Senior Azure Security Engineer

We are looking for a skilled Azure Security Engineer with 6+ years of overall IT experience, including strong hands-on experience in Azure/Cloud Security, to secure and protect enterprise Microsoft Azure environments. The successful candidate will be responsible for implementing security controls, managing identity and access, monitoring threats, responding to security incidents, strengthening cloud governance, and ensuring compliance across Azure workloads.

The role requires close collaboration with Platform, DevOps, Infrastructure, Security, and Compliance teams to embed security best practices throughout the cloud environment and development lifecycle.

Must-Have Skills

6+ years of overall IT experience.

Minimum 3+ years of hands-on Azure / Cloud Security experience.

Strong hands-on experience with Microsoft Azure security.

Strong experience with Microsoft Defender for Cloud.

Experience with Microsoft Sentinel and security monitoring.

Strong understanding of Microsoft Entra ID (Azure AD).

Hands-on experience with Conditional Access, MFA, PIM, and RBAC.

Strong experience with Azure network security, including NSGs, Azure Firewall, WAF, and DDoS protection.

Experience securing VPN / ExpressRoute connectivity.

Strong hands-on experience with Azure Key Vault.

Experience with Azure Policy and cloud governance/compliance controls.

Clear understanding of Infrastructure as Code (IaC) and IaC security.

Experience with Terraform, ARM templates, or Bicep.

Scripting/automation experience using PowerShell, Python, or Bash.

Strong understanding of cloud security architecture, threat detection, vulnerability management, and incident response.

Strong analytical and troubleshooting skills.

Ability to communicate security risks effectively to both technical and non-technical stakeholders.

Good-to-Have Skills

Experience implementing DevSecOps practices.

Experience integrating security controls and scanning into CI/CD pipelines.

Knowledge of SAST/DAST tools and application security.

Experience with vulnerability management.

Knowledge of ISO 27001, SOC 2, NIST, GDPR, or HIPAA.

Experience working in enterprise or regulated environments.

Strong understanding of security architecture and cloud governance.

Preferred Certifications

Microsoft Certified: Azure Security Engineer Associate (AZ-500)

Microsoft Certified: Identity and Access Administrator Associate (SC-300)

CISSP

CompTIA Security+

Certifications are an advantage, but strong hands-on Azure Security experience should be prioritised.