Azure Cloud Security Architect - Secure, Govern & Innovate

Sekuro; Sydney; On-site; AUD 140,000 - 190,000; Full time

Job summary

Sekuro is seeking an experienced Azure Cloud Security professional to support a six-month engagement. The role focuses on strengthening security posture, network design, governance and identity controls across Azure environments.

You will work across hybrid and multi-cloud contexts, applying Defender for Cloud, Landing Zone architecture, and policy-driven governance to deliver secure, scalable cloud solutions.

Qualifications

• Hands-on expertise in Azure Security Posture Management and Defender for Cloud.
• Strong knowledge of Azure network security, Landing Zone, VNet and NSGs.
• Experience designing governance via Azure Policy, Management Groups & Landing Zones.
• Proficient with IAM tools: Entra, Azure RBAC, PIM, Conditional Access.
• Familiarity with Key Vault and security frameworks (CIS/NIST/ISO27001).

Responsibilities

• Assess and improve Azure security posture across hybrid/multi-cloud environments.
• Design and secure network boundaries, implement landing zones and topology patterns.
• Define and enforce Azure Policies/Initiatives for governance at scale.
• Manage access controls and identities using Entra, RBAC, PIM and CA policies.

Skills

Azure Security Posture Management

Microsoft Defender for Cloud

Secure Score optimisation

Workload protection

Continuous security assessment

Azure network security

Landing Zone Architecture

Cloud Adoption Framework

VNet architecture

Network Security Groups

Azure Premium Firewall

Azure WAF

Private Link/Private Endpoints

Azure Bastion

DDoS Protection

hub-and-spoke / Virtual WAN

Azure Policy

Management Groups & Landing Zones

Entra

Azure RBAC

PIM

Conditional Access

Managed Identities

Azure Key Vault

CIS Benchmarks

NIST

ISO 27001

Job description

Sekuro is seeking an experienced Azure Cloud Security professional to support a six-month engagement. The role focuses on strengthening security posture, network design, governance and identity controls across Azure environments.

You will work across hybrid and multi-cloud contexts, applying Defender for Cloud, Landing Zone architecture, and policy-driven governance to deliver secure, scalable cloud solutions.