Azure Security Engineer

Title :: Azure Cloud Security Engineer

Location:: Chicago, IL (On Site)

Job Summary

5+ years of experience in Azure Native Security

3+ years of hands-on experience in building and deploying Infrastructure-as-Code (IaC) modules using Terraform, Bicep, and similar tools for provisioning, managing, and monitoring the security for resources/landing zones in Azure

2+ years of experience in building and deploying security, governance, and compliance guardrails in cloud environments using Policy-as-Code modules

Experience with Cloud Security Posture Management tools such as Microsoft Defender, Palo Alto Prisma Cloud, DevSecOps tools, network firewalls, and web application firewalls

Must-Have

Knowledge of CNAPP/CWPP tools, Azure Entra ID, container security, next-gen network firewalls, web application firewalls, encryption key management, and secrets management

Bachelor's degree in computer science or equivalent in related fields

Highly desirable to have certifications in Azure Security

Good understanding of Azure Security Reference Architecture, Well-Architected Framework, and industry best practices in cloud security

Good-to-Have

Good knowledge and experience with third-party tools such as Palo Alto NextGen Firewalls, Qualys VMDR, CrowdStrike Falcon EDR, Zscaler SASE, Snyk, Aqua CNAPP, Imperva WAF, etc., for building defense-in-depth security controls

Responsibility of/Expectations from the Role

Configure Azure Native Security Services (Azure WAF, Azure Firewall, Defender for Cloud, KMS, Logs...)

Manage Azure Security Posture

Manage Compliance Score in Azure

Identify and implement gaps in Azure Security

Coordinate with platform teams for remediation

Understand cloud misconfigurations and vulnerabilities and prioritize for remediation