Sr. Azure Security Engineer

Axos Business Center, Corp; Manila; On-site; PHP 1,200,000 - 1,800,000; Full time

Job summary

Axos Business Center, Corp is seeking a Senior Azure Security Engineer to join our Cloud and AI Security team, focusing on architecting and improving the security of our Microsoft Azure environments. You will partner with infrastructure, development, risk and compliance to embed security-by-design across the cloud estate and lead security operations using Defender for Cloud, Sentinel, and Entra ID.

This role demands deep Azure proficiency, regulatory awareness, and a proactive, collaborative

Qualifications

• 7+ years of information security experience with 4+ years in Azure cloud security in regulated industry.
• Deep technical expertise across Defender for Cloud, Sentinel, Entra ID, Key Vault, Firewall and Policy.
• Strong understanding of PCI-DSS, SOX, GLBA, FFIEC, and NIST CSF compliance frameworks.
• Proficient in scripting/automation: PowerShell, Python, Bicep/ARM templates, Terraform.

Responsibilities

• Design and implement Azure security architectures aligned with regulatory requirements.
• Lead Defender for Cloud configuration, policy management, and monitoring.
• Own Azure AD security posture including PIM, CA, MFA, and privileged identity management.
• Architect and enforce Azure Policy, Blueprints, and Management Group structures for least-privilege deployments.
• Lead Azure Sentinel SIEM/SOAR development including rules, playbooks, and automation.
• Drive network security design: NSGs, Azure Firewall, DDoS protection, Private Endpoints.
• Perform threat modeling, risk assessments, and security reviews for new workloads.
• Manage secrets and certificate lifecycle via Azure Key Vault with HSM integration.
• Lead response to cloud-native security incidents and post-incident remediation.
• Collaborate with DevSecOps to embed security into CI/CD (GitHub Actions, Azure DevOps).
• Produce executive-level reporting on cloud security KPIs and risk posture.
• Mentor junior engineers and contribute to team capability building.

Skills

Azure Defender for Cloud

Azure Sentinel

Entra ID security

Key Vault / Secrets management

Policy & Blueprints

PowerShell / Python scripting

Zero-trust architecture

Education

Bachelor's degree in Computer Science or related field

Tools

Terraform

Bicep/ARM templates

GitHub Actions

Azure DevOps

Python

Job description

About This Job

Axos Business Center, Corp. We are seeking a Senior Azure Security Engineer to join our Cloud and AI Security team within one of the nation's leading financial institutions. In this role, you will be the subject matter expert responsible for architecting, implementing, and continuously improving the security posture of our Microsoft Azure environments. You will partner closely with infrastructure, application development, risk, and compliance teams to embed security‑by‑design principles across our cloud estate.

Key Responsibilities

• Design and implement Azure security architectures aligned with FSI regulatory requirements including SOX, PCI‑DSS, GLBA, and FFIEC guidelines.
• Lead Azure Security Center / Microsoft Defender for Cloud configuration, policy management, and continuous monitoring.
• Own and mature Azure Active Directory (Entra ID) security posture — PIM, Conditional Access, MFA, identity governance, and privileged identity management.
• Architect and enforce Azure Policy, Blueprints, and Management Group structures to ensure least‑privilege and compliant deployments.
• Lead implementation and management of Azure Sentinel SIEM/SOAR — develop custom detection rules, playbooks, and automation workflows.
• Drive network security design: NSGs, Azure Firewall, DDoS protection, Private Endpoints, and hub‑spoke architectures.
• Perform threat modeling, risk assessments, and security reviews for new Azure workloads and platform changes.
• Manage secrets, keys, and certificate lifecycle via Azure Key Vault; ensure HSM integration for regulated workloads.
• Lead response to cloud‑native security incidents, conducting root cause analysis and driving remediation.
• Collaborate with DevSecOps teams to embed security into CI/CD pipelines (GitHub Actions, Azure DevOps).
• Produce executive‑level reporting on cloud security KPIs, control effectiveness, and risk posture.
• Mentor junior engineers and contribute to team capability building and knowledge sharing.

Required Qualifications

• 7+ years of information security experience, with 4+ years focused on Azure cloud security in a regulated industry.
• Deep technical expertise across core Azure security services: Defender for Cloud, Sentinel, Entra ID, Key Vault, Firewall, NSGs, Policy.
• Strong understanding of financial services compliance frameworks: PCI‑DSS, SOX, GLBA, FFIEC, NIST CSF.
• Proficiency in scripting and automation: PowerShell, Python, Bicep/ARM templates, Terraform.
• Experience with zero‑trust architecture implementation in enterprise Azure environments.
• Solid understanding of PKI, cryptographic standards, and secrets management.
• Bachelor's degree in Computer Science, Information Security, or equivalent practical experience.

Preferred Qualifications

• Microsoft Certified: Azure Security Engineer Associate (AZ‑500) — required.
• Microsoft Certified: Security Operations Analyst (SC‑200) — strongly preferred.
• Additional certifications: CISSP, CISM, CCSP, CEH.
• Experience with DORA, MAS TRM, or OCC guidelines.
• Familiarity with multi‑cloud security strategies and cross‑cloud SIEM integrations.
• Prior experience in investment banking, retail banking, or insurance environments.

Job Functions and Work Environment

While performing the duties of this position, the employee is required to sit for extended periods of time. Manual dexterity and coordination are required while operating standard office equipment such as computer keyboard and mouse, calculator, telephone, copiers, etc. The work environment characteristics described here are representative of those an employee may encounter while performing the essential functions of this position. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of this position.

Equal Employment Opportunity

Axos is an Equal Opportunity employer. We are committed to providing equal employment opportunities to all employees and applicants without regard to race, religious creed, color, sex (including pregnancy, breast feeding and related medical conditions), gender, gender identity, gender expression, sexual orientation, national origin, ancestry, citizenship status, military and veteran status, marital status, age, protected medical condition, genetic information, physical disability, mental disability, or any other protected status in accordance with all applicable federal, state, and local laws.