Job Summary
Implement secure cloud architectures on Azure leveraging Azure Active Directory Azure Key Vault and other relevant services.
Ensure solutions are highly available scalable and resilient.
Design and implement secure network topologies and configurations.
Design and implement data protection best practices.
Implement and manage access controls encryption and network segmentation.
Responsibilities
Implement secure cloud architectures on Azure leveraging Azure Active Directory Azure Key Vault and other relevant services.
Ensure solutions are highly available scalable and resilient.
Design and implement secure network topologies and configurations.
Design and implement data protection best practices.
Implement and manage access controls encryption and network segmentation.
Ensure compliance with industry standards and regulations.
Identify and mitigate security risks and vulnerabilities.
Develop and implement security policies and procedures.
Evaluate and implement security tools and technologies such as vulnerability scanners static analysis tools and security information and event management (SIEM) systems
Architect and design solutions that meet the functional and non functional requirements of a large enterprise scale customer who is extensively leveraging Azure Cloud.
Ensure the solutions produced leverage the design and operations guidance according to Microsofts Well Architected framework across all pillars including performance efficiency security operational excellence reliability and cost optimization.
Work closely with application network security teams and service owners to ensure the requirements are reflected appropriately in the designs.
Enforce adherence to architectural standards and principles with specific guidelines usability and design standards.
Create and review architecture and solution design artifacts.
Drive ARB Sessions to build a plan for implementing solutions governing design in line with customer business goals and their technical environment.
Ensure suitable sizing of solutions technology fit and DR are assessed and accounted for.
Keep UpToDate on the emerging technology/industry trends in Azure and Define new patterns and standards as required.
Managing vulnerability scanning tools to identify security risks in software code or web applications
Develop and execute a DevSecOps strategy aligned with business objectives and Microsoft Azure best practices.
Identifying security risks assessing potential threats and developing plans for eliminating vulnerabilities
Creating or updating policies and procedures to comply with industry regulations and best practices
Conducting penetration tests to identify potential vulnerabilities in an organizations IT infrastructure
Analyzing data from security events to identify security incidents and trends
Reviewing security logs to identify security breaches or anomalies that may require further investigation
Participating in risk assessment activities to identify potential threats to an organizations security posture
Ensure security is integrated into all stages of the software development lifecycle (SDLC).
Evaluate and implement security tools and technologies such as vulnerability scanners static analysis tools and security information and event management (SIEM) systems
6 + years of relevant experience solution & Migrating workloads to Azure. Must have strong experience Designing and planning for Azure Security and good exposure to Azure security components.
Design and implement Azure Security practices Expertise on Azure Firewall WAF Azure Front Door Azure Polices Azure DDoS protection Secure Score Microsoft Defender for cloud NSG rules Bastion hosts Zero trust architecture Cloud Adoption Framework and the Azure Well Architected Framework.
Design and implement Azure Encryption and Azure key vault
As a Microsoft security Architect monitor identify investigate and respond to threats in multicloud environments by using Microsoft Sentinel Microsoft Defender for Cloud Microsoft 365 Defender and third party security solutions.
Microsoft security Engineer/Architect collaborate with business stakeholders architects identity administrators Azure administrators and endpoint administrators to secure IT systems for the organization.
Good Experience in Microsoft Sentinel SOAR and XDR for threat intelligence.
Experience working with SonarQube JFROG Artifactory XRAY GitHub/Bit Bucket/GitLab and SecOps tools like Synk is required.
Working experience with Azure DevOps is a plus
Certifications Required
Nil