Azure Security Architect

ERM Placement Services; Chandigarh; On-site; INR 1,800,000 - 3,000,000; Full time

Job summary

ERM Placement Services is seeking a Senior Azure Security Engineer to lead cloud security assessments and implement guardrails for onboarding new applications to Azure. You will enforce policy across numerous tenants and subscriptions, manage Entra ID, PIM, and Conditional Access, and optimize security spend.

The role requires hands-on enterprise-scale Azure security experience, CIS and ISO controls familiarity, and the ability to review SaaS/PaaS security across connected platforms.

Qualifications

• BE / BTech / MTech or higher in a relevant field.
• Microsoft Azure Cloud Security expertise with enterprise-scale deployments.
• Proven experience managing Azure security policy enforcement across multiple tenants.
• Hands-on with Entra ID, PIM, CA, Sentinel, Logic Apps, Defender for Cloud.
• Familiarity with CIS Azure Benchmarks, NIST CSF, ISO 27001 controls.
• Experience reviewing security of SaaS apps and multi-tenant workloads.
• Experience with Agentic AI platforms or security tooling in AI contexts is a plus.

Responsibilities

• Lead Cloud Security Assessments using the Agentic AI Platform and contribute security inputs.
• Design, implement, and enforce security controls for new app/platform onboarding to Azure.
• Maintain Azure security policies across tenants and subscriptions.
• Conduct cloud security reviews of JPL apps hosted in multiple tenants.
• Coordinate Azure resource tagging governance across 500+ subscriptions.
• Monitor and optimize Infosec spend and cost governance.
• Administer PIM and architect Conditional Access policies across Azure.
• Perform SaaS/PaaS security reviews and compliance monitoring across cloud platforms.

Skills

Azure security architecture

Entra ID

PIM

Conditional Access

Azure Sentinel

Logic Apps

Defender for Cloud

CIS Azure Benchmarks

NIST CSF

ISO 27001 controls

AI security tooling

Azure cost governance

Education

BE / BTech / MTech

Microsoft Azure AZ-500 Certification

Azure Administrator AZ-104 Certification

CISSP Certification

Tools

Azure

Entra ID

PIM

Conditional Access

Azure Sentinel

Logic Apps

Defender for Cloud

Job description

Key Responsibilities:

• Lead Cloud Security Assessments using the Agentic AI Platform and provide CloudSec domain inputs for development and augmentation of the platform.
• Design, implement, and enforce security controls & guardrails for new application and platform onboarding to Azure.
• Design and maintain Azure security policies across tenants and subscriptions
• Conduct cloud security reviews of JPL applications hosted in independent tenants, including Omni AI and CloudStaff
• Coordinate Azure resource tag correction across 500+ subscription owners and maintain tagging governance
• Monitor Azure cost governance for Infosec resources and optimize cloud security spend
• Administer PIM (Privileged Identity Management) and architect Conditional Access policies across the Azure environment.
• Perform SaaS/PaaS security reviews and compliance monitoring across all connected applications and cloud platforms.

Qualification and Work Experience

Qualification: BE / BTech / MTech

Certifications: Microsoft Certified: Azure Security Engineer Associate (AZ-500), Azure Administrator (AZ-104), CISSP, or equivalent cloud security certifications.(Preferred*)

Work experience: Hands-on experience in cloud security architecture, with at least 5 years specifically on Microsoft Azure at enterprise scale.

• Proven experience managing Azure security policy enforcement across multiple tenants and large-scale subscription environments.
• Hands-on experience with Entra ID, PIM, Conditional Access, Azure Sentinel, Logic Apps, and Defender for Cloud.
• Solid understanding of cloud security architecture frameworks, including CIS Azure Benchmarks, NIST CSF, and ISO 27001 controls.
• Experience conducting security reviews of SaaS applications and cloud-native workloads in multi-tenant Azure environments.
• Experience with Agentic AI platforms or contributing security domain inputs to AI-driven security tooling is a strong advantage.
• Preferred: Experience in Azure cost governance, resource tagging strategy, and Infosec spend optimisation at scale.