Azure Security DevSecOps Engineer
Share
Job Location:
San Francisco, CA - USA
Monthly Salary:
Not Disclosed
Posted on:
30+ days ago
Vacancies:
1 Vacancy
Job Summary
Job Title: Azure Security DevSecOps Engineer - Entra ID Expert
Location: Remote only on w2
Overview
We are seeking a highly skilled Azure Security DevSecOps Engineer with deep expertise in Microsoft Entra ID (formerly Azure AD) to join our cloud platform engineering team. This role is pivotal in embedding security across the software development lifecycle ensuring robust identity and access management and aligning with enterprise-grade security frameworks.
Key Responsibilities
Secure Azure Infrastructure: Design implement and maintain secure Azure cloud environments using DevSecOps principles and Infrastructure as Code (IaC) via Terraform.
Identity & Access Management: Architect and manage Entra ID configurations including RBAC Conditional Access MFA (hard/soft tokens) SSPR and Service Principal setups.
Security Posture Management: Leverage Wiz for vulnerability scanning compliance monitoring and cloud security posture management.
Code Security & Quality: Integrate SonarQube for static code analysis and enforce clean-code practices aligned with ISO/IEC 5055 and OWASP standards.
CI/CD Integration: Embed security into CI/CD pipelines using tools like GitHub Actions Azure DevOps and Sonar scanner CLI.
Network Security: Secure Azure networking components including NSGs Azure Firewall VPNs and DDoS protection.
Security Frameworks Compliance: Implement and enforce NIST CIS ISO 27001 and Zero Trust principles across cloud workloads.
Threat Modeling & Risk Analysis: Conduct assessments for Azure-based applications and infrastructure and respond to incidents using Azure Security Center and Sentinel.
Automation & Governance: Automate security workflows and contribute to centralized governance initiatives like the SHIELD program.
Collaboration: Work cross-functionally with development operations and cybersecurity teams to drive secure-by-design and shift-left strategies.
Required Skills & Qualifications
Experience 10 years in cloud security or DevSecOps roles with 3 years focused on Azure.
Entra ID Expertise: Proven experience with advanced Entra ID configurations including custom policies in Azure B2C and third-party identity provider integrations.
Wiz: Hands-on experience with Wiz for cloud security monitoring and compliance.
Terraform: Strong proficiency in writing and managing IaC for Azure.
SonarQube: Practical knowledge of SonarQube for code quality and security scanning.
Scripting: Proficiency in PowerShell and Python for automation and integration.
Security Frameworks: Familiarity with NIST CIS ISO 27001 OWASP and PCI-DSS.
Azure Services: Deep knowledge of Azure Security Center Key Vault Sentinel and Azure Monitor.
Preferred Qualifications
Certifications: Microsoft Certified: Azure Security Engineer Associate Certified DevSecOps Professional or equivalent.
Tools: Experience with Checkmarx Snyk Qualys and container security platforms (e.g. Aqua Prisma Cloud).
Container Security: Familiarity with Docker Kubernetes and related Azure services.
Governance: Experience contributing to centralized DevSecOps governance programs like SHIELD.
Required Skills:
Azure SecurityEntra IDDevSecOps
Key Skills
- Splunk
- IDS
- Network security
- Computer Networking
- Identity & Access Management
- PKI
- PCI
- NIST Standards
- Security System Experience
- Information Security
- Encryption
- Siem
