Senior Azure Security Engineer

Doghouse Recruitment; Eindhoven; Hybrid; EUR 80,000 - 120,000; Full time

Benefits offered by this job

Company car allowance

2 days work from home

Indefinite contract

25 days PTO

Job summary

Doghouse Recruitment is seeking a Senior Azure Security Engineer to strengthen security for mission-critical Azure workloads in the Netherlands. The role involves leading security governance, Entra ID, and Azure-native protections in a regulated, multi-tenant environment.

You will implement security controls, automate with Terraform/Bicep, and partner with client teams to deliver secure cloud platforms. Hybrid work with two days from home and 32–40 hours per week.

Qualifications

• 5+ years in infrastructure or security engineering with Azure at scale.
• Expert Entra ID knowledge with CA policies and governance.
• IaC experience using Terraform or Bicep.
• Experience with Azure Sentinel and Defender for Cloud.

Responsibilities

• Strengthen security operations and mature identity and access management.
• Own Entra ID configuration and security posture.
• Drive detection and response using Sentinel and Defender for Cloud.
• Automate secure Azure resource provisioning with IaC (Terraform/Bicep).
• Lead technical discussions with client engineers and architects.

Skills

Azure security

Entra ID expertise

Terraform / Bicep IaC

Azure Sentinel

Defender for Cloud

PowerShell / Bash / Python

Networking fundamentals

IAM governance / PAM concepts

Technical leadership

Tools

Terraform

Bicep

Job description

Senior Azure Security Engineer | Schiphol-Rijk | Strengthen and mature Azure security for mission-critical workloads at one of the top tech leaders in the Netherlands | 120k + Indefinite contract + Company car

Our client is a mission-critical MSP that helps around 40 enterprise clients in the Netherlands design infrastructure that's air-gapped and runs their most critical workloads. This is done through self-steering teams and close cooperation, using the latest best practices to ensure strict requirements are met. If the platform goes down, vital parts of Dutch society go down think energy supply, payment and ATM infrastructure, edge devices, fraud detection, and anti-money-laundering systems. The core focus is the complete (re)design of cloud and cloud-native solutions. Due to the importance and severity of these environments, it's extremely important that the environments are heavily secure.

You'll be part of a multi-disciplinary team: either an "asset management" team scaling to 50 people across four or five sub-teams, building a massive multi-tenant Azure environment with a private cloud solution in a highly regulated setting (DORA, NIS, ISO), or a smaller, highly senior "public utilities and retail" team working in a dynamic environment on projects like merging two Entra ID tenants and building a data and AI platform on Azure, in close partnership with the customer.

Your role:

As an Senior/Lead Azure Security Engineer, you'll be an engineer first, with a focus on security, not siloed into a narrow specialism. You'll be responsible for strengthening security operations and maturing identity and access management to the highest possible level. This means owning Entra ID configuration, driving detection and response through Sentinel and Defender for Cloud, and using Terraform/Bicep to roll out Azure-native resources securely by default. You'll have the autonomy to bring your own vision, drive structural solutions, and automate processes to stay ahead of the curve, working closely with your team and the client in an environment where changes happen weekly and your contribution has a real, tangible impact.

Your profile:

• 5+ years in infrastructure or security engineering, several of them on Azure at scale
• Expert-level knowledge of Entra ID you know the difference between Privileged Identity Management and Identity Governance, can structure Conditional Access Policies effectively, and understand that Entra ID is a separate service from Azure
• Hands-on experience with Infrastructure as Code, ideally Terraform or Bicep
• Experience with security tooling such as Azure Sentinel and Defender for Cloud
• Solid understanding of core networking fundamentals, identity and security boundaries, plus scripting in PowerShell, Bash, or Python
• Comfortable leading technical discussions with a client's engineers and architects
• Experience in highly regulated environments and familiarity with frameworks like DORA, NIS, or ISO is a strong plus

Benefits: €80k–€120k base salary including 8% holiday allowance. A €10k allowance for a car or OV-card, or can be cashed out on top of your salary. 25 days of PTO, 32–40 hours a week, indefinite contract, 2 days working from home.