Azure Security Engineer: Cloud Defense & IAM

Zohorecruit; Amsterdam; On-site; EUR 90,000 - 130,000; Full time

Job summary

Zohorecruit is seeking an experienced Azure Security Engineer to design and implement security controls across Azure environments. You will manage Defender for Cloud, Entra ID, and network security services to protect cloud workloads and data.

Responsibilities include threat monitoring with Defender and Sentinel, vulnerability assessments, and embedding security into CI/CD pipelines using Terraform, ARM, and Bicep. A strong IAM and governance mindset is essential.

Qualifications

• 6+ years IT experience with 3+ years in Azure security.
• Hands-on experience with Azure security architecture and cloud controls.
• Proven experience with Defender for Cloud and Sentinel.
• Strong knowledge of Entra ID (IAM, CA, MFA, PIM, RBAC).
• Experience with Azure network security services such as NSGs, Azure Firewall, WAF, DDoS Protection, VPN, ExpressRoute.
• IaC security using Terraform, ARM, and Bicep.
• Familiarity with security frameworks ISO 27001, SOC 2, NIST, GDPR.
• Scripting in PowerShell, Python, or Bash for automation.

Responsibilities

• Design, implement, and manage security controls across Azure subscriptions.
• Configure Defender for Cloud for threat protection and posture management.
• Manage network security: NSG, Firewall, WAF, DDoS, VPN/ExpressRoute.
• Monitor security events with Defender and Sentinel; respond to incidents.
• Conduct risk assessments, vulnerability scans, remediation.
• Embed security into CI/CD pipelines; implement SAST/DAST.
• Secure IaC environments using Terraform, ARM, and Bicep.
• Prepare security docs, audit evidence, and compliance reports.

Skills

Azure security

Defender for Cloud

Entra ID

RBAC

PIM

MFA

Terraform

Bicep

ARM templates

PowerShell

Python

CI/CD security

DevSecOps

Log Analytics

Azure Monitor

ISO 27001

NIST

GDPR

Tools

Terraform

ARM

Bicep

Azure Monitor

Sentinel

WAF

NSG

Job description

Zohorecruit is seeking an experienced Azure Security Engineer to design and implement security controls across Azure environments. You will manage Defender for Cloud, Entra ID, and network security services to protect cloud workloads and data.

Responsibilities include threat monitoring with Defender and Sentinel, vulnerability assessments, and embedding security into CI/CD pipelines using Terraform, ARM, and Bicep. A strong IAM and governance mindset is essential.