Description

You will own the strategic security architecture and remediation across Azure and hybrid environments.

Responsibilities

• Lead vulnerability remediation across Azure VMs (Windows/Linux), AKS clusters, App Services, and Storage Accounts.
• Review and guide fixes for code-related vulnerabilities identified via SAST/DAST and insecure dependencies.
• Build detailed hardening guides covering OS, Azure services, Kubernetes, networking, and identity layers.
• Drive large-scale backlog remediation by prioritizing issues and defining repeatable workflows.
• Act as senior advisor and escalation point for all security remediation streams, documenting gaps and improvement plans.

Required Skills

• 12–15+ years of experience in security architecture, cloud security, or infrastructure security.
• Deep hands-on experience with Azure security, including Compute (VMs), Containers (AKS, ACR), and PaaS services.
• Expertise in Identity & Access management using Azure AD/Entra ID, Managed Identities, and RBAC.
• Proficiency in Azure Networking security components (NSGs, WAF, Private Endpoints, Firewall).
• Experience securing Data services like Key Vault, SQL, and CosmosDB.
• Familiarity with Defender for Cloud and Azure Policy.
• Strong exposure to hardening Windows and Linux server environments.
• Ability to drive remediation across infrastructure, application, and cloud-native layers.
• Experience resolving complex remediation backlogs in enterprise environments.

Preferred Skills

• Experience with IaC hardening using Terraform or Bicep.
• Background in threat modeling or architecture risk reviews.

Key Skills

Education

Bachelor's degree