Azure Cloud Security Engineer-SC Cleared-Salisbury, South West

Azure Cloud Security Engineer-SC Security Cleared is required by our defence client based near Salisbury, WiltshireCommutable from Devizes, Basingstoke, Andover, Bath, Amesbury, Swindon, Trowbridge, Marlborough
£690 a day (umbrella)
2 days we week on siteWorking in an SC Security Cleared environment.

You will hold a current SC or DV Clearance (or be eligible)
You will be an experienced Microsoft Azure Cloud Security Engineer with demonstrable hands-on experience of securing and engineering enterprise Azure environments, including landing zone, cloud foundation capabilities and shared platform services. You will be able to move between security design and hands-on technical implementation. The role is not simply to advise on cloud security, but to build, configure, test and embed security controls within the clients Azure cloud foundation.

Essential skills, experience and qualifications):Significant hands-on experience of Microsoft Azure engineering and cloud security. Demonstrable experience implementing security within enterprise Azure environments. Strong understanding of Azure hub-and-spoke architectures and enterprise cloud foundation/landing zone concepts. Strong practical experience of Microsoft Entra ID and Azure identity and access management. Detailed knowledge and hands-on experience of Azure RBAC, including role assignment at management group, subscription, resource group and resource level.

Strong understanding of least privilege, separation of duties and privileged access management. Experience implementing and managing Microsoft Entra Privileged Identity Management (PIM). Experience of Conditional Access, Multi-Factor Authentication and identity security controls. Experience securing service principals, managed identities and application identities. Strong understanding of Azure management groups, subscriptions and resource organisation. Experience implementing and managing Azure Policy and cloud governance controls. Experience with Microsoft Defender for Cloud.

Strong understanding of Azure network security including hub-and-spoke networking, Network Security Groups, Azure Firewall, routing and network segmentation. Understanding of Azure logging, monitoring and security event management. Experience implementing encryption, secrets and key management controls. Experience of cloud security assessment, vulnerability management and remediation. Understanding of Infrastructure as Code and automated cloud deployment approaches.

Hands-on experience securing Azure integration services, with practical knowledge of API Management (APIM) and one or more of Service Bus, Logic Apps, Azure Functions or Event Grid.