Azure Cloud Security Engineer — Hybrid, IAM & Data Protection

Cyro Cyber Ltd; Greater London; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

25 days holiday

Job summary

Cyro Cyber Ltd seeks a hands-on Cloud Security Engineer with strong Microsoft Azure and Microsoft 365 experience to implement, harden and assure cloud security controls. You will work within Cyro’s Cyber Security Architecture team to translate requirements into detailed designs and deliver secure, automated deployments.

The role covers Azure security domains such as identity, governance, networking, workload protection, logging and data protection, with emphasis on Privileged Identity Management

Qualifications

• Strong hands-on experience engineering and securing Microsoft Azure environments.
• Practical capability across Azure security domains including identity, governance, networking, workload protection, logging and secrets management.
• Experience with Microsoft Entra ID, Privileged Identity Management and other Azure security technologies.
• Proficient in infrastructure-as-code or scripting tools (Bicep, Terraform, PowerShell, Azure CLI).
• Ability to translate architectural requirements into detailed LLDs, build documentation and runbooks.
• Good client-facing communication and stakeholder engagement skills.

Responsibilities

• Implement, configure, harden and troubleshoot security controls across Azure and Microsoft 365 environments.
• Configure Entra ID controls including Conditional Access, MFA, RBAC and privileged access controls.
• Implement platform governance using Azure Policy, Defender for Cloud and secure score.
• Engineer network security controls including VNETs, NSGs, Azure Firewall and private endpoints.
• Implement Key Vault, encryption, secrets management and workload identity controls.
• Secure Azure workloads across VMs, containers, AKS, App Service and databases.
• Configure security logging with Azure Monitor and Log Analytics, and integrate Defender XDR telemetry.
• Investigate and resolve cloud security issues and documentation of root causes.

Skills

Azure security

Entra PIM

Azure Policy

Key Vault

Azure Monitor

Terraform

Bicep

Azure AD

Tools

Azure DevOps

GitHub

PowerShell

Azure CLI

Job description

Cyro Cyber Ltd seeks a hands-on Cloud Security Engineer with strong Microsoft Azure and Microsoft 365 experience to implement, harden and assure cloud security controls. You will work within Cyro’s Cyber Security Architecture team to translate requirements into detailed designs and deliver secure, automated deployments.

The role covers Azure security domains such as identity, governance, networking, workload protection, logging and data protection, with emphasis on Privileged Identity Management