Azure Security and Data Governance Engineer - Microsoft Fabric

Cyberlocke is seeking an experienced Azure Security and Data Governance Engineer to design, implement, validate, and operate security and governance controls across Microsoft Azure and Microsoft Fabric data modernization environments.

This role is responsible for protecting enterprise data throughout its lifecycle-from ingestion and storage through transformation, analytics, artificial intelligence, sharing, retention, and disposal. The engineer will implement identity, access, encryption, network security, data classification, lineage, policy enforcement, monitoring, auditing, and compliance controls across cloud-based data platforms.

The Azure Security and Data Governance Engineer will work closely with cloud architects, data architects, ETL architects, data engineers, Power BI developers, QA engineers, compliance teams, data owners, and customer stakeholders. The role will help ensure that modernized data platforms are secure, governed, discoverable, auditable, and aligned with business, regulatory, and contractual requirements.

The successful candidate should have hands-on experience with Microsoft Purview, Microsoft Entra ID, Azure Policy, Azure Key Vault, Microsoft Defender for Cloud, Azure Monitor, Microsoft Sentinel, Microsoft Fabric, Power BI, and related Azure security services., * Azure Security Architecture and Implementation

• Identity and Access Management
• Microsoft Fabric and Power BI Security
• Data Governance and Microsoft Purview
• Data Classification and Information Protection
• Data Access Governance
• Network and Platform Security
• Encryption, Key Management, and Secrets Protection
• Azure Policy, Configuration Governance, and Compliance
• Azure Security Monitoring and Incident Detection
• Vulnerability and Security Posture Management
• Data Lifecycle, Retention, and Records Governance
• Data Migration Security and Governance
• DevSecOps and Automation
• Risk, Audit, and Compliance Support
• Technical Leadership and Customer Engagement
• Documentation and Operational Transition

• Bachelor’s degree in cybersecurity, computer science, information systems, data governance, engineering, or a related field, or equivalent professional experience.
• Five or more years of experience in cloud security, information security, data governance, identity management, or related disciplines.
• Three or more years of hands-on experience securing Microsoft Azure environments.
• Experience implementing identity and access management using Microsoft Entra ID and Azure role-based access control.
• Experience with Microsoft Purview data cataloging, classification, lineage, governance, or information-protection capabilities.
• Experience securing Azure data services, storage platforms, databases, analytics platforms, or cloud applications.
• Working knowledge of Microsoft Fabric, Power BI, OneLake, Lakehouse, Warehouse, or comparable cloud data platforms.
• Experience with Azure Policy, Azure Key Vault, Microsoft Defender for Cloud, Azure Monitor, or Microsoft Sentinel.
• Understanding of private endpoints, virtual networks, network security groups, firewalls, and secure hybrid connectivity.
• Experience implementing encryption, secrets management, key rotation, and managed identities.
• Experience supporting security audits, risk assessments, control testing, and remediation activities.
• Understanding of data-classification, retention, privacy, access-governance, and records-management principles.
• Experience with cloud security and compliance frameworks.
• Strong technical documentation, analytical, troubleshooting, and communication skills.
• Ability to work with technical teams, business stakeholders, auditors, compliance professionals, and customer leadership., * Deep experience with Microsoft Fabric security, administration, tenant settings, workspaces, OneLake, and Power BI governance.
• Experience implementing Microsoft Purview Data Map, Data Catalog, Data Estate Insights, Information Protection, and Data Loss Prevention.
• Experience with Microsoft Entra Privileged Identity Management, access reviews, conditional access, and identity protection.
• Experience developing Microsoft Sentinel analytics rules, workbooks, automation, or investigation procedures.
• Experience with Microsoft Defender for Cloud, Defender for Storage, Defender for SQL, or related security capabilities.
• Experience implementing Azure landing zones and cloud-governance frameworks.
• Experience with infrastructure as code using Bicep, ARM templates, Terraform, PowerShell, or Azure CLI.
• Experience with Azure DevOps, Git, CI/CD, and DevSecOps practices.
• Familiarity with SQL, Python, PowerShell, KQL, or similar technical languages.
• Experience supporting artificial intelligence governance, model risk, responsible AI, or Azure AI services.
• Experience securing data modernization, data migration, analytics, or cloud-transformation programs.
• Experience in education, healthcare, government, financial services, manufacturing, or other regulated environments.
• Experience working in consulting, professional services, or customer-facing engineering roles., * Microsoft Certified: Azure Fundamentals
• Certified Information Systems Security Professional
• Certified Cloud Security Professional
• Certified Information Security Manager
• Certified Data Management Professional
• Certified Information Privacy Professional
• GIAC or comparable cloud-security certification