Job Description: Senior Engineer - Cloud and Network Security (Azure)

Position Overview: We are looking for a highly skilled Senior Engineer specializing in Cloud and Network
Security, with a strong emphasis on Azure cloud environments. The successful candidate will be
responsible for designing, implementing, and maintaining robust security measures to safeguard our
cloud infrastructure and networks. This role requires expertise in Azure security services, network
architecture, and a deep understanding of cloud security best practices.

Responsibilities:

1. Azure Cloud Security:

o Design and implement security controls for Azure environments, leveraging services such
as Azure Security Center, Azure Policy, Azure Sentinel, and Azure Active Directory.
o Conduct security assessments and audits to ensure compliance with security policies and
industry standards.

2. Network Security Architecture:

o Architect, implement, and maintain secure network architectures for both on-premises

and cloud environments.

o Design and implement network security controls, including firewalls, intrusion
detection/prevention systems, VPNs, DDoS protection, Bastion Hosts and network
segmentation, Key Vault integration, Azure Sentinel Integration

3. Azure Networking:

o Configure and manage Azure networking components, including Azure Virtual Networks
(VNets), Azure VPN Gateways, Azure ExpressRoute, ASG, VNet peering, Azure Policies,
Network Watcher

o Implement and optimize network security groups (NSGs) to control traffic flow within

Azure environments.

4. Identity and Access Management (IAM):

o Collaborate with IAM teams to integrate Azure AD and implement secure identity and

access controls in Azure environments.

o Ensure proper authentication and authorization mechanisms are in place for cloud

resources.

5. Incident Response and Monitoring:

o Lead incident response efforts in Azure environments, investigating and mitigating

security incidents.

o Implement continuous monitoring solutions for Azure resources, utilizing Azure Monitor,
Threat Analytics, Network Watcher and other relevant tools.

6. Cloud Compliance:

o Ensure adherence to regulatory requirements and industry standards in Azure

environments.

o Collaborate with compliance teams to conduct audits and assessments.

7. Automation and Scripting:

o Develop and implement automation scripts using PowerShell, Azure CLI, or other scripting

languages to streamline security processes and responses.

o Implement Infrastructure as Code (IaC) for security controls in Azure environments.

8. Documentation and Knowledge Transfer:

o Document security architectures, configurations, and best practices for Azure cloud and

network security.

o Conduct knowledge transfer sessions for team members and relevant stakeholders.

9. Collaboration and Leadership:

o Collaborate with cross-functional teams, including IT, DevOps, and compliance, to align

security initiatives with organizational goals.

o Provide leadership and mentorship to junior team members.

Qualifications:

• Bachelor's or Master's degree in Computer Science, Information Security, or related field.
• Proven experience in designing, implementing, and managing security controls in Azure
environments.

• Relevant certifications such as Microsoft Certified: Azure Security Engineer Associate, CISSP, CCSP,

etc.

• Strong scripting and automation skills (PowerShell, Python, etc.).

• In-depth knowledge of cloud security best practices and network security concepts.

Skills and Abilities:

• Excellent problem-solving and analytical skills. • Strong communication and collaboration skills.

• Proven ability to lead and drive security initiatives in cloud environments.

• Up-to-date knowledge of Azure services, cloud security trends, threats, and technologies.
• Project management skills with the ability to handle multiple tasks and priorities.