Senior Azure Security Engineer - Cloud Security & Compliance 10946767

We are seeking an experienced Senior Azure Security Engineer with 6-8 years of IT experience and at least 3 years dedicated to Azure cloud security. In this role, you will secure enterprise-scale Azure environments, implement advanced security controls, manage identity and access, monitor threats, and ensure compliance across cloud workloads. You will collaborate closely with platform, DevOps, and compliance teams to embed security best practices into architecture and operations. Azure Security Engineering

• Design, implement, and manage security controls across Azure subscriptions, resource groups, and workloads.
• Configure and operate Microsoft Defender for Cloud for threat protection and posture management.
• Implement Azure network security: NSGs, Azure Firewall, WAF, DDoS Protection, VPN/ExpressRoute security.

Identity & Access Security (Azure AD / Entra ID)

• Manage Conditional Access, MFA, RBAC, and Privileged Identity Management (PIM).
• Strengthen identity governance and enforce least-privilege access.

Secrets & Key Management

• Configure and manage Azure Key Vault for secrets, certificates, and encryption keys.

Monitoring, Detection & Incident Response

• Monitor security events using Defender and Microsoft Sentinel.
• Perform log analysis with Azure Monitor and Log Analytics.
• Respond to incidents and remediate vulnerabilities.

Governance, Compliance & DevSecOps

• Implement Azure Policy, Blueprints, and governance frameworks.
• Support compliance with ISO 27001, SOC 2, BIO, GDPR, and other standards.
• Integrate security into CI/CD pipelines (SAST/DAST, IaC scanning).
• Work with Terraform, ARM, or Bicep for secure IaC practices.

Documentation & Collaboration

• Prepare security documentation, audit evidence, and reports.
• Collaborate with platform, DevOps, and compliance teams to embed security best practices.
• Stay updated on emerging Azure security features and threat trends.

• 6+ years overall IT experience, 3+ years in Azure/cloud security.
• Hands-on experience with Microsoft Defender for Cloud and Microsoft Sentinel.
• Strong understanding of Azure AD/Entra ID: Conditional Access, MFA, PIM, RBAC.
• Experience with Azure network security tools: NSGs, Azure Firewall, WAF, VPN/ExpressRoute.
• Proficiency with Azure Key Vault.
• Experience with Azure Policy, Blueprints, governance frameworks.
• Scripting skills: PowerShell, Python, or Bash.
• Understanding of DevSecOps and CI/CD security integration.
• Knowledge of compliance standards: ISO 27001, SOC 2, NIST, GDPR, HIPAA.
• Strong analytical, troubleshooting, and incident response skills.

• Clear understanding of Infrastructure as Code (IaC) security.

• AZ-500 - Azure Security Engineer Associate
• SC-300 - Identity & Access Administrator Associate
• CISSP

• CompTIA Security+

• Digital: Digital Security
• Digital: DevOps Security Tools
• Cloud Security Architecture
• Threat Detection & Response
• Compliance & Governance

Amsterdam, Netherlands (Onsite / Hybrid depending on project needs)