Job Description

Job Title- Infrastructure Security Expert - Azure (L3)

Role Summary

The Azure Infrastructure Security Expert (L3) is responsible for

architecting, securing, and governing Azure cloud infrastructure

. This role leads

advanced security design, threat mitigation, and incident resolution

, working closely with cloud, SOC, and compliance teams to ensure a robust security posture across Azure environments.

Key Responsibilities

Azure Infrastructure Security

Design and implement

secure Azure architectures

aligned with Zero Trust principles Secure

Azure IaaS and PaaS

components (VMs, VNets, Load Balancers, App Services, AKS) Implement

network security controls

: NSGs, Azure Firewall, WAF, Private Endpoints, DDoS Protection Enforce

secure identity access

using Azure AD, RBAC, PIM, Conditional Access

Threat Detection & Incident Response (L3)

Lead

advanced security incident investigations

in Azure environments Perform root cause analysis (RCA) for cloud security incidents Tune and optimize alerts from

Microsoft Defender for Cloud, Defender for Servers, Defender for Storage

Support SOC teams with

escalated (L3) cloud-related incidents

Security Posture Management

Implement and manage

Microsoft Defender for Cloud

security policies and recommendations Perform

risk assessments, threat modeling, and vulnerability management

Drive remediation of high-risk findings and misconfigurations Monitor compliance against

ISO 27001, SOC 2, GDPR, HIPAA (as applicable)

Governance, Compliance & Hardening

Define and enforce

Azure security baselines and landing zone controls

Implement

Azure Policy and Blueprints

for governance Ensure logging and monitoring via

Azure Monitor, Log Analytics, and Sentinel

Support audits and compliance reporting

Automation & DevSecOps

Automate security controls using

ARM, Bicep, Terraform, PowerShell, Azure CLI

Integrate security checks into

CI/CD pipelines

Enable secure DevOps practices for cloud workloads

Collaboration & Leadership

Act as

Azure security SME

for internal teams and customers Mentor L1/L2 engineers and review security designs Work with architecture, networking, identity, and compliance teams

Contribute to security documentation, SOPs, and best practices

Required Skills & Expertise

Technical Skills

Strong expertise in

Azure infrastructure security

Azure Networking: VNets, NSGs, Azure Firewall, WAF, ExpressRoute, VPN Identity & Access Management:

Azure AD, RBAC, PIM, MFA

Cloud security tools:
o Microsoft Defender for Cloud o Microsoft Sentinel (basic-advanced correlation knowledge)

Monitoring & Logging: Azure Monitor, Log Analytics Infrastructure as Code: ARM, Terraform, Bicep

Security Concepts

Zero Trust Architecture Cloud threat modeling Vulnerability management Incident response & forensics (cloud context) Compliance & governance frameworks

Experience & Qualifications

6-10 years

of IT/security experience

4+ years

in Azure cloud security or infrastructure security Hands-on experience in

enterprise-scale Azure environments

Experience supporting

24x7 SOC escalations (L3)

preferred

Certifications (Preferred)

Microsoft Certified:

Azure Security Engineer Associate (AZ-500)

Microsoft Certified:

Azure Solutions Architect Expert

CISSP / CCSP (added advantage)
Job Type: Full-time

Benefits:

Health insurance Provident Fund
Work Location: In person