Senior Azure Security Architect – Regulated Cloud Compliance

Axos Business Center; Manila; On-site; PHP 7,643,000 - 11,465,000; Full time

Job summary

Axos Business Center is seeking a Senior Azure Security Engineer to join the Cloud and AI Security team. You will architect, implement, and continually improve security across Microsoft Azure environments for a regulated financial services context.

You will lead security configurations, policy, and monitoring, while partnering with DevSecOps, risk, and compliance teams to embed security-by-design principles into cloud workloads and CI/CD pipelines.

Qualifications

• 7+ years information security experience, with 4+ years focused on Azure cloud security in a regulated industry.
• Deep technical expertise across core Azure security services: Defender for Cloud, Sentinel, Entra ID, Key Vault, Firewall, NSGs, Policy.
• Strong understanding of financial services compliance frameworks: PCI-DSS, SOX, GLBA, FFIEC, NIST CSF.
• Proficiency in scripting and automation: PowerShell, Python, Bicep/ARM templates, Terraform.
• Experience with zero-trust architecture implementation in enterprise Azure environments.
• Bachelor's degree in Computer Science, Information Security, or equivalent practical experience.

Responsibilities

• Design and implement Azure security architectures aligned with regulatory requirements.
• Lead Azure Security Center / Defender for Cloud configuration, policy management, and monitoring.
• Own and mature Azure AD (Entra ID) security posture — PIM, Conditional Access, MFA, identity governance, and privileged identity management.
• Architect and enforce Azure Policy, Blueprints, and Management Group structures for least-privilege deployments.
• Lead implementation and management of Azure Sentinel SIEM/SOAR with custom rules and playbooks.
• Drive network security design: NSGs, Azure Firewall, DDoS protection, Private Endpoints, hub-spoke.
• Perform threat modeling, risk assessments, and security reviews for new Azure workloads.
• Manage secrets, keys, and certificate lifecycle via Azure Key Vault and ensure HSM integration.
• Lead response to cloud-native security incidents and remediation.
• Collaborate with DevSecOps to embed security in CI/CD (GitHub Actions, Azure DevOps).
• Produce executive-level reporting on cloud security KPIs and risk posture.
• Mentor junior engineers and contribute to team capability building.

Skills

Azure security engineering

Information security

Regulatory compliance

Scripting & automation

Education

Bachelor's degree in Computer Science or Information Security

Tools

Defender for Cloud

Sentinel

Entra ID

Key Vault

Firewall

NSGs

Policy

PowerShell

Python

Bicep/ARM templates

Terraform

Job description

Axos Business Center is seeking a Senior Azure Security Engineer to join the Cloud and AI Security team. You will architect, implement, and continually improve security across Microsoft Azure environments for a regulated financial services context.

You will lead security configurations, policy, and monitoring, while partnering with DevSecOps, risk, and compliance teams to embed security-by-design principles into cloud workloads and CI/CD pipelines.