Job Description :

- Design, implement, and maintain security controls across Microsoft Azure and hybrid cloud environments.

- Manage Microsoft Entra ID (Azure AD), RBAC, Conditional Access, MFA, PIM, managed identities, service principals, and least-privilege access.

- Configure and manage Azure security services including Defender for Cloud, Microsoft Sentinel, Azure Firewall, WAF, DDoS Protection, NSG and Private Link.

- Implement secure network architecture including VNets, subnet segmentation, VPN, ExpressRoute, VNet peering and private endpoints.

- Configure and manage Azure Policy, initiatives, security baselines, compliance and governance controls.

- Manage Azure Key Vault, including secrets, certificates, encryption keys, access policies and key rotation.

- Implement security for Azure VMs, Storage Accounts, Azure SQL, App Services, AKS/containers and other PaaS workloads.

- Monitor and remediate vulnerabilities and security recommendations using Microsoft Defender for Cloud.

- Configure Microsoft Sentinel data connectors, analytics rules, alerts, incidents, workbooks and automation/playbooks.

- Perform security monitoring, threat detection, investigation, threat hunting and incident response.

- Configure Azure Monitor, Log Analytics, diagnostic settings and security logging.

- Identify security gaps and perform remediation based on Microsoft Cloud Security Benchmark, CIS, NIST and other compliance requirements.

- Implement encryption for data at rest and in transit and ensure appropriate backup and recovery security.

- Work with infrastructure, network, DevOps and application teams to implement secure cloud solutions.

- Support security assessments, audits, vulnerability management and compliance activities.

Mandatory Skills :

- Azure Security

- Microsoft Entra ID / Azure AD

- Azure RBAC, PIM, MFA, Conditional Access

- Microsoft Defender for Cloud

- Microsoft Sentinel / SIEM

- Azure Firewall / NSG / WAF

- Azure Key Vault

- Azure Policy

- Azure Monitor / Log Analytics

- Vulnerability Management

- Cloud Security / CSPM

- Incident Response