Description

You will support the implementation and maintenance of security configurations across Azure services and Landing Zones.

Responsibilities

• Assist in maintaining platform security components including Azure Firewall, NSGs, ASGs, Private Endpoints, VNETs, routing, managed identities, and Key Vault.
• Monitor and triage alerts from Defender for Cloud and Sentinel, escalating platform-level security events when necessary.
• Support platform access governance using Azure RBAC and PIM, including access reviews and identity audits.
• Help apply and monitor Azure Policy, tagging standards, and platform guardrails to ensure compliance.
• Contribute to basic automation tasks using PowerShell, Azure CLI, Bicep, or Terraform to improve platform security tooling.

Required Skills

• Foundational experience with Azure services: subscriptions, resource groups, VNETs, RBAC, and monitoring.
• Basic understanding of cloud security principles: least privilege, network security, encryption, and threat detection.
• Exposure to platform security tools: Azure Firewall, NSGs, ASGs, Defender for Cloud, Sentinel, Key Vault, and PIM.
• Basic scripting or automation knowledge using PowerShell, Azure CLI, Bicep, or Terraform.
• Familiarity with compliance frameworks such as CIS Benchmarks, ISO 27001, or NIST.
• Strong communication and documentation skills.
• Willingness to learn and pursue Azure certifications (AZ-900, SC-900, AZ-104, AZ-500).

Preferred Skills

• Bachelor's degree in IT, Computer Science, Cybersecurity, or related field, or equivalent bootcamp/training experience.
• Experience working with cloud engineers, architects, and Cyber Ops teams.
• Participation in platform security reviews, change boards, and engineering stand-ups.

Key Skills

Education

Any Graduate