Security Engineer

Calance is seeking a highly skilled and experienced Senior Azure Security Engineer responsible for ensuring the security and integrity of an Azure-based infrastructure. The role involves remediating vulnerabilities, fixing misconfigurations, and enhancing security across various Azure services and platforms while working closely with cross-functional teams to implement security best practices.

Responsibilities:

• Remediate OS-level and VM-configuration vulnerabilities on Windows servers
• Manage and secure Windows Server environments (2016–2022) through patching, Group Policy Objects (GPO), TLS hardening, and Desired State Configuration (DSC)
• Address Wiz VM vulnerability and misconfiguration findings
• Utilize Microsoft SCCM for patch management and automation
• Implement PowerShell automation at scale for efficient security management
• Tighten Network Security Groups (NSG) and firewalls, and ensure disk encryption (ADE/SSE-CMK) and endpoint protection
• Fix misconfigurations across Azure App Services, SQL, Storage, Key Vault, and other PaaS offerings
• Implement Azure PaaS security controls, including TLS, managed identity, private endpoints, firewall rules, and AAD-only authentication
• Map Wiz CSPM findings to Azure resource properties and address them effectively
• Author Azure Policies, including custom definitions and remediation tasks
• Utilize C# to add security guardrails to deployment tools
• Integrate security checks into Azure DevOps Pipelines using Wiz CLI and policy-as-code
• Remediate container image CVEs, AKS cluster misconfigurations, and runtime posture gaps
• Administer AKS clusters, including upgrades, private cluster configurations, and authorized IP ranges
• Apply Linux fundamentals to manage AKS nodes
• Conduct Wiz container scanning to identify and address image CVEs and KSPM issues
• Integrate Wiz CLI and Admission Controller into Azure DevOps Pipelines
• Remediate Dockerfile issues, including base image pinning and multi-stage builds
• Harden Kubernetes environments with Pod Security Standards, NetworkPolicies, RBAC, and Key Vault CSI driver
• Perform ACR registry scanning and Helm chart security reviews

Requirements:

• Proven experience as Azure Security Engineer or similar role
• Strong expertise in Windows Server security and configuration management
• Proficiency in Microsoft SCCM, PowerShell, and Azure DevOps
• Experience with Azure PaaS security controls and policy authoring
• Proficiency in C# for security tool development
• Solid understanding of AKS administration and Linux fundamentals
• Experience with container security, including Docker and Kubernetes
• Familiarity with Wiz security tools and integration into DevOps pipelines
• Strong analytical and problem-solving skills
• Excellent communication and collaboration abilities