Azure Cloud Security Engineer — Ownership & Architecture

Tempest Vane Partners; England; On-site; GBP 70,000 - 110,000; Full time

Job summary

Tempest Vane Partners is seeking an Azure-focused Cloud Security Engineer to take ownership of cloud security architecture and automation. You will own IaC security, enforce secure engineering standards, and build robust Entra ID access controls across the Azure environment.

You will work hands-on to implement Zero Trust, defence-in-depth, and detections with KQL, leveraging Microsoft Sentinel, Wiz and Defender, while automating processes with PowerShell or Python.

Qualifications

• We’re looking for a hands-on Cloud Security Engineer with autonomy.
• Deep knowledge of Azure cloud security architecture and IAM.
• Experience with Infrastructure-as-Code, Terraform and GitHub.
• Proficient in Entra ID / Azure AD and CI/CD pipelines.
• Familiarity with SIEM tools such as Microsoft Sentinel and Wiz.
• Scripting skills in PowerShell and Python.
• Experience in regulated, high-security environments.

Responsibilities

• Own and evolve Azure cloud security architecture and secure engineering standards.
• Lead Infrastructure-as-Code security and secure engineering practices.
• Design and implement secure Entra ID identity and access controls.
• Develop cloud security using Zero Trust and defence-in-depth principles.
• Hands-on work with Microsoft Defender, Sentinel, Wiz, Intune and Azure Key Vault.
• Build and tune detections using KQL.
• Automate security processes with PowerShell and/or Python.
• Collaborate with Engineering and Compliance on regulatory requirements.
• Influence security tooling and the wider cloud strategy.

Skills

Azure cloud security

IAM / Entra ID

Git & CI/CD

PowerShell

Python

KQL

Terraform

GitHub

SIEM

Defender

Tools

Terraform

GitHub

Wiz

Microsoft Sentinel

Azure Key Vault

Job description

Tempest Vane Partners is seeking an Azure-focused Cloud Security Engineer to take ownership of cloud security architecture and automation. You will own IaC security, enforce secure engineering standards, and build robust Entra ID access controls across the Azure environment.

You will work hands-on to implement Zero Trust, defence-in-depth, and detections with KQL, leveraging Microsoft Sentinel, Wiz and Defender, while automating processes with PowerShell or Python.