Azure Infrastructure Engineer
Azure Infrastructure Engineer
Employer Active
Job Alert
You will be updated with latest job alerts via email
Share
Job Alert
You will be updated with latest job alerts via email
Job Description
Job Summary:
We are looking for an Azure Infrastructure Engineer with 3 5 years of experience who understands cloud architecture and security best practices aligned with the Cloud Security Alliance (CSA) Cloud Controls Matrix (CCM). The candidate will be responsible for designing implementing and managing secure and scalable infrastructure on Microsoft Azure ensuring compliance with CSA security principles and regulatory standards.
Key Responsibilities:
- Design and deploy Azure infrastructure with a security-first mindset aligned with CSA CCM and Azure Well-Architected Framework.
- Implement identity and access controls (RBAC Azure AD MFA Conditional Access) as per CSA IAM domain.
- Ensure data protection using Azure encryption capabilities (at-rest in-transit and in-use).
- Deploy network security architectures (NSGs Azure Firewall Private Link ExpressRoute) compliant with CSA and NIST guidelines.
- Enable security monitoring and incident response with Azure Defender Sentinel and Security Center.
- Map and document infrastructure against CSA CCM controls.
- Ensure infrastructure is compliant with CIS Benchmarks ISO 27001 and CSA STAR guidelines.
- Automate infrastructure provisioning with ARM templates Bicep or Terraform integrating security guardrails.
- Perform periodic vulnerability assessments and remediation aligned with CSA guidelines.
Required Skills & Qualifications:
- 3 5 years of experience in Azure cloud infrastructure.
- Strong hands-on experience in Azure IaaS (VMs VNETs Storage Load Balancers etc.).
- In-depth knowledge of Azure security tools (Azure Security Center Defender for Cloud Sentinel).
- Familiarity with Cloud Security Alliance (CSA) Cloud Controls Matrix (CCM) and CAIQ.
- Strong understanding of identity and access management principles.
- Proficient in scripting (PowerShell Azure CLI) and IaC (ARM/Bicep/Terraform).
Experience working in regulated industries (e.g. healthcare finance) is a plus.
Certifications (Preferred):
- Microsoft Certified: Azure Security Engineer Associate (AZ-500)
- Microsoft Certified: Azure Solutions Architect Expert
- CSA CCSK (Certificate of Cloud Security Knowledge) or CCSP
Soft Skills:
- Excellent documentation and communication skills.
- Ability to translate compliance requirements into technical controls.
- Strong collaboration skills with security operations and compliance teams.
Cloud, Azure
Employment Type
Full Time
