Accountabilities

In this role, you will strengthen cloud security operations, protect critical infrastructure, and ensure compliance with relevant security and regulatory standards. Your main responsibilities will include:

Manage and secure cloud infrastructure and cloud-based applications, primarily within Microsoft Azure environments.

Protect containerized workloads and Kubernetes environments, including Azure Kubernetes Service (AKS), through network policies, workload identity controls, runtime protection, and container image scanning.

Own and continuously improve Cloud Security Posture Management (CSPM), identifying and remediating configuration weaknesses across cloud environments.

Secure infrastructure-as-code orchestration platforms, including Terraform and OpenTofu, by implementing access controls, secrets management, and deployment approval workflows.

Manage identity and access security through Microsoft Entra ID, including Conditional Access, Entitlement Management, and just-in-time (JIT) privileged access models.

Review network architectures and proposed connectivity changes, providing security recommendations on network segmentation, sensitive data flows, and firewall controls.

Collaborate with IT and Site Reliability Engineering (SRE) teams to investigate and resolve network security concerns.

Administer Zero Trust network access and edge security solutions to protect access to corporate and cloud resources.

Manage broader enterprise security solutions, including SIEM, Data Loss Prevention (DLP), Endpoint Detection and Response (EDR), Extended Detection and Response (XDR), and vulnerability management tools.

Monitor security alerts, investigate potential threats, respond to incidents, and participate in the security incident response on-call rotation.

Conduct threat analyses, vulnerability assessments, and risk evaluations, documenting findings, coordinating remediation efforts, and reporting progress to leadership.

Develop queries, scripts, integrations, and automated workflows to improve cloud security operations and operational efficiency.

Partner with development teams to integrate security practices into the Software Development Lifecycle (SDLC) and CI/CD pipelines.

Perform regular cloud configuration and access reviews to maintain compliance with established security standards.

Participate in security audits and assessments, supporting governance, risk management, and compliance (GRC) initiatives.

Requirements

The ideal candidate is a hands-on cloud security professional with extensive experience protecting modern cloud environments, containerized applications, and enterprise infrastructure. You should bring the following qualifications and technical capabilities:

Bachelor's degree in Information Security, Computer Science, or a related field preferred; equivalent professional experience will also be considered.

At least 5 years of experience in cloud security engineering or a closely related role.

Extensive hands-on experience securing cloud infrastructure and cloud-based applications, preferably in Microsoft Azure; AWS experience is an advantage.

Strong network security expertise, including network architecture, connectivity, segmentation, and firewall management.

Practical experience securing containerized workloads and Kubernetes environments, particularly AKS, including network policies, workload identities, and runtime protection.

Experience with Cloud Security Posture Management (CSPM) tools and remediation of cloud misconfigurations.

Experience securing infrastructure-as-code platforms and deployment pipelines, particularly Terraform or OpenTofu.

Strong knowledge of Microsoft Entra ID, including Conditional Access, Entitlement Management, and just-in-time privileged access.

Experience implementing Zero Trust and Secure Access Service Edge (SASE) solutions, such as Cloudflare Zero Trust, WAF, and Gateway, or equivalent technologies.

Familiarity with security frameworks such as NIST, ISO 27001, and CIS, as well as compliance frameworks including HITRUST and PCI DSS.

How Jobgether works

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1