS workloads.
• Monitor and remediate vulnerabilities and security recommendations using Microsoft Defender for Cloud.
• Configure Microsoft Sentinel data connectors, analytics rules, alerts, incidents, workbooks and automation/playbooks.
• Perform security monitoring, threat detection, investigation, threat hunting and incident response.
• Configure Azure Monitor, Log Analytics, diagnostic settings and security logging.
• Identify security gaps and perform remediation based on Microsoft Cloud Security Benchmark, CIS, NIST and other compliance requirements.
• Implement encryption for data at rest and in transit and ensure appropriate backup and recovery security.
• Work with infrastructure, network, DevOps and application teams to implement secure cloud solutions.
• Support security assessments, audits, vulnerability management and compliance activities.

Mandatory Skills:

• Azure Security
• Microsoft Entra ID / Azure AD
• Azure RBAC, PIM, MFA, Conditional Access
• Microsoft Defender for Cloud
• Microsoft Sentinel / SIEM
• Azure Firewall / NSG / WAF
• Azure Key Vault
• Azure Policy
• Azure Monitor / Log Analytics
• Vulnerability Management
• Cloud Security / CSPM
• Incident Response