Address Primary Responsibilities:
· Developing, testing, and deploying Azure Security Controls across the firm’s Azure tenants
· Providing security recommendations and solutions for migrating and new applications in the Client environment to Azure
· Working closely with vendors and partner squads to develop, deploy, and test Cloud security services
· Responding to Azure Cloud security drifts in timely manner and working with the stakeholders to remediate the drifts.
· Integrating, configuring, documenting, and deploying compliant infrastructure and supporting services in the Cloud platform
· Troubleshooting problems, analyzing root cause, and (where possible) fixing bugs introduced by owned or managed security solutions
· Collaborating with Risk Management, Security Architecture, and Cyber Incident Response teams to ensure necessary controls to Cloud services are deployed and tested
· Provide training and review sessions to the teams regarding solutions implemented
· Working in a globally distributed team to provide innovative and robust Cloud-centric solutions
Required Skills:
· Knowledge of the Shared Responsibility Model; keen understanding of the security risks inherent in hosting cloud-based applications and data
· Experience developing across the security assurance lifecycle (including prevent, detect, respond, and remediate controls)
· Experience configuring Azure native security tooling and capabilities such as Azure Policy, Azure Monitor, etc.
· Experience solutioning and configuring event-driven serverless-based security controls in Azure, including but not limited to technologies such as Azure Function, Automation Runbook, Logic App.
· Deep understanding of DevOps processes and workflows.
· Working knowledge of the Secure SDLC process.
· Experience with Infrastructure as Code (IaC) tooling such as Terraform and ARM templates
· Familiarity with standard Azure security tooling such as Microsoft Defender Suite, Sentinel.
· Familiarity with Logging and data pipeline concepts and architectures in cloud.
· Strong in scripting languages such as PowerShell, Python and Bash.
· Experience creating technical architecture documentation.
· Excellent communication, written and interpersonal skills.
· Practical experience in designing and configuring CICD pipelines.
· Practical experience in Azure DevOps, GitHub Action, and Jenkins.
· Experience in ITSM.
· Ability to articulate complex technical concepts to non-technical stakeholders.
· Experience writing queries and analytics in Kusto Query Language (KQL)
· Experience with risk control frameworks and engagements with risk and regulatory functions
· Experience in the financial industry would be a plus.
· Azure Certifications would be a plus.
Rate range - $60-$65
