Cloud Azure Security Engineer

Role overview A global consulting firm focused on AI-powered enterprise transformations is hiring a Cloud Azure Security Engineer to harden and protect client cloud estates on Microsoft Azure. The role centers on assessing security posture, designing and implementing identity and infrastructure controls, and guiding engineering teams toward sustainable remediation. It suits a hands-on engineer who can balance policy work, technical implementation, and stakeholder collaboration on enterprise-scale projects.

Responsibilities - Assess Azure environments across infrastructure, applications, and data to surface vulnerabilities, misconfigurations, and compliance gaps. - Author and maintain security policies and control standards aligned with industry frameworks and regulatory requirements. - Translate business and risk requirements into concrete technical controls spanning identity, network, and infrastructure layers. - Run recurring security audits, validate adherence to policy, and partner with engineering and operations teams to remediate findings. - Design and deploy cloud security solutions covering Entra ID, Azure networking, key management, and monitoring tooling. - Participate in incident response, including investigation, containment, and post-incident hardening recommendations.

Requirements - Bachelor's degree in Computer Science, Information Technology, or a related field; master's preferred. - 2+ years of cloud security engineering experience with a Microsoft Azure focus. - Deep hands-on experience with Microsoft Entra ID, including RBAC, service principals, managed identities, Conditional Access, MFA, and Privileged Identity Management. - Working knowledge of authentication and authorization protocols such as SAML, OAuth 2.0, and OpenID Connect. - Familiarity with infrastructure-as-code and CI/CD tooling, including Terraform, GitHub Actions, and containers. - Scripting and automation skills with PowerShell, Python, or Azure CLI, plus a grounding in Zero Trust and network security principles.

Nice to have - Experience with cloud security posture management and vulnerability tools such as Wiz or Microsoft Defender for Cloud. - Relevant certifications such as AZ-500, SC-300, or CCSP. - Strong communication skills for explaining technical risk to non-technical stakeholders.

Benefits and work setup - Full medical, dental, and vision coverage; 401(k) with employer contribution. - Generous paid time off plus 15 company-wide holidays and paid parental leave. - Remote-eligible position subject to a return-to-office policy that may require occasional on-site work for candidates near an office. - Posted salary range of $155,000–$165,000 USD, with final offer based on job-related factors.