Azure Cloud Security Engineer

Job Description

Responsibilities:

• Design and implement secure Azure cloud environments, including zero trust architectures and secure landing zones.

• Configure and manage Azure security services such as Microsoft Defender for Cloud, Sentinel, Key Vault, and Azure Policy.

• Develop and enforce identity and access management best practices using tools like Azure AD, Conditional Access, and Privileged Identity Management.

• Oversee hybrid and cloud-native networking, including setting up VNETs, NSGs, firewalls, private endpoints, ExpressRoute, and VPNs.

• Conduct threat modeling and risk assessments to identify vulnerabilities and propose effective mitigations for Azure-hosted workloads.

• Ensure the security of core networking protocols, including BGP, DNS, IPSec, and HTTPS, as well as firewalls and other security technologies.

• Manage and configure firewalls and routers, including Checkpoint firewalls and Cisco ASA routers, to maintain secure network operations.

• Collaborate with cross-functional teams to establish and adhere to configuration management standards.

• Provide expert guidance on network authentication methods to enhance security and streamline operations.• Advanced knowledge of Azure security services, including Microsoft Defender for Cloud, Sentinel, and Key Vault.

• Strong expertise in hybrid and cloud-native networking concepts such as VNETs, NSGs, firewalls, and VPNs.

• Proven experience in designing and implementing zero trust architectures and secure landing zones.

• In-depth understanding of identity and access management practices, including Azure AD and Conditional Access policies.

• Familiarity with core networking protocols such as BGP, DNS, IPSec, and HTTPS.

• Hands-on experience with configuring and managing Checkpoint and Cisco ASA firewalls and routers.

• Ability to conduct threat modeling, assess risks, and design mitigation strategies for cloud-hosted environments.

• Solid understanding of configuration management practices and tools.

Hybrid remote