Cloud Security Architect

Context Cloud-Native Infrastructure Security, Compliance & Enforcement (Azure Services)

We are seeking a skilled and motivated Cloud professional with strong expertise in Azure infrastructure security, security assurance, and cloud architecture. The role will focus on assessing Azure services, defining and implementing security controls, and identifying security risks, misconfigurations, and control gaps across enterprise Azure environments.

Key Responsibilities

• Evaluate new and existing Azure services from a security, governance and risk perspective.
• Define, review, and recommend security policies, standards, and controls for Azure infrastructure and services.
• Review existing Azure security policies and controls and identify opportunities for improvement.
• Assess whether existing policies and controls adequately address emerging Azure services, technologies, and security risks.
• Translate security requirements and identified risks into practical and implementable Azure controls.
• Continuously enhance cloud security policies and controls based on evolving Azure capabilities, threats, and organizational requirements.
• Identify potential security risks, misconfigurations, and gaps associated with Azure infrastructure and services.
• Provide actionable recommendations to strengthen the overall security posture of Azure environments.
• Apply the Microsoft Cloud Security Benchmark (MCSB) to assess and improve Azure security posture.
• Use attack path analysis to identify potential attack routes and security weaknesses within Azure environments.

Required Skills & Experience:

• Strong understanding of Microsoft Azure infrastructure and core services.
• Strong knowledge of Azure networking, compute, storage, identity, access management, and resource management.
• Experience developing, reviewing, or assessing cloud security policies, standards, and controls.
• Ability to translate technical security risks and requirements into practical security controls.
• Experience assessing Azure infrastructure and services from a security perspective.
• Good understanding of the Microsoft Cloud Security Benchmark (MCSB) and its application to Azure environments.
• Understanding of attack path analysis and its use in identifying potential security risks and attack routes.
• Knowledge of Azure Policy, governance, and security best practices.
• Basic knowledge of Microsoft Defender for Cloud.
• Strong analytical, problem-solving, and risk-assessment skills.