Sr. Azure Security Engineer

Axos Business Center; Manila; On-site; PHP 7,643,000 - 11,465,000; Full time

Job summary

Axos Business Center is seeking a Senior Azure Security Engineer to join the Cloud and AI Security team. You will architect, implement, and continually improve security across Microsoft Azure environments for a regulated financial services context.

You will lead security configurations, policy, and monitoring, while partnering with DevSecOps, risk, and compliance teams to embed security-by-design principles into cloud workloads and CI/CD pipelines.

Qualifications

• 7+ years information security experience, with 4+ years focused on Azure cloud security in a regulated industry.
• Deep technical expertise across core Azure security services: Defender for Cloud, Sentinel, Entra ID, Key Vault, Firewall, NSGs, Policy.
• Strong understanding of financial services compliance frameworks: PCI-DSS, SOX, GLBA, FFIEC, NIST CSF.
• Proficiency in scripting and automation: PowerShell, Python, Bicep/ARM templates, Terraform.
• Experience with zero-trust architecture implementation in enterprise Azure environments.
• Bachelor's degree in Computer Science, Information Security, or equivalent practical experience.

Responsibilities

• Design and implement Azure security architectures aligned with regulatory requirements.
• Lead Azure Security Center / Defender for Cloud configuration, policy management, and monitoring.
• Own and mature Azure AD (Entra ID) security posture — PIM, Conditional Access, MFA, identity governance, and privileged identity management.
• Architect and enforce Azure Policy, Blueprints, and Management Group structures for least-privilege deployments.
• Lead implementation and management of Azure Sentinel SIEM/SOAR with custom rules and playbooks.
• Drive network security design: NSGs, Azure Firewall, DDoS protection, Private Endpoints, hub-spoke.
• Perform threat modeling, risk assessments, and security reviews for new Azure workloads.
• Manage secrets, keys, and certificate lifecycle via Azure Key Vault and ensure HSM integration.
• Lead response to cloud-native security incidents and remediation.
• Collaborate with DevSecOps to embed security in CI/CD (GitHub Actions, Azure DevOps).
• Produce executive-level reporting on cloud security KPIs and risk posture.
• Mentor junior engineers and contribute to team capability building.

Skills

Azure security engineering

Information security

Regulatory compliance

Scripting & automation

Education

Bachelor's degree in Computer Science or Information Security

Tools

Defender for Cloud

Sentinel

Entra ID

Key Vault

Firewall

NSGs

Policy

PowerShell

Python

Bicep/ARM templates

Terraform

Job description

Axos Business Center, Corp

About This Job

About the Role

We are seeking a Senior Azure Security Engineer to join our Cloud and AI Security team within one of the nation's leading financial institutions. In this role, you will be the subject matter expert responsible for architecting, implementing, and continuously improving the security posture of our Microsoft Azure environments. You will partner closely with infrastructure, application development, risk, and compliance teams to embed security-by-design principles across our cloud estate.

Key Responsibilities

Design and implement Azure security architectures aligned with FSI regulatory requirements including SOX, PCI-DSS, GLBA, and FFIEC guidelines.
Lead Azure Security Center / Microsoft Defender for Cloud configuration, policy management, and continuous monitoring.
Own and mature Azure Active Directory (Entra ID) security posture — PIM, Conditional Access, MFA, identity governance, and privileged identity management.
Architect and enforce Azure Policy, Blueprints, and Management Group structures to ensure least-privilege and compliant deployments.
Lead implementation and management of Azure Sentinel SIEM/SOAR — develop custom detection rules, playbooks, and automation workflows.
Drive network security design: NSGs, Azure Firewall, DDoS protection, Private Endpoints, and hub-spoke architectures.
Perform threat modeling, risk assessments, and security reviews for new Azure workloads and platform changes.
Manage secrets, keys, and certificate lifecycle via Azure Key Vault; ensure HSM integration for regulated workloads.
Lead response to cloud-native security incidents, conducting root cause analysis and driving remediation.
Collaborate with DevSecOps teams to embed security into CI/CD pipelines (GitHub Actions, Azure DevOps).
Produce executive-level reporting on cloud security KPIs, control effectiveness, and risk posture.
Mentor junior engineers and contribute to team capability building and knowledge sharing.

Required Qualifications

• 7+ years of information security experience, with 4+ years focused on Azure cloud security in a regulated industry
• Deep technical expertise across core Azure security services: Defender for Cloud, Sentinel, Entra ID, Key Vault, Firewall, NSGs, Policy
• Strong understanding of financial services compliance frameworks: PCI-DSS, SOX, GLBA, FFIEC, NIST CSF
• Proficiency in scripting and automation: PowerShell, Python, Bicep/ARM templates, Terraform
• Experience with zero-trust architecture implementation in enterprise Azure environments
• Solid understanding of PKI, cryptographic standards, and secrets management
• Bachelor's degree in Computer Science, Information Security, or equivalent practical experience

Preferred Qualifications

• Microsoft Certified: Azure Security Engineer Associate (AZ-500) — required
• Microsoft Certified: Security Operations Analyst (SC-200) — strongly preferred
• Additional certifications: CISSP, CISM, CCSP, CEH
• Experience with DORA, MAS TRM, or OCC guidelines
• Familiarity with multi-cloud security strategies and cross-cloud SIEM integrations
• Prior experience in investment banking, retail banking, or insurance environments

About Axos

Born digital-first, Axos delivers financial tools and services that allow individuals, small businesses, and companies to access and manage their money how, when, and where they want. We’re a diverse team of dynamic, insightful, and independent innovators who are excited to provide technology-driven solutions that offer unbeatable value to our customers. Axos Financial is our holding company and is publicly traded on the New York Stock Exchange under the symbol "AX" (NYSE: AX). Learn More about working at Axos Business Center

Pre-Employment Background Check, Medical, and Drug Test

All offers are contingent upon the candidate successfully passing a credit check, criminal background check, and pre-employment medical and drug screening.

Equal Employment Opportunity

Axos is an Equal Opportunity employer. We are committed to providing equal employment opportunities to all employees and applicants without regard to race, religious creed, color, sex (including pregnancy, breast feeding and related medical conditions), gender, gender identity, gender expression, sexual orientation, national origin, ancestry, citizenship status, military and veteran status, marital status, age, protected medical condition, genetic information, physical disability, mental disability, or any other protected status in accordance with all applicable federal, state, and local laws.

Job Functions and Work Environment

While performing the duties of this position, the employee is required to sit for extended periods of time. Manual dexterity and coordination are required while operating standard office equipment such as computer keyboard and mouse, calculator, telephone, copiers, etc. The work environment characteristics described here are representative of those an employee may encounter while performing the essential functions of this position. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of this position.

We’re a team of relentless innovators that are challenging the status quo through smart, pro-consumer financial products and services. We got our start in 2000, as an online bank – when the idea of banking online was almost unthinkable. Since then, we’ve evolved to add commercial banking, commercial lending, investment, clearing, and fiduciary services to our toolbox. As modern life continues to present new challenges for clients, we step up and find creative ways to solve them.