Azure Security Engineer

Summary

Join GuidePoint Security as an Azure Security Engineer and design, implement, and secure our customers' Azure infrastructure. This primarily remote, customer-facing role involves integrating cloud security technologies into existing or new environments. You will evaluate cloud infrastructure, recommend improvements, and implement solutions to strengthen cloud security posture. Leveraging your expertise in Azure Commercial and Azure Gov Cloud, you'll manage subscriptions, landing zones, networking, security, and infrastructure. Collaboration with internal teams and clients is crucial, requiring strong communication and problem-solving skills. This position requires significant experience in cloud environments and specific Azure services, along with relevant certifications.

Requirements

• Minimum 8-10 years of experience building or managing cloud environments in medium to large companies
• Must pass either the Cloud Security Alliance Certificate of Cloud Security Knowledge (CCSK) or the (ISC)2 Certified Cloud Security Professional within 6 months of joining the team
• Experience with cloud security, networking, and disaster recovery best practices
• Strong knowledge of infrastructure as code (IaC) tools such as Azure Resource Manager (ARM) templates or Terraform
• Experience with network security best practices and configurations
• Strong troubleshooting skills and attention to detail
• Strong written and verbal communication skills
• Ability to solve technical, managerial, or operational problems and evaluate options based on relevant information, resources, well-rounded experience, and knowledge
• Demonstrated ability to communicate clearly and concisely, both orally and in writing, and lead presentations, training courses, and effective working sessions
• Strong understanding of cloud computing technologies, business drivers, and emerging computing trends
• Proficient in Azure services, including but not limited to Entra ID, Azure Virtual Networks / Machines, Azure App Services, Azure Kubernetes Service, Azure Key Vault, Azure Private Link/Private Endpoint

Responsibilities

• Design Azure cloud solutions with a secure-by-design approach
• Collaborate with customer IT teams to implement and secure cloud resources, implement configurations based on security policies, standards, and best practices
• Develop and implement scalable and resilient cloud architecture solutions within Azure Commercial or Azure Gov Cloud environments
• Develop and implement migration strategies for local on premises hosted environments to Azure cloud tenants
• Work with customers to secure Microsoft Entra ID
• Create and implement migration plans for each Azure infrastructure service, system, and/or application that will be deployed to Azure as part of a migration project
• Create architectural and data flow diagrams for Azure environments
• Develop and deploy infrastructure as code (IaC) using tools like Terraform, Azure Resource Manager (ARM) templates, Bicep, and PowerShell
• Ensure systems, applications, and data meet high availability design principles and/or are replicated to meet organizational requirements for disaster and business recovery
• Analyze and ensure that proper monitoring and alerting systems are in place for systems, services, and applications in customer Azure environments
• Evaluate and recommend Azure services based on business requirements and industry best practices
• Collaborate with software developers, system administrators, and other stakeholders to integrate Azure solutions into either new or existing systems and applications
• Ensure seamless interoperability between on-premises and cloud environments
• Implement and enforce security requirements to protect Azure-based systems and data
• Define and maintain Azure Governance policies including Subscription Management, Cost Management, Security, Resource Consistency, Identity Baseline, Deployment Acceleration, etc
• Ensure compliance of architectural and engineering policies, standards, and procedures
• Stays current with emerging cloud technologies and trends and advise on the adoption of new Azure features and services
• Works closely with development teams to support DevOps practices and implement continuous integration and continuous deployment (CI/CD) pipelines
• Leads technical discussions and presentations for internal teams as well as customers
• Recommends strategies to streamline Azure native technologies for effectiveness and efficiency, considering client needs
• Consistently produce work product in conformance with GuidePoint Security standards
• Approaches problem solving collectively with senior staff and internal and external clients to achieve a mutually beneficial result
• Participates in the development of the Microsoft Cloud team’s strategic plans, training materials and tools
• Effectively trains and mentors staff on new and emerging Azure specific technologies
• Demonstrate ability to author professional documentation that serve as customer deliverables and internal standard operating procedures and delivery playbooks
• Performs other duties and responsibilities as required

Preferred Qualifications

Professional certification in Azure, such as Azure Solutions Architect Expert or similar preferred

Benefits

• Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)
• Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans (spouse/children/family) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans (spouse/children/family) and GPS will contribute in one lump sum: ($500 per EE annually / $1000 per family annually (includes spouse/children/family options)
• Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option