Cloud Azure Security Engineer

Monks is a global consulting firm that helps clients pursue AI-powered business transformations. The Cloud Azure Security Engineer will design, implement, and maintain security solutions for clients’ Azure cloud assets, assessing security posture, enforcing controls, remediating vulnerabilities, and supporting incident response.

Responsibilities:

• Assess the security posture of cloud environments in Microsoft Azure, including infrastructure, applications, and data, to identify vulnerabilities, misconfigurations, and compliance gaps
• Develop and maintain security control policies and procedures for cloud environments, ensuring alignment with industry standards, regulatory requirements, and organizational objectives
• Collaborate with stakeholders to understand business requirements and translate them into actionable security controls and policies
• Conduct regular security audits and assessments to validate adherence to security policies and identify areas for improvement
• Provide guidance and recommendations to engineering and operations teams for implementing security best practices and remediating security issues
• Design and implement cloud security solutions across infrastructure, network, identity, and access management
• Support the implementation and enforcement of security and compliance controls across Azure environments
• Investigate and remediate security findings, vulnerabilities, and misconfigurations across cloud environments
• Stay current with emerging threats, vulnerabilities, and security trends in cloud computing, and incorporate findings into security policies and controls
• Participate in incident response activities and assist in the investigation and resolution of security incidents as needed

Requirements:

• Bachelor's degree in Computer Science, Information Technology, or a related field
• 2+ years of experience in cloud security engineering, with a focus on Microsoft Azure
• Hands-on experience with Microsoft Entra ID (formerly Azure Active Directory) and cloud identity and access management
• Strong understanding of Entra ID concepts, including users, groups, roles, RBAC, administrative roles, service principals, managed identities, application registrations, and enterprise applications
• Experience implementing and managing Entra ID Conditional Access policies, including MFA, risk-based access, device-based controls, and least-privilege access
• Experience with Microsoft Entra ID Privileged Identity Management (PIM), access reviews, identity governance, and privileged access controls
• Experience with application authentication and authorization using technologies such as SAML, OAuth 2.0, and OpenID Connect
• Experience with Terraform, GitHub Actions, and containers
• In-depth knowledge of Azure services and features related to security, such as Microsoft Defender for Cloud, Microsoft Sentinel, Azure Firewall, Microsoft Entra ID, Azure Policy, Key Vault, and Network Security Groups (NSGs)
• Experience with scripting and automation using languages and tools such as PowerShell, Python, or Azure CLI
• Strong understanding of network security principles, encryption protocols, identity management, authentication, authorization, and Zero Trust security principles
• Familiarity with implementing and managing security policies and controls in Azure environments to enforce organizational policies and compliance standards
• Experience with cloud security posture management and vulnerability management tools such as Wiz, Microsoft Defender for Cloud, or similar platforms
• Ability to investigate security findings and translate them into actionable remediation steps, including infrastructure-as-code changes where appropriate
• Excellent problem-solving skills and ability to work independently or as part of a team in a fast-paced environment
• Effective communication skills with the ability to articulate complex technical concepts to non-technical stakeholders
• Master's degree
• Relevant certifications such as Microsoft Certified: Azure Security Engineer Associate (AZ-500), Microsoft Certified: Identity and Access Administrator Associate (SC-300), Certified Cloud Security Professional (CCSP), or similar