Azure Platform Security Architect

OP Pohjola; Helsinki; Hybrid; EUR 90,000 - 125,000; Full time

Benefits offered by this job

Hybrid work model

Comprehensive occupational healthcare

Sport & cultural benefits

Product discounts

Job summary

OP Pohjola seeks an Azure Platform Security Specialist to shape and secure a large-scale Azure ecosystem. You will define governance, identity, and security controls across enterprise platforms, collaborating with Cyber Security, IT GRC, and platform teams.

You will implement policy, IAM, and risk mitigations using IaC, CI/CD pipelines, and secure change practices in a hybrid Helsinki/Oulu setting.

Qualifications

• Hands-on experience with Azure Policy, including policy design, compliance monitoring, remediation, exemptions, and policy-as-code practices

Responsibilities

• Translate security, regulatory, and Cloud Control Framework requirements into practical Azure Policy and IAM solutions
• Perform risk and impact assessments for policy and access management changes
• Manage policy exemptions with Cyber Security, IT GRC, and control owners
• Contribute to audits, control assessments, and continuous improvement of Azure security governance
• Maintain and automate Azure Policy and IAM controls through Terraform, GitHub, and Azure DevOps pipelines
• Review and assess custom Azure role requests, balancing business needs with security and risk considerations
• Support platform and application teams with policy compliance guidance and security best practices
• Produce technical documentation, architecture decisions, and implementation guidelines for platform governance capabilities
• Manage end-to-end lifecycle of Policy and IAM changes through formal change management processes

Skills

Azure governance

IAM

Policy interpretation

Cloud security principles

Risk assessment

DevSecOps

IaC (Terraform/Bicep)

CI/CD automation

Compliance governance

Tools

Terraform

Bicep

GitHub Actions

Azure DevOps

Job description

OP Pohjola seeks an Azure Platform Security Specialist to shape and secure a large-scale Azure ecosystem. You will define governance, identity, and security controls across enterprise platforms, collaborating with Cyber Security, IT GRC, and platform teams.

You will implement policy, IAM, and risk mitigations using IaC, CI/CD pipelines, and secure change practices in a hybrid Helsinki/Oulu setting.