Azure Security Specialist

Job Description: Azure Security Specialist

Role Summary

We are seeking an experienced Azure Security Specialist, working closely with Security and Infrastructure stakeholders to define, implement, and govern Azure security blueprints and standards. The role will focus on designing secure cloud platforms, networking security controls, and ensuring alignment with enterprise security policies and best practices.

Key Responsibilities

• Define and maintain Azure security architecture and reference blueprints.
• Partner with Security and Infrastructure teams to implement secure-by-design cloud solutions.
• Design and govern Azure networking security, including VNets, NSGs, Azure Firewall, Private Endpoints, DDoS Protection, and network segmentation.
• Implement and manage identity and access security using Microsoft Entra ID, RBAC, Conditional Access, and Privileged Identity Management (PIM).
• Establish security controls, monitoring, and compliance using Microsoft Defender for Cloud, Sentinel, and Azure Policy.
• Conduct security reviews, risk assessments, and recommend remediation activities.
• Support cloud governance, security standards, and operational best practices.

Required Skills & Experience

• Strong hands-on experience with Azure security architecture and cloud security best practices.
• Deep knowledge of Azure networking and security services.
• Experience with Microsoft Entra ID, Zero Trust principles, and identity governance.
• Expertise in security monitoring, threat detection, and incident response within Azure.
• Familiarity with Infrastructure as Code (Terraform, Bicep, or ARM templates).
• Strong stakeholder management skills and ability to collaborate across Security, Infrastructure, and Engineering teams.

Preferred Certifications

• Microsoft Certified: Azure Security Engineer Associate (AZ-500)
• Microsoft Certified: Azure Solutions Architect Expert
• CISSP, CCSP, or equivalent security certifications

Key Outcome Deliver a secure, scalable, and compliant Azure landing zone and security blueprint that enables the organisation to adopt cloud services safely and consistently