Job Description

• Design and deploy Azure infrastructure with a security-first mindset, aligned with CSA CCM and Azure Well-Architected Framework.
• Implement identity and access controls (RBAC, Azure AD, MFA, Conditional Access) as per CSA IAM domain.
• Ensure data protection using Azure encryption capabilities (at-rest, in-transit, and in-use).
• Deploy network security architectures (NSGs, Azure Firewall, Private Link, ExpressRoute) compliant with CSA and NIST guidelines.
• Enable security monitoring and incident response with Azure Defender, Sentinel, and Security Center.
• Map and document infrastructure against CSA CCM controls.
• Ensure infrastructure is compliant with CIS Benchmarks, ISO 27001, and CSA STAR guidelines.
• Automate infrastructure provisioning with ARM templates, Bicep, or Terraform, integrating security guardrails.
• Perform periodic vulnerability assessments and remediation aligned with CSA guidelines.

Required Skills & Qualifications:

• 35 years of experience in Azure cloud infrastructure.
• Strong hands-on experience in Azure IaaS (VMs, VNETs, Storage, Load Balancers, etc.).
• In-depth knowledge of Azure security tools (Azure Security Center, Defender for Cloud, Sentinel).
• Familiarity with Cloud Security Alliance (CSA) Cloud Controls Matrix (CCM) and CAIQ.
• Strong understanding of identity and access management principles.
• Proficient in scripting (PowerShell, Azure CLI) and IaC (ARM/Bicep/Terraform).

xc2xb7Experience working in regulated industries (e.g., healthcare, finance) is a plus.