Azure Security Architect

Sekuro; Sydney; On-site; AUD 140,000 - 190,000; Full time

Job summary

Sekuro is seeking an experienced Azure Cloud Security professional to support a six-month engagement. The role focuses on strengthening security posture, network design, governance and identity controls across Azure environments.

You will work across hybrid and multi-cloud contexts, applying Defender for Cloud, Landing Zone architecture, and policy-driven governance to deliver secure, scalable cloud solutions.

Qualifications

• Hands-on expertise in Azure Security Posture Management and Defender for Cloud.
• Strong knowledge of Azure network security, Landing Zone, VNet and NSGs.
• Experience designing governance via Azure Policy, Management Groups & Landing Zones.
• Proficient with IAM tools: Entra, Azure RBAC, PIM, Conditional Access.
• Familiarity with Key Vault and security frameworks (CIS/NIST/ISO27001).

Responsibilities

• Assess and improve Azure security posture across hybrid/multi-cloud environments.
• Design and secure network boundaries, implement landing zones and topology patterns.
• Define and enforce Azure Policies/Initiatives for governance at scale.
• Manage access controls and identities using Entra, RBAC, PIM and CA policies.

Skills

Azure Security Posture Management

Microsoft Defender for Cloud

Secure Score optimisation

Workload protection

Continuous security assessment

Azure network security

Landing Zone Architecture

Cloud Adoption Framework

VNet architecture

Network Security Groups

Azure Premium Firewall

Azure WAF

Private Link/Private Endpoints

Azure Bastion

DDoS Protection

hub-and-spoke / Virtual WAN

Azure Policy

Management Groups & Landing Zones

Entra

Azure RBAC

PIM

Conditional Access

Managed Identities

Azure Key Vault

CIS Benchmarks

NIST

ISO 27001

Job description

We're a founder-led global consulting company in the cybersecurity market, operating across Australia, Asia, and the UK. Our reputation is built on breaking away from traditional consulting models, embracing a direct and fresh approach that puts clients at the centre of everything we do. Our mission is simple: to be our clients' most trusted security partner by delivering impactful outcomes that build resilience, enable innovation, and improve competitiveness.

Our vision is to be the world's most trusted security partner, enabling organisations to protect today and prepare for tomorrow. We exist to secure organisations, empowering them to thrive in a digital world.

We live by our values: we are brave, we raise the bar, we tell it how it is, we own the outcome, and we care for all.

The Role

We are looking for an experienced Azure Cloud Security professional to support our Cloud Modernisation project over a six-month engagement.

What You'll Do

• Assess and improve our Azure security posture using Microsoft Defender for Cloud, optimising Secure Score, protecting workloads, and maintaining continuous security assessment across hybrid and multi-cloud environments.
• Design and secure network boundaries and traffic flow, applying Azure Landing Zone Architecture, the Cloud Adoption Framework, VNet architecture, Network Security Groups, Azure Premium Firewall, Azure WAF, Private Link and Private Endpoints, Azure Bastion, DDoS Protection, and hub-and-spoke or Virtual WAN topologies.
• Design, implement, and enforce Azure Policies and Initiatives to maintain regulatory compliance, enforce tagging and naming standards, and support governance at scale through Management Groups and Landing Zones.
• Manage identity and access controls using Entra, Azure RBAC, PIM, and Conditional Access policies for workloads and managed identities, ensuring appropriate control over access to cloud resources.

What You'll Need

• Hands-on expertise in Azure Security Posture Management, including Microsoft Defender for Cloud, Secure Score optimisation, workload protection, and continuous security assessment.
• Deep knowledge of Azure network security, including Landing Zone Architecture, the Cloud Adoption Framework, VNet architecture, NSGs, Azure Premium Firewall, Azure WAF, Private Link/Private Endpoints, Azure Bastion, DDoS Protection, and hub-and-spoke or Virtual WAN topologies.
• Proficiency in Azure Policy and Governance, including designing, implementing, and enforcing Azure Policies and Initiatives across Management Groups and Landing Zones.
• Strong command of IAM tools, including Entra, Azure RBAC, PIM, Conditional Access policies, and managed identities.
• Familiarity with Azure Key Vault, encryption at rest and in transit, and alignment with frameworks such as CIS Benchmarks, NIST, or ISO 27001 would be highly valuable.