Senior Cloud Engineer- Azure

NCS Australia; Canberra; On-site; AUD 140,000 - 190,000; Full time

Job summary

NCS Australia seeks a Senior Azure Cloud Engineer to join our cloud and security team. You will design, implement, and continuously improve secure Azure and multi-cloud platforms, embedding security controls in IaC, CI/CD, IAM, and governance workflows.

You will collaborate with platform engineers, application teams, and security stakeholders to ensure security is integrated throughout the cloud delivery lifecycle, in a highly regulated environment.

Qualifications

• Proven experience designing, implementing, and securing enterprise-scale Azure cloud environments.
• Strong hands-on experience with: Microsoft Azure, Microsoft Entra ID, IAM, IaC (Terraform, Bicep or similar), CI/CD and DevSecOps practices.
• Experience with cloud security platforms such as: Microsoft Defender for Cloud, Microsoft Sentinel, CSPM solutions.
• Strong understanding of cloud security architecture and governance frameworks including: ISM, IRAP, PSPF, NIST.
• Demonstrated ability to embed security controls into automated deployment pipelines and cloud platform services.
• Strong stakeholder engagement and communication skills.
• Experience supporting secure multi-cloud environments (Azure and AWS).
• Exposure to government, defence, or highly regulated environments.
• Relevant industry certifications such as: AZ-500, Azure Solutions Architect Expert, AWS Security Specialty, CISSP, CCSP.

Responsibilities

• Design and implement secure Azure cloud architectures aligned with Zero Trust principles.
• Develop, deploy, and maintain security controls across Azure cloud environments, including IAM, Entra ID, policy management, encryption, monitoring and logging.
• Support CSPM initiatives and tooling.
• Integrate security controls into IaC and CI/CD pipelines.
• Build and automate cloud infrastructure using modern DevOps practices.
• Support vulnerability management and remediation across cloud platforms.
• Ensure cloud services align with ISM, IRAP, PSPF and NIST requirements.
• Partner with platform engineering and application delivery teams to embed security into design and deployment.
• Drive continuous improvement of cloud security standards, governance, and operational practices.
• Contribute to multi-cloud security initiatives across Azure and AWS environments.

Skills

Azure cloud

Security engineering

DevOps practices

Stakeholder engagement

Regulated environment

Tools

Terraform

Bicep

CI/CD tooling

Microsoft Defender for Cloud

Microsoft Sentinel

CSPM solutions

Entra ID

Job description

At NCS Australia, we believe in doing technology services better. Our commitment to quality, focus on people, and willingness to challenge traditional thinking set us apart. Our team brings this belief to life by partnering with our clients and communities to make tomorrow together.

We are committed to creating an environment that prioritises innovation, collaboration, and purposeful work. Our diverse team is empowered to make a meaningful impact with curiosity, creativity and resilience to shape better outcomes. Join us and accept the challenge of creating a better tomorrow.

Job Description

About the Role

We are seeking an experienced Senior Azure Cloud Engineer to join a high-performing cloud and security team supporting complex, mission-critical cloud environments. This role will play a key part in designing, implementing, and continuously improving secure cloud platforms across Azure and multi-cloud environments.

Working within a highly regulated environment, you will be responsible for embedding security controls into cloud architecture, Infrastructure as Code (IaC), DevOps pipelines, identity management, and cloud governance frameworks. You will collaborate closely with platform engineers, application teams, and security stakeholders to ensure security is integrated throughout the cloud delivery lifecycle.

This is an exciting opportunity for a cloud engineer who is passionate about secure-by-design principles, automation, and modern cloud security practices.

Key Responsibilities

• Design and implement secure Azure cloud architectures aligned with Zero Trust principles.
• Develop, deploy, and maintain security controls across Azure cloud environments, including:
  • Identity and Access Management (IAM)
  • Microsoft Entra ID
  • Policy management
  • Encryption
  • Monitoring and logging
• Support cloud security posture management (CSPM) initiatives and tooling.
• Integrate security controls into Infrastructure as Code (IaC) and CI/CD pipelines.
• Build and automate cloud infrastructure using modern DevOps practices.
• Support vulnerability management and remediation across cloud platforms.
• Ensure cloud services align with security frameworks and compliance requirements including ISM, PSPF, IRAP and NIST.
• Partner with platform engineering and application delivery teams to embed security into solution design and deployment.
• Drive continuous improvement of cloud security standards, governance, and operational practices.
• Contribute to multi-cloud security initiatives across Azure and AWS environments.

Qualifications

• Proven experience designing, implementing, and securing enterprise-scale Azure cloud environments.
• Strong hands-on experience with:
  • Microsoft Azure
  • Microsoft Entra ID
  • Identity and Access Management (IAM)
  • Infrastructure as Code (Terraform, Bicep or similar)
  • CI/CD and DevSecOps practices
• Experience with cloud security platforms such as:
  • Microsoft Defender for Cloud
  • Microsoft Sentinel
  • CSPM solutions
• Strong understanding of cloud security architecture and governance frameworks including:
  • ISM
  • IRAP
  • PSPF
  • NIST
• Demonstrated ability to embed security controls into automated deployment pipelines and cloud platform services.
• Strong stakeholder engagement and communication skills.
• Experience supporting secure multi-cloud environments (Azure and AWS).
• Exposure to government, defence, or highly regulated environments.
• Relevant industry certifications such as:
  • Microsoft Certified: Azure Security Engineer Associate (AZ-500)
  • Microsoft Certified: Azure Solutions Architect Expert
  • AWS Security Specialty
  • CISSP
  • CCSP

Additional Information

At NCS Australia, you'll be part of a team that values your growth and development. Our comprehensive global learning and development program will equip you with the skills and knowledge needed to succeed. Plus, you'll be mentored by some of the industry's best, and have access to a worldwide network of career opportunities. Join us now and discover just how far your career can go!

We are in the process of refreshing our employee benefits, so don’t forget to ask our Talent Acquisition Team about what’s on offer.

We take pride in our commitment to valuing and supporting our people and the communities we serve. Diversity, inclusivity, and being different are not just buzzwords for us - they are integral to our culture. We are dedicated to upholding Equal Employment Opportunity Principles and providing reasonable accommodations to all our applicants. If you require any assistance or modifications to navigate our careers site or complete your application, please don't hesitate to reach out to us at [e-mail] .

Other important stuff:

To be eligible for a position with us, applicants will need to have valid work rights for Australia and be willing to undergo a comprehensive background checking process, including probity and police checks.

As we navigate through our business integration process, we will continue to issue contracts under our existing entities of ARQ, Dialog, CatapultBI, ICEMEDIA, Eighty20, Riley or AccessHQ.

Visit our website https://www.ncs.co/en-au/ for more information.

Work rights and background checks:

To be eligible for a position with us, applicants will need to have valid work rights for Australia and be willing to undergo a comprehensive background checking process, including probity and police checks

By clicking the link above or any third-party link within this posting, you are leaving this site and going to a third-party website where the third-party website's terms and privacy policy apply