Senior Azure Security Engineer – Cloud Security & Compliance 10946767

Itproposal; Amsterdam; Hybrid; EUR 90,000 - 120,000; Full time

Job summary

Itproposal is seeking a Senior Azure Security Engineer to secure large-scale Azure environments, implement advanced security controls, and drive compliance across cloud workloads in Amsterdam. You will collaborate with platform, DevOps, and compliance teams to embed security into architecture and operations.

The ideal candidate has 6+ years IT experience with 3+ years in Azure cloud security, hands-on Defender for Cloud, Sentinel, and Azure AD/Entra ID governance.

Qualifications

• 6+ years IT experience with 3+ years in Azure security.
• Hands-on with Defender for Cloud and Sentinel.

Responsibilities

• Design, implement, and manage security controls across Azure subscriptions, resource groups, and workloads.
• Configure Defender for Cloud for threat protection and posture management.
• Implement Azure network security: NSGs, Azure Firewall, WAF, DDoS, VPN/ExpressRoute security.
• Manage Conditional Access, MFA, RBAC, and Privileged Identity Management (PIM).
• Configure and manage Azure Key Vault for secrets and encryption keys.
• Monitor security events with Defender and Sentinel; perform log analysis with Azure Monitor and Log Analytics.
• Integrate security into CI/CD pipelines (SAST/DAST, IaC scanning); work with Terraform, ARM, or Bicep.

Skills

Azure security

Defender for Cloud

Microsoft Sentinel

Azure AD Entra ID

PIM / Conditional Access

IaC security

PowerShell / Python

Incident response

Education

AZ-500 – Azure Security Engineer Associate

SC-300 – Identity & Access Administrator Associate

CISSP

CompTIA Security+

Tools

Azure Key Vault

Azure Policy

Blueprints

Terraform

ARM / Bicep

Azure Monitor

Log Analytics

Job description

Senior Azure Security Engineer - Cloud Security & Compliance (Amsterdam, Netherlands)

Requirement ID: 10946767Location: Amsterdam, Netherlands (TNDL - Amsterdam)Start Date: 09 Sep 2026Duration: 6 MonthsStatus: Open

Role Overview

We are seeking an experienced Senior Azure Security Engineer with 6-8 years of IT experience and at least 3 years dedicated to Azure cloud security. In this role, you will secure enterprise‑scale Azure environments, implement advanced security controls, manage identity and access, monitor threats, and ensure compliance across cloud workloads. You will collaborate closely with platform, DevOps, and compliance teams to embed security best practices into architecture and operations.

Key Responsibilities

Azure Security Engineering

• Design, implement, and manage security controls across Azure subscriptions, resource groups, and workloads.
• Configure and operate Microsoft Defender for Cloud for threat protection and posture management.
• Implement Azure network security: NSGs, Azure Firewall, WAF, DDoS Protection, VPN/ExpressRoute security.

Identity & Access Security (Azure AD / Entra ID)

• Manage Conditional Access, MFA, RBAC, and Privileged Identity Management (PIM).
• Strengthen identity governance and enforce least‑privilege access.

Secrets & Key Management

• Configure and manage Azure Key Vault for secrets, certificates, and encryption keys.

Monitoring, Detection & Incident Response

• Monitor security events using Defender and Microsoft Sentinel.
• Perform log analysis with Azure Monitor and Log Analytics.
• Respond to incidents and remediate vulnerabilities.

Governance, Compliance & DevSecOps

• Implement Azure Policy, Blueprints, and governance frameworks.
• Support compliance with ISO 27001, SOC 2, BIO, GDPR, and other standards.
• Integrate security into CI/CD pipelines (SAST/DAST, IaC scanning).
• Work with Terraform, ARM, or Bicep for secure IaC practices.

Documentation & Collaboration

• Prepare security documentation, audit evidence, and reports.
• Collaborate with platform, DevOps, and compliance teams to embed security best practices.
• Stay updated on emerging Azure security features and threat trends.

Essential Skills & Experience

• 6+ years overall IT experience, 3+ years in Azure/cloud security.
• Hands‑on experience with Microsoft Defender for Cloud and Microsoft Sentinel.
• Strong understanding of Azure AD/Entra ID: Conditional Access, MFA, PIM, RBAC.
• Experience with Azure network security tools: NSGs, Azure Firewall, WAF, VPN/ExpressRoute.
• Proficiency with Azure Key Vault.
• Experience with Azure Policy, Blueprints, governance frameworks.
• Scripting skills: PowerShell, Python, or Bash.
• Understanding of DevSecOps and CI/CD security integration.
• Knowledge of compliance standards: ISO 27001, SOC 2, NIST, GDPR, HIPAA.
• Strong analytical, troubleshooting, and incident response skills.
• Clear understanding of Infrastructure as Code (IaC) security.

Preferred Certifications

• AZ-500 – Azure Security Engineer Associate
• SC-300 – Identity & Access Administrator Associate
• CISSP
• CompTIA Security+

Competencies

• Digital: Digital Security
• Digital: DevOps Security Tools
• Cloud Security Architecture
• Threat Detection & Response
• Compliance & Governance

Work Location

Amsterdam, Netherlands(Onsite / Hybrid depending on project needs)