Cloud Security Engineer
Role Overview
We are looking for a skilled Cloud Security Engineer with practical experience in Azure, Microsoft 365, and ideally Google Cloud Platform (GCP). This role focuses on evaluating and enhancing cloud security configurations and offering guidance on best practices for Azure IaaS and GCP setups. The ideal candidate will have a solid technical background in managing compute, networking, and storage in both cloud and hybrid environments, along with hands-on expertise in Terraform, Azure Defender, Conditional Access, and integrating security into DevOps workflows.
Responsibilities
-
Review and assess the security posture of cloud environments (Azure IaaS, containers, and DevOps pipelines) and provide actionable recommendations aligned with industry standards and emerging threats.
-
Design, implement, and maintain secure cloud infrastructure in Azure, including virtual networks, virtual machines, storage, and identity services, while supporting incident response as needed.
-
Manage and enhance Azure security across virtualized environments, container platforms (e.g., AKS), and DevOps pipelines; implement and evaluate security controls for cloud-native applications.
-
Analyze Terraform scripts and other infrastructure-as-code configurations to identify and mitigate potential security risks, providing guidance on secure automation practices.
-
Optimize cloud security monitoring tools (Azure Defender and equivalent GCP solutions), refine identity and access strategies, and embed security within DevSecOps/CI/CD processes to meet compliance and governance standards.
-
Partner with DevOps, networking, and development teams to integrate security into operational processes and promote continuous improvement and innovation across cloud platforms.
Required Skills & Experience
-
Minimum of 5 years’ experience in cloud security, particularly focused on Azure IaaS, with some exposure to GCP.
-
Hands-on experience managing security in Azure environments, including virtual machines, containers (AKS), and CI/CD pipelines.
-
Strong technical foundation in cloud compute, networking, and storage administration in hybrid or cloud-only environments.
-
Proficiency in Terraform and infrastructure-as-code practices, with experience reviewing code for security vulnerabilities.
-
Deep understanding of Azure security tools and services (e.g., Defender, Conditional Access), excellent problem-solving abilities, and the capability to communicate technical security concepts to diverse audiences.
Preferred Skills
-
Relevant certifications (e.g., Azure Security Engineer, Google Cloud Security Engineer).
-
Experience supporting security incident response and investigations.
-
Background in enterprise or regulated environments with formal governance processes.
-
Track record of leading security improvements and managing change in complex systems.
-
Consulting or advisory experience, with a proven ability to collaborate across multiple teams and build strong professional relationships.
