JOB DESCRIPTION:

- Position: Senior Azure Security Engineer

- Employment Type: Full-Time

- Experience: 714 Years

- Location: Chennai / Hyderabad, India

- Work Mode: 5 Days Work From Office (Night shift)

- Notice Period: Immediate Joiners Only

Must-Have Skills:

- 6+ years in Cloud Security, including 3+ years in Azure & Microsoft 365

- Azure AD (Entra ID), Conditional Access, RBAC, PIM

- Microsoft Defender, Sentinel, Purview

- Zero Trust Security Architecture

- Cloud Security Incident Response & Remediation

- Azure Workload Security (AKS, Azure AI, etc.)

- Microsoft 365 Security (Defender, DLP, Sensitivity Labels, Identity Protection)

Position Overview:

We are seeking an experienced and highly skilled Senior Azure Security Engineer to lead the design, implementation, and management of security controls across Microsoft Azure and Microsoft 365 environments.

The ideal candidate will play a critical role in strengthening our cloud security posture, protecting enterprise data, and enabling secure adoption of advanced Azure services including Azure AI, Cognitive Search, Document Intelligence, and Azure Kubernetes Service (AKS).

This role requires deep expertise in Azure security, Microsoft 365 security, cloud governance, incident response, and Zero Trust architecture.

Key Responsibilities:

Security Governance & Compliance:

- Define, implement, and enforce Azure and Microsoft 365 security policies, standards, and governance frameworks.

- Ensure alignment with security frameworks such as NIST, ISO 27001, CIS Controls, and Zero Trust principles.

- Conduct security assessments, audits, and compliance reviews.

Azure Security Management:

- Manage and optimize Azure security services including:

1. Microsoft Defender for Cloud

2. Microsoft Sentinel

3. Azure Key Vault

4. Azure Policy

5. Azure Firewall

6. RBAC (Role-Based Access Control)

7. Privileged Identity Management (PIM)

Advanced Azure Workload Security:

- Secure Azure AI environments, machine learning models, APIs, and data pipelines.

- Implement security controls for Azure Cognitive Search and Document Intelligence services.

- Design and maintain AKS security including:

1. Kubernetes RBAC

2. Network Policies

3. Identity & Access Management

4. Container Security

5. Runtime Threat Protection

Microsoft 365 Security:

- Implement and manage Microsoft 365 security controls including:

1. Microsoft Defender Suite

2. Data Loss Prevention (DLP)

3. Sensitivity Labels

4. Identity Protection

5. Exchange Online Protection

6. Conditional Access

7. Multi-Factor Authentication (MFA)

8. Insider Risk Management

Threat Detection & Incident Response:

- Monitor, investigate, and respond to security incidents across Azure and Microsoft 365 environments.

- Lead incident response activities and coordinate remediation efforts.

- Develop detection rules, playbooks, and automated response workflows.

DevSecOps & Automation:

- Collaborate with DevOps and application teams to integrate security into CI/CD pipelines.

- Automate governance, compliance, and security monitoring using:

1. PowerShell

2. Azure CLI

3. Terraform

4. Infrastructure as Code (IaC) tools

Security Architecture:

- Design secure cloud architectures and provide security guidance for cloud-native applications and services.

- Conduct architecture reviews and risk assessments for new cloud initiatives.

Required Qualifications:

Experience:

- 714 years of overall IT experience.

- Minimum 6+ years of experience in Cloud Security.

- Minimum 3+ years of hands-on experience securing Microsoft Azure and Microsoft 365 environments.

Identity & Access Management:

- Strong expertise in:

1. Azure AD (Microsoft Entra ID)

2. Conditional Access Policies

3. Role-Based Access Control (RBAC)

4. Privileged Identity Management (PIM)

Security Tools:

- Hands-on experience with:

1. Microsoft Defender Suite

2. Microsoft Sentinel

3. Microsoft Purview

4. Defender for Cloud

Cloud Workload Security:

- Experience securing Azure workloads such as:

1. Azure Kubernetes Service (AKS)

2. Azure AI Services

3. Azure Cognitive Services

4. Other enterprise-scale Azure workloads

Microsoft 365 Security:

- Strong knowledge of:

1. Microsoft Defender

2. Data Loss Prevention (DLP)

3. Sensitivity Labels

4. Identity Protection

5. Compliance & Governance Controls