Azure Security Engineer

Athena BharatJobs; Dadri, Chennai District, Bengaluru; Hybrid; INR 1,200,000 - 1,800,000; Full time

Job summary

Athena BharatJobs seeks a cloud security specialist to lead Azure security across hybrid environments. You will design and enforce IAM, policy, and governance, and implement Defender for Cloud and Sentinel for continuous monitoring.

You will work with infra and DevOps teams to secure Azure workloads including VMs, storage, SQL, AKS and PaaS services, ensuring encryption and incident response readiness.

Qualifications

• Experience designing and implementing cloud security for Azure and hybrid environments.
• Hands-on with Entra ID/Azure AD, RBAC, MFA, PIM and least-privilege access.
• Experience with Defender for Cloud, Sentinel SIEM, and Defender in general.
• Knowledge of network security: Azure Firewall, NSG, WAF; VPN/ExpressRoute basics.
• Familiarity with encryption, key vaults, and security governance and policy.
• Ability to run risk-based remediation, threat hunting and incident response.

Responsibilities

• Design, implement, and maintain security controls across Azure and hybrid clouds.
• Manage Entra ID/Azure AD, RBAC, Conditional Access and PIM configurations.
• Configure Defender for Cloud, Sentinel, Firewall, and monitoring services.
• Implement secure network architecture with VNets, VPN, ExpressRoute and private endpoints.
• Enforce Azure Policy, security baselines and compliance.
• Manage Key Vault, secrets, certificates and key rotation.
• Monitor vulnerabilities, perform remediation and incident response.
• Collaborate with infra, network and DevOps teams to secure cloud workloads.

Skills

Azure Security

Azure AD / Entra ID

RBAC / PIM / MFA

Defender for Cloud

Microsoft Sentinel

Azure Firewall / NSG / WAF

Azure Key Vault

Azure Policy

Monitor / Log Analytics

Vulnerability Management

Incident Response

Job description

Job Description:

• Design, implement, and maintain security controls across Microsoft Azure and hybrid cloud environments.
• Manage Microsoft Entra ID (Azure AD), RBAC, Conditional Access, MFA, PIM, managed identities, service principals, and least-privilege access.
• Configure and manage Azure security services including Defender for Cloud, Microsoft Sentinel, Azure Firewall, WAF, DDoS Protection, NSG and Private Link.
• Implement secure network architecture including VNets, subnet segmentation, VPN, ExpressRoute, VNet peering and private endpoints.
• Configure and manage Azure Policy, initiatives, security baselines, compliance and governance controls.
• Manage Azure Key Vault, including secrets, certificates, encryption keys, access policies and key rotation.
• Implement security for Azure VMs, Storage Accounts, Azure SQL, App Services, AKS/containers and other PaaS workloads.
• Monitor and remediate vulnerabilities and security recommendations using Microsoft Defender for Cloud.
• Configure Microsoft Sentinel data connectors, analytics rules, alerts, incidents, workbooks and automation/playbooks.
• Perform security monitoring, threat detection, investigation, threat hunting and incident response.
• Configure Azure Monitor, Log Analytics, diagnostic settings and security logging.
• Identify security gaps and perform remediation based on Microsoft Cloud Security Benchmark, CIS, NIST and other compliance requirements.
• Implement encryption for data at rest and in transit and ensure appropriate backup and recovery security.
• Work with infrastructure, network, DevOps and application teams to implement secure cloud solutions.
• Support security assessments, audits, vulnerability management and compliance activities.

Mandatory Skills:

• Azure Security
• Microsoft Entra ID / Azure AD
• Azure RBAC, PIM, MFA, Conditional Access
• Microsoft Defender for Cloud
• Microsoft Sentinel / SIEM
• Azure Firewall / NSG / WAF
• Azure Key Vault
• Azure Policy
• Azure Monitor / Log Analytics
• Vulnerability Management
• Cloud Security / CSPM
• Incident Response