Azure Cloud Security Engineer

• Advise customer teams on secure architecture, service usage, access design, and workload deployment best practices.
• Review customer service configurations and proposed changes, and give clear recommendations and reference guidance.
• Explain landing zone templates and where shared responsibility falls once customers take over their environments.
• Secure the workloads and services the team deploys.
• Design and maintain tenant-wide governance controls, including Conditional Access, Azure Policy, and Microsoft Defender for Cloud regulatory compliance.
• Evaluate and apply new Microsoft security features and Zero Trust capabilities as the platform grows.
• Extend Zero Trust principles to emerging services such as Azure Databricks and AI workloads. That includes least privilege, mutual authentication, default-deny access, and tenant isolation.
• Support security operations with guidance on logging architecture, including audit, diagnostic, and traceable logs, and on reporting requirements.
• Automate security and management tasks with scripting.

• Active Secret clearance and the ability to obtain Top Secret.
• 3+ years of hands-on experience securing Microsoft Azure environments.
• Strong Azure infrastructure security fundamentals.
• Hands-on experience with Conditional Access, Azure Policy, and Defender for Cloud.
• Solid grasp of Zero Trust concepts: least privilege, shared responsibility, mutual authentication (mTLS), and the differences between tenancy, access, and continuous authentication.
• Excellent written and verbal communication, including direct, frequent work with customers over Microsoft Teams and other collaboration tools.
• Adaptability and a drive to pick up new technologies and responsibilities., * Microsoft certifications: AZ-500 (strongly preferred), AZ-104, SC-300, SC-900, or SC-200
• Azure CLI and Microsoft Graph PowerShell.
• Terraform and Python.
• Working knowledge of NIST SP 800-53.
• Experience securing Azure Databricks or other data platforms.
• Exposure to AI model governance and security.
• Familiarity with SOC operations and logging requirements.

At LightFeather, you’re not just taking a job-you’re joining a purpose-driven team that delivers innovative, mission-critical solutions to make a real difference. You’ll work on diverse, meaningful projects that challenge and inspire you, alongside some of the best minds in the industry.