Azure Security Architect

ERM Placement Services; Pune District; On-site; INR 400,000 - 650,000; Full time

Job summary

ERM Placement Services seeks a Senior Azure Security Architect to drive cloud security assessments and enforce guardrails for Azure onboarding. You will design and maintain policies across tenants, review SaaS/PaaS security, and oversee PIM and Conditional Access in a multi-tenant Azure environment.

Ideal candidates have 5+ years of hands-on Azure security architecture experience, certifications (AZ-500/AZ-104 or CISSP), and familiarity with Entra ID, Defender for Cloud, and CIS/NIST/ISO

Qualifications

• BE / BTech / MTech degree required.
• Microsoft Azure certifications AZ-500 and AZ-104 or CISSP or equivalent preferred.
• Hands-on cloud security architecture experience on Azure at enterprise scale (5+ years).
• Experience managing Azure security policy enforcement across multiple tenants and large-scale subscriptions.
• Experience with Entra ID, PIM, CA, Azure Sentinel, Logic Apps, Defender for Cloud; CIS benchmarks, NIST CSF, ISO 27001 knowledge.

Responsibilities

• Lead Cloud Security Assessments using the Agentic AI Platform and provide CloudSec inputs for platform development.
• Design, implement, and enforce security controls and guardrails for Azure onboarding.
• Design and maintain Azure security policies across tenants and subscriptions.
• Conduct cloud security reviews of JPL applications hosted in independent tenants (Omni AI and CloudStaff).
• Coordinate Azure resource tagging governance across 500+ subscription owners.
• Monitor Azure cost governance for Infosec resources and optimize spend.
• Administer PIM and architect Conditional Access policies across the Azure environment.
• Perform SaaS/PaaS security reviews and compliance monitoring across connected apps and clouds.

Skills

Azure security

PIM

Conditional Access

Azure policy

Infosec governance

Education

BE / BTech / MTech

Tools

Entra ID

Azure Sentinel

Defender for Cloud

Azure Policy

Job description

Key Responsibilities:

• Lead Cloud Security Assessments using the Agentic AI Platform and provide CloudSec domain inputs for development and augmentation of the platform.
• Design, implement, and enforce security controls & guardrails for new application and platform onboarding to Azure.
• Design and maintain Azure security policies across tenants and subscriptions
• Conduct cloud security reviews of JPL applications hosted in independent tenants, including Omni AI and CloudStaff
• Coordinate Azure resource tag correction across 500+ subscription owners and maintain tagging governance
• Monitor Azure cost governance for Infosec resources and optimize cloud security spend
• Administer PIM (Privileged Identity Management) and architect Conditional Access policies across the Azure environment.
• Perform SaaS/PaaS security reviews and compliance monitoring across all connected applications and cloud platforms.

Qualification and Work Experience

Qualification: BE / BTech / MTech

Certifications: Microsoft Certified: Azure Security Engineer Associate (AZ-500), Azure Administrator (AZ-104), CISSP, or equivalent cloud security certifications.(Preferred*)

Work experience: Hands-on experience in cloud security architecture, with at least 5 years specifically on Microsoft Azure at enterprise scale.

• Proven experience managing Azure security policy enforcement across multiple tenants and large-scale subscription environments.
• Hands-on experience with Entra ID, PIM, Conditional Access, Azure Sentinel, Logic Apps, and Defender for Cloud.
• Solid understanding of cloud security architecture frameworks, including CIS Azure Benchmarks, NIST CSF, and ISO 27001 controls.
• Experience conducting security reviews of SaaS applications and cloud-native workloads in multi-tenant Azure environments.
• Experience with Agentic AI platforms or contributing security domain inputs to AI-driven security tooling is a strong advantage.
• Preferred: Experience in Azure cost governance, resource tagging strategy, and Infosec spend optimisation at scale.