Azure Cloud & API Security Engineer

Key Responsibilities
Design, implement, and maintain secure cloud solutions within Microsoft Azure environments
Develop and enforce API security standards, governance frameworks, and best practices
Secure REST APIs and cloud-native applications through authentication, authorization, encryption, and threat protection mechanisms
Assess, design, and implement API gateway and API management solutions
Configure and manage identity and access management solutions using Azure Active Directory (Microsoft Entra ID)
Implement role-based access controls (RBAC), privileged access management, and least-privilege security models
Perform cloud security reviews, risk assessments, and vulnerability remediation activities
Monitor cloud and API environments for security threats, compliance issues, and performance concerns
Collaborate with application development teams to embed security controls throughout the software development lifecycle
Develop and support security solutions for integrations involving cloud applications, APIs, and enterprise data platforms
Implement logging, monitoring, auditing, and alerting solutions for cloud workloads and APIs
Support incident response, root cause analysis, and security remediation efforts
Work closely with Snowflake and data engineering teams to secure data access, integrations, and cloud-based data platforms
Document security architectures, standards, operational procedures, and implementation guidelines
Participate in cloud modernization, migration, and digital transformation initiatives

Required Qualifications
8+ years of experience
Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field
Microsoft Certified: Azure Security Engineer Associate
Microsoft Certified: Azure Administrator Associate
Microsoft Certified: Azure Solutions Architect Expert
Certified Information Systems Security Professional (CISSP)
Certified Cloud Security Professional (CCSP)
API Security Certification

Skills
Microsoft Azure Cloud Services
REST API Security
OAuth 2.0
OpenID Connect (OIDC)
JWT Tokens
API Gateway Security
Zero Trust Security
Microsoft Entra ID (Azure Active Directory)
Identity and Access Management (IAM)
Cloud Security Monitoring and Auditing
Network Security
DevSecOps
Snowflake Data Cloud
Infrastructure as Code
AWS Cloud Security
Enterprise Data Platform Security
API Security Architecture
Cloud Security Reviews
Incident Response Coordination
Security Architecture Documentation
Stakeholder Communication
Analytical Problem Solving
Cloud Transformation Program Support
Data Governance

Schedule
Start date: 2026-09-18