Senior Azure Security Architect – Cloud & Compliance

Axos Bank; Manila; On-site; PHP 1,800,000 - 3,200,000; Full time

Job summary

Axos is seeking a Senior Azure Security Engineer to join its Cloud and AI Security team. You will architect, implement, and continuously improve the security posture of Microsoft Azure environments, partnering with risk, compliance, and DevSecOps teams.

You will lead Defender for Cloud, Entra ID, Key Vault, and Sentinel initiatives, drive least-privilege architectures, and produce executive-level security KPIs and risk reporting.

Qualifications

• 7+ years in information security, with 4+ years in Azure cloud security in regulated industries.
• Deep technical expertise across Defender for Cloud, Sentinel, Entra ID, Key Vault, Firewall, NSGs, and Policy.
• Strong understanding of PCI-DSS, SOX, GLBA, FFIEC, and NIST CSF frameworks.
• Proficiency in scripting/automation: PowerShell, Python, Bicep/ARM, Terraform.
• Experience with zero-trust architecture in large Azure environments.
• Solid PKI and cryptography knowledge; managing secrets lifecycle.

Responsibilities

• Design and implement Azure security architectures aligned with regulatory requirements.
• Lead Azure Defender for Cloud configuration, policy management, and monitoring.
• Secure Azure AD (Entra ID) posture including PIM, CA, MFA, identity governance.
• Architect and enforce Azure Policy, Blueprints, and Management Groups for least-privilege deployments.
• Develop and manage Azure Sentinel SIEM/SOAR rules and playbooks.

Skills

Azure security

PowerShell

Python

Bicep/ARM templates

Terraform

Zero-trust architecture

PKI / cryptography

Education

Bachelor's degree in Computer Science or related

Tools

Defender for Cloud

Azure Sentinel

Entra ID

Key Vault

Azure Firewall

Azure Policy

Azure DevOps

Job description

Axos is seeking a Senior Azure Security Engineer to join its Cloud and AI Security team. You will architect, implement, and continuously improve the security posture of Microsoft Azure environments, partnering with risk, compliance, and DevSecOps teams.

You will lead Defender for Cloud, Entra ID, Key Vault, and Sentinel initiatives, drive least-privilege architectures, and produce executive-level security KPIs and risk reporting.