Azure Security Engineer

GeekSoft Consulting; Amsterdam; On-site; EUR 90,000 - 130,000; Full time

Benefits offered by this job

International collaborative culture

Dutch benefits package

Job summary

GeekSoft Consulting in Amsterdam, Netherlands is seeking an Azure Security Engineer to design, implement and continuously improve secure cloud architectures for client platforms. You will manage identity, access, secrets and keys while ensuring compliance and robust threat protection.

Lead security controls, configure notes for governance, and participate in DevSecOps integrations with CI/CD pipelines. Strong focus on Azure security tooling and cross-team collaboration is required.

Qualifications

• 6+ years IT experience with 3+ years in Azure/Cloud Security.
• Design, deploy and maintain security controls across Azure subscriptions and workloads.
• Configure identity and access management using Azure AD (Entra ID) incl. Conditional Access, MFA, PIM and RBAC.
• Manage secrets and crypto keys with Azure Key Vault and monitor with Azure Defender tools.

Responsibilities

• Help design, build and improve the client's online platform.
• Research and implement new security tech following best practices.
• Ensure resiliency and availability of different products.
• Be a productive team member and drive security ownership across projects.

Skills

Azure Security

Azure AD

RBAC

MFA

Compliance

Tools

Azure Monitor

Microsoft Defender for Cloud

Microsoft Sentinel

Terraform

Bicep/ARM

Job description

GeekSoft Consulting | Fixed Term Employment

Azure Security Engineer

Amsterdam, Netherlands

• Help design, build and continuously improve the clients online platform.
• Research, suggest and implement new technology solutions following best practices/standards.
• Take responsibility for the resiliency and availability of different products.
• Be a productive member of the team.

Requirements

• 6+ years overall IT experience, with at least 3+ years dedicated to Azure/Cloud Security.
• Design, deploy, and maintain security controls across Azure subscriptions, resource groups, and enterprise workloads.
• Implement network security configurations using NSGs, Azure Firewall, Web Application Firewall (WAF), and DDoS protection.
• Configure identity and access management using Azure AD (Entra ID), including Conditional Access, MFA, PIM, and RBAC.
• Manage secrets, SSL/TLS certificates, and cryptographic keys using Azure Key Vault.
• Monitor cloud infrastructure, run security assessments, perform log analysis (Azure Monitor/Log Analytics), and manage incident response via Microsoft Defender for Cloud and Sentinel.
• Enforce cloud governance and compliance by building and applying Azure Policies and security blueprints.
• Support DevSecOps initiatives by integrating security tools (SAST/DAST, IaC security scanning) into CI/CD pipelines.
• Assist in auditing and aligning cloud infrastructure with industry standards such as ISO 27001, SOC 2, NIST, GDPR, and HIPAA.
• Prepare comprehensive security architecture documentation, threat reports, and audit artifacts.
• Hands-on proficiency with Microsoft Defender for Cloud and Microsoft Sentinel.
• Deep technical knowledge of Azure AD (Entra ID), Conditional Access, MFA, PIM, and RBAC.
• Practical experience managing NSGs, Azure Firewall, WAF, and VPN/ExpressRoute security.
• Proficiency with Azure Key Vault management
• Experience with Azure Policy, Infrastructure as Code (IaC) security principles, and compliance frameworks
• Scripting experience using PowerShell, Python, or Bash.
• Familiarity with Terraform, ARM, or Bicep scanning, and integrating SAST/DAST into CI/CD pipelines.
• Hands-on experience with vulnerability scanning and mitigation strategies.
• Strong analytical, risk-aware, and continuous-improvement mindset.
• Ability to work independently and drive technical ownership across projects.
• Excellent communication skills for conveying security risks and complex concepts to both technical and non-technical stakeholders.

Preferred Certifications

• Microsoft Certified: Azure Security Engineer Associate (AZ-500)
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Microsoft Certified: Cybersecurity Architect Expert (SC-100)
• Certified Information Systems Security Professional (CISSP)
• CompTIA Security+

Fixed Term Employment Contract

Work-Life Balance

Flexible Work Mode

What GeekSoft Consulting Offers

• International, collaborative consulting culture with clear career development paths.
• Comprehensive Dutch benefits package emphasizing well-being, mobility, and career growth.