Azure Security Engineer

We are seeking a skilled Security Engineer to join our team and ensure the security and compliance of our Azure cloud infrastructure. The ideal candidate will be responsible for verifying that the environment is correctly configured, validating compliance with STIGs and CIS benchmarks, and monitoring adherence to NIST 800-53 controls. This role includes proactive identification of security gaps, ticket creation for remediation, and regular engagement with stakeholders to address findings, configurations, and vulnerabilities., Ensure Azure environments are securely and correctly configured according to industry best practices.

Validate compliance with STIGs, CIS Benchmarks, and organizational security standards.

Monitor and assess environments to ensure continuous alignment with NIST 800-53 security controls.

Create and manage tickets to address and remediate identified security gaps.

Schedule and conduct meetings with stakeholders to discuss findings, configurations, vulnerabilities, and remediation plans.

Collaborate with Platform Engineering, DevOps, IT, and Compliance teams to support secure cloud operations.

Automate security monitoring, compliance validation, and remediation workflows using Azure-native services and scripting.

Maintain documentation of security policies, procedures, architectures, and technical configurations.

Stay current with Azure security best practices, compliance standards, and emerging threats.

Ensure Azure and Kubernetes environments are securely configured according to industry best practices.

Validate Kubernetes security posture, including cluster hardening, RBAC, network policies, secrets management, workload identity, and container security controls.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com.To learn more about how we collect, keep, and process your private information, please review Insight Global’s Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.

The successful candidate will possess deep technical expertise in Azure security services, strong problem-solving skills, and a collaborative approach to cross-functional teamwork., Cloud Security & Architecture

Strong experience with Azure security services and cloud architecture.

Azure Security Services: Hands-on experience with Azure security technologies including:

Microsoft Entra ID (Azure AD)

Azure Key Vault

Microsoft Defender for Cloud

Microsoft Sentinel

Azure Policy

Azure Firewall

Azure Monitor

Azure Security Center capabilities

Cloud Architecture: Strong understanding of secure cloud architecture and best practices for designing, deploying, and maintaining secure Azure environments.

Network Security

Experience securing Azure networking services, including:

Virtual Networks (VNets)

Network Security Groups (NSGs)

Azure Firewall

Private Endpoints

VPN Gateway

ExpressRoute

Application Gateway / Web Application Firewall (WAF)

Compliance & Automation

Expertise in compliance frameworks including STIGs, CIS Benchmarks, and NIST 800-53.

Experience implementing and managing compliance enforcement through Azure Policy and governance controls.

Proficiency in scripting and Infrastructure as Code (IaC) using:

Python

PowerShell

Azure Bicep

ARM Templates

Terraform

Excellent problem-solving, communication, and stakeholder engagement skills.

Kubernetes Security

Experience securing Kubernetes environments, including:

Azure Kubernetes Service (AKS)

Cluster hardening

RBAC

Network policies

Workload identity

Secrets management

Pod Security Standards

Container security best practices

Knowledge of Kubernetes security frameworks and CIS Kubernetes Benchmarks. Microsoft Certified: Azure Security Engineer Associate (AZ-500)

Microsoft Certified: Azure Solutions Architect Expert

CISSP

Certified Kubernetes Security Specialist (CKS)