Description

You will support the implementation and maintenance of security configurations across Azure services and Landing Zones.

This role is on-site.

Responsibilities

• Maintain platform security components including Azure Firewall, NSGs, ASGs, Private Endpoints, VNETs, routing, managed identities, and Key Vault.
• Monitor and triage alerts from Defender for Cloud and Sentinel, escalating platform-level security events.
• Support access governance using Azure RBAC and PIM, including access reviews and identity audits.
• Apply and monitor Azure Policy, tagging standards, and platform guardrails for compliance.
• Execute automation tasks using PowerShell, Azure CLI, Bicep, or Terraform to improve security tooling.

Required Skills

• Foundational experience with Azure services: subscriptions, resource groups, VNETs, RBAC, and monitoring.
• Understanding of cloud security principles: least privilege, network security, encryption, and threat detection.
• Exposure to Azure Firewall, NSGs, ASGs, Defender for Cloud, Sentinel, Key Vault, and PIM.
• Basic scripting or automation knowledge using PowerShell, Azure CLI, Bicep, or Terraform.
• Familiarity with compliance frameworks such as CIS Benchmarks, ISO 27001, or NIST.
• Strong communication and documentation skills.
• Willingness to pursue Azure certifications (AZ-900, SC-900, AZ-104, AZ-500).

Preferred Skills

• Bachelor's degree in IT, Computer Science, Cybersecurity, or equivalent training.
• Experience collaborating with cloud engineers, architects, and Cyber Ops teams.
• Participation in platform security reviews and change boards.

Key Skills

Education

Any Graduate