Description

Key Skills: Microsoft Entra, Azure, Azure Devops, Identity Access Management, Azurecloud, Azure Governance, Policy, IAC, Terraform, Pipeline

Roles and Responsibilities:

• Implement and manage Azure security controls using Azure Defender for Cloud, governance policies, and security baselines.
• Configure and support identity and access security using Entra ID, IAM, and Privileged Identity Management (PIM).
• Design and enforce Azure governance, policy, and compliance controls across enterprise platforms.
• Integrate security controls into CI/CD pipelines and DevOps workflows, including SAST, DAST, and container image scanning.
• Review and secure Infrastructure as Code (Terraform) with embedded security controls and policy enforcement.
• Support vulnerability management, remediation tracking, security posture assessments, and compliance requirements.
• Develop security automation scripts and tooling using Python, Bash, or PowerShell to improve security operations efficiency.
• Partner with platform, DevOps, and security teams to improve cloud security posture and support audits, documentation, and security runbooks.

Skills Required:

• Strong hands-on experience with Microsoft Azure cloud security and governance practices.
• Good understanding of Microsoft Entra ID, IAM, and Privileged Identity Management (PIM).
• Experience implementing Azure Governance, Azure Policy, and compliance management controls.
• Expertise in DevSecOps practices including SAST, DAST, container image scanning, and secure CI/CD pipelines.
• Strong knowledge of Terraform and Infrastructure as Code security practices.
• Experience with Microsoft Defender for Cloud and vulnerability management processes.
• Proficiency in scripting and automation using Python, Bash, or PowerShell.
• Understanding of secrets management and secure access control mechanisms.
• Familiarity with cloud security best practices, risk management, and security compliance frameworks.
• Ability to collaborate effectively with cross-functional platform, DevOps, and security teams.

Education: Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field

Key Skills

Education

Any Graduate