Azure Security Architect: Zero Trust & Cloud Defense

PRIMUS Global Solutions (PRIMUS UK & Europe); Poland; On-site; PLN 180,000 - 260,000; Full time

Job summary

PRIMUS Global Solutions (PRIMUS UK & Europe) seeks an experienced Cloud Security Architect to design secure Azure architectures and enforce Zero Trust, IAM, PIM, and Conditional Access. You will secure networks with Azure Firewall, NSG, and ExpressRoute, and implement monitoring with Defender for Cloud and Sentinel.

You will manage data protection, encryption, and Key Vault integration, perform threat modeling, and help drive governance, policies, and cloud migration efforts across multiple

Qualifications

• 5+ years in Cybersecurity/Cloud Security with strong Azure experience
• Strong knowledge of Azure Security, Entra ID, Defender for Cloud, Sentinel, Key Vault, and Azure networking
• Experience with Zero Trust, DevSecOps, Terraform/Bicep, and security frameworks
• Strong communication and architecture documentation skills

Responsibilities

• Design secure and scalable Azure cloud architectures.
• Implement Zero Trust, IAM, RBAC, PIM, and Conditional Access.
• Secure Azure networks using Azure Firewall, NSG, WAF, Private Link, VPN, and ExpressRoute.
• Implement security monitoring using Microsoft Defender for Cloud and Microsoft Sentinel.
• Manage data protection, encryption, secrets, and Azure Key Vault.
• Conduct security assessments, threat modeling, and vulnerability reviews.
• Define security policies, standards, and Azure governance controls.
• Support cloud migration, DevSecOps, and compliance initiatives.
• Collaborate with Cloud, DevOps, Network, SOC, and Compliance teams.

Skills

Azure Cloud Security

Zero Trust Architecture

DevSecOps

Security Frameworks

Communication Skills

Tools

Terraform

Bicep

Azure Defender for Cloud

Azure Key Vault

Job description

PRIMUS Global Solutions (PRIMUS UK & Europe) seeks an experienced Cloud Security Architect to design secure Azure architectures and enforce Zero Trust, IAM, PIM, and Conditional Access. You will secure networks with Azure Firewall, NSG, and ExpressRoute, and implement monitoring with Defender for Cloud and Sentinel.

You will manage data protection, encryption, and Key Vault integration, perform threat modeling, and help drive governance, policies, and cloud migration efforts across multiple