Cloud Security Engineer

We are seeking an experienced Cloud Security Engineer to play a key role in the design, build and security of our clients Microsoft Azure cloud platform. This is a hands-on engineering position focused on embedding security into the cloud foundation from day one. Working closely with Architecture, Infrastructure, Cyber Security and delivery teams, you will design and implement secure Azure landing zones, governance controls, identity solutions, networking and integration services that enable future workloads to be deployed safely and consistently. You will be responsible for translating security requirements and architectural principles into practical technical controls, ensuring security is built into the platform rather than applied retrospectively. This role is ideal for someone who enjoys combining cloud engineering expertise with security best practice to deliver secure, scalable and operational Azure environments.

Significant hands-on experience engineering and securing Microsoft Azure environments. Proven experience delivering Azure landing zones and cloud foundation capabilities. Strong background in Azure identity, access management and cloud governance. Experience implementing security controls across networking, workloads and integration services. Practical experience with Infrastructure as Code, automation and cloud deployment pipelines. Experience applying Secure by Design principles and cloud security best practices. Ability to work closely with architects, engineers and security teams to deliver secure cloud services. Strong documentation, stakeholder engagement and technical communication skills. Required Skillset Cloud Security & Azure Platform Microsoft Azure security engineering Azure Landing Zones & Hub-and-Spoke Architecture Secure by Design principles Cloud governance, security controls and guardrails Identity & Access Management Microsoft Entra ID RBAC, PIM, Conditional Access & MFA Privileged access and identity security Network & Infrastructure Security Azure Firewall, NSGs and network segmentation Secure hybrid connectivity Encryption, Key Vault and secrets management Security Operations & Governance Microsoft Defender for Cloud Security monitoring, logging and vulnerability remediation Azure Policy and compliance controls Integration & Automation Azure API Management (APIM) Azure Integration Services (Logic Apps, Functions, Service Bus, Event Grid) Infrastructure as Code (Terraform/Bicep) Azure DevOps or GitHub Actions Professional Skills Technical documentation Stakeholder engagement and communication Problem solving and security assurance Desirable Microsoft Azure security or architecture certifications. Experience within Defence, Government or highly regulated environments. Knowledge of Microsoft Sentinel, CAF/Landing Zones and Azure monitoring solutions. Current SC Clearance