Description

Own platform security engineering, focusing on Azure governance, IaC security, and DevSecOps integration. You will embed security into the SDLC and enforce secure-by-default patterns across cloud services.

Responsibilities

• Lead security onboarding for new services, ensuring alignment with secure-by-default patterns and platform guardrails.
• Develop and refine security policies, baseline configurations, and Azure governance controls including RBAC and privileged access models.
• Embed security scanning, image validation, dependency checks, and IaC scanning into CI/CD pipelines using Azure DevOps.
• Create reusable DevSecOps templates and Terraform modules to enforce secure architecture and configuration standards.
• Participate in incident response activities and build automation for access reviews, remediation, and compliance reporting.

Required Skills

• 5+ years of experience in cloud security engineering, specifically with Microsoft Azure.
• Hands-on expertise in Terraform and infrastructure-as-code security practices.
• Proficiency in Python for automation, security tooling, and policy-as-code.
• Strong experience with Azure DevOps and CI/CD pipeline integration for security scanning.
• Deep understanding of Identity and Access Management (IAM), including workload identities and access control models.
• Experience with Microsoft Defender for Cloud and cloud security monitoring tools.
• Familiarity with compliance frameworks, vulnerability management, and policy enforcement.

Preferred Skills

• Experience with Jenkins for CI/CD pipeline integration.
• Strong background in threat detection, rule sets, and response playbooks.

Key Skills

Education

Any Graduate