Azure Cloud Security Engineer

About the role

Join a global technology firm’s Cybersecurity Center of Excellence as an Azure Cloud Security Engineer. You will be responsible for securing Azure landing zones and the IaaS/PaaS services that run on them, working closely with cloud platform, infrastructure, networking and DevOps teams.

Key responsibilities

• Design, implement and validate security controls for Azure IaaS and PaaS resources against defined baselines.
• Support and troubleshoot Azure identity and access controls, including RBAC, managed identities and least‑privilege permissions.
• Implement and fine‑tune network security controls such as NSGs, Azure Firewall, private endpoints and network segmentation.
• Participate in security assessments of cloud architectures, identify risks and propose mitigations.
• Embed security controls into CI/CD pipelines, ensuring security is part of build, test and deployment.
• Own cloud security posture monitoring and lead remediation of CSPM findings.
• Configure and maintain Azure Policies to enforce governance across environments.
• Champion cloud security best practices and mentor colleagues across cloud‑focused teams.

Required profile

• Bachelor’s degree in IT, Computer Science, Cybersecurity, Engineering or related field, or equivalent practical experience.
• 1‑3 years of hands‑on experience in Azure cloud engineering, cloud security or infrastructure roles.
• Fluent written and verbal English.

Required skills

• Azure IaaS & PaaS services
• Azure landing zones (management groups, subscriptions, resource organization, policy implementation)
• Azure networking (VNets, subnets, NSGs, Azure Firewall, private endpoints)
• Azure Identity & Access Management (RBAC, managed identities, least‑privilege access)
• Infrastructure as Code – Terraform, Bicep or ARM templates
• Azure Policy and CSPM tools
• DevSecOps principles and security integration in CI/CD pipelines