Design and implement secure Azure configurations, guardrails, and reference architectures across identity, network, compute, and data.
Build and enforce policy-as-code and secure-by-default deployment patterns using Azure Policy and infrastructure-as-code.
Own and mature Cloud Security Posture Management (CSPM), including risk prioritization, remediation, and baseline alignment.
Implement, tune, operate, and optimize cloud security tooling and core security platforms, including Microsoft Defender, WAF, Microsoft Sentinel, Entra ID, CyberArk, CrowdStrike, and related capabilities.
Define and enforce security guardrails for AI usage and secure adoption of AI platforms.
Identify, assess, and mitigate cloud and AI security risks, including misconfigurations, access risks, and emerging threats.
Partner with platform and application security teams to integrate security into CI/CD pipelines and enable secure AI-assisted development practices.
Build automation to improve remediation, monitoring, and compliance reporting at scale.
Partner with engineering teams to translate security strategy into practical, implemented solutions.
Mentor junior engineers and provide technical leadership while serving as a senior escalation point for complex issues.
Requirements
Bachelor’s degree in Computer Science, Information Security, or a related field (or equivalent experience).
6+ years of experience in cloud security, cybersecurity engineering, or related fields.
Hands‑on experience securing Azure environments, including identity, network, and platform services.
Experience implementing and operating cloud security controls and tooling.
Strong understanding of cloud security risks and misconfiguration patterns, including identity and access risks.
Experience with Infrastructure as Code (Terraform, Bicep, ARM) and policy-as-code.
Proven ability to assess risk, prioritize remediation, and drive issues to resolution.
Experience partnering with engineering teams to implement practical, scalable security solutions.
The ability to meet or exceed the attendance and timeliness requirements of their departments.
An equivalent combination of education and experience may be substituted for this requirement.