Azure Security Engineer - Encryption & Key Management

Description :

Job Title : Azure Security Engineer Encryption & Key Management.

Experience : 5+ Years.

Location : Pune (Hybrid).

Job Summary :

We are seeking an experienced Azure Security Engineer with a strong background in encryption technologies, key management, and cloud security.

The ideal candidate will have hands-on experience with Microsoft Azure Security Servicesincluding Azure Key Vault, Managed HSM, and Dedicated HSMand will play a key role in designing and implementing secure encryption solutions across enterprise environments.

Key Responsibilities :

- Implement, configure, and manage Azure KeyVault, Managed HSM, and Dedicated HSM services for secure key and secret management.

- Support internal teams and business units in integrating and maintaining encryption solutions across cloud and on-prem environments.

- Ensure compliance with data encryption standards, policies, and regulatory requirements.

- Develop and automate infrastructure deployments using Infrastructure as Code (IaC) principles.

- Utilize PowerShell or Bash scripting for system administration, configuration management, and automation tasks.

- Collaborate with cross-functional teams to design secure, scalable, and reliable cloud environments.

- Manage and monitor infrastructure components such as load balancers, firewalls, databases, and logging/monitoring tools.

- Create and maintain technical documentation, standard operating procedures, and architecture diagrams.

Required Skills & Qualifications :

- Minimum 5 years of experience in cloud security or related infrastructure roles.

- Hands-on experience with Azure Security Technologies Azure KeyVault, Azure Managed HSM, or Dedicated HSM.

- Strong understanding of data encryption standards, cryptography, and key management best practices.

- Proficiency in Azure administration and Infrastructure as Code (IaC) tools.

- Solid scripting skills in PowerShell and/or Bash for automation and OS administration.

- Good understanding of network and infrastructure components (load balancers, firewalls, databases, monitoring, alerting).

- Excellent troubleshooting, documentation, and communication skills.

Preferred Qualifications (Good to Have) :

- Experience with Azure Policy, Azure Defender, or Microsoft Sentinel.

- Knowledge of security compliance frameworks (ISO 27001, NIST, SOC2).

- Familiarity with DevSecOps practices and CI/CD pipeline integration for secure deployments.