Cloud Security Senior Consultant

About the role

We are looking for a Cloud Security Senior Consultant to help our clients secure their Microsoft Azure environments. The role involves assessing cloud workloads, identifying vulnerabilities, and designing remediation strategies while ensuring compliance with industry standards.

Key responsibilities

• Assess the security posture of customer Azure workloads and identify gaps.
• Design and recommend security controls aligned with best practices and regulatory requirements.
• Evaluate and harden configurations for Azure services such as Microsoft Defender for Cloud, Sentinel, Key Vault, Azure AD (Entra ID), Privileged Identity Management, Azure Policy, Azure Monitor and Log Analytics.
• Lead security architecture workshops, risk assessments and governance reviews with client teams.
• Collaborate with cross‑functional teams to align security with operational and business objectives.
• Drive continuous improvement of security processes based on evolving threats and compliance frameworks.
• Ensure adherence to NIST, ISO/IEC 27001, HIPAA, GDPR, FedRAMP and other relevant standards.

Required profile

• Minimum 5 years of experience in cloud security architecture and assessment, primarily on Microsoft Azure.
• Strong knowledge of Azure security services and cloud‑native security patterns.
• Proven ability to communicate complex security concepts to technical and non‑technical audiences.
• Experience delivering client‑facing security assessments and workshops.
• Understanding of process governance, incident response planning and major incident response plans.

Required skills

• Microsoft Azure security services (Defender for Cloud, Sentinel, Key Vault, Azure AD/Entra ID, Privileged Identity Management, Azure Policy, Azure Monitor, Log Analytics).
• Vulnerability management and risk assessment.
• Security frameworks: NIST CSF, ISO/IEC 27001.
• Compliance standards: HIPAA, GDPR, FedRAMP.
• Microsoft Well‑Architected Review Assessment and Security Assessment Frameworks.
• Security operations center (SOC) integration and incident response coordination.