Azure Security Engineer

Athena Consultancy Services; Dadri, Chennai District, Bengaluru; Hybrid; INR 1,200,000 - 2,200,000; Full time

Job summary

Athena Consultancy Services seeks an experienced Azure Security Engineer to design, implement, and maintain security controls across Microsoft Azure and hybrid cloud environments.

You will manage Entra ID, RBAC, MFA, and policy-based governance while configuring Defender for Cloud, Sentinel, and network security services. Collaboration with infra and DevOps teams is essential to deliver secure cloud solutions.

Qualifications

• Experience designing and enforcing cloud security controls in Azure and hybrid environments.
• Proficiency with Entra ID/Azure AD, RBAC, PIM, and conditional access.
• Hands-on with Defender for Cloud, Sentinel, and network security services.
• Knowledge of governance, policy, and compliance in cloud setups.
• Strong incident response and vulnerability management capabilities.

Responsibilities

• Design, implement, and maintain security controls across Azure and hybrid clouds.
• Manage Entra ID/Azure AD, RBAC, PIM, MFA, and least-privilege access.
• Configure Azure security services including Defender for Cloud and Sentinel.
• Implement secure network architecture with VNets, VPN, ExpressRoute, and private endpoints.
• Configure and manage Azure Policy, baselines, and governance controls.
• Manage Azure Key Vault for secrets, keys, and certificates with rotation.
• Secure Azure resources like VMs, storage, SQL, App Services, AKS/containers.
• Monitor, detect, and remediate vulnerabilities using Defender for Cloud.
• Set up Sentinel data connectors, rules, alerts, and runbooks.
• Perform threat hunting, incident response, and security logging.
• Collaborate with infra, network, DevOps, and apps teams on secure solutions.

Skills

Azure Security

Azure AD / Entra ID

RBAC / PIM / MFA

Defender for Cloud

Microsoft Sentinel

Azure Firewall / NSG / WAF

Azure Key Vault

Azure Policy

Monitor / Log Analytics

Vulnerability Management

Cloud Security / CSPM

Incident Response

Tools

Azure Defender for Cloud

Microsoft Sentinel

Azure Monitor

Azure Log Analytics

ExpressRoute / VPN

Job description

Job Description:

• Design, implement, and maintain security controls across Microsoft Azure and hybrid cloud environments.
• Manage Microsoft Entra ID (Azure AD), RBAC, Conditional Access, MFA, PIM, managed identities, service principals, and least-privilege access.
• Configure and manage Azure security services including Defender for Cloud, Microsoft Sentinel, Azure Firewall, WAF, DDoS Protection, NSG and Private Link.
• Implement secure network architecture including VNets, subnet segmentation, VPN, ExpressRoute, VNet peering and private endpoints.
• Configure and manage Azure Policy, initiatives, security baselines, compliance and governance controls.
• Manage Azure Key Vault, including secrets, certificates, encryption keys, access policies and key rotation.
• Implement security for Azure VMs, Storage Accounts, Azure SQL, App Services, AKS/containers and other PaaS workloads.
• Monitor and remediate vulnerabilities and security recommendations using Microsoft Defender for Cloud.
• Configure Microsoft Sentinel data connectors, analytics rules, alerts, incidents, workbooks and automation/playbooks.
• Perform security monitoring, threat detection, investigation, threat hunting and incident response.
• Configure Azure Monitor, Log Analytics, diagnostic settings and security logging.
• Identify security gaps and perform remediation based on Microsoft Cloud Security Benchmark, CIS, NIST and other compliance requirements.
• Implement encryption for data at rest and in transit and ensure appropriate backup and recovery security.
• Work with infrastructure, network, DevOps and application teams to implement secure cloud solutions.
• Support security assessments, audits, vulnerability management and compliance activities.

Mandatory Skills:

• Azure Security
• Microsoft Entra ID / Azure AD
• Azure RBAC, PIM, MFA, Conditional Access
• Microsoft Defender for Cloud
• Microsoft Sentinel / SIEM
• Azure Firewall / NSG / WAF
• Azure Key Vault
• Azure Policy
• Azure Monitor / Log Analytics
• Vulnerability Management
• Cloud Security / CSPM
• Incident Response