Azure Cloud Security Architect & Advisor

Avanade Inc.; Lisboa; On-site; EUR 70,000 - 110,000; Full time

Job summary

Avanade Inc. is seeking a Cloud Security Senior Consultant in Portugal to assess and enhance client cloud security postures, focusing on Azure services and governance alignment.

You will guide security assessments, architecture reviews, and remediation planning for resilient cloud environments. The role emphasizes strong communication with technical and non-technical stakeholders, tailored security interventions, and ongoing improvements to controls in line with NIST/ISO frameworks and industry

Qualifications

• Minimum 5 years of cloud security architecture and assessment experience in Microsoft Azure.
• Deep knowledge of Azure security architecture and cloud-native resiliency patterns.
• Proficient with security frameworks (NIST CSF, ISO/IEC 27001) and governance requirements.
• Hands-on with Azure security services: Defender for Cloud, Sentinel, Key Vault, Entra ID, PIM, Policy, Monitor, Log Analytics.

Responsibilities

• Assess the security posture of cloud workloads to identify vulnerabilities and gaps.
• Design and propose security interventions aligned with best practices and compliance.
• Lead architecture workshops, risk assessments, and governance reviews with client teams.
• Collaborate with cross-functional teams to align security with operations and business goals.
• Drive continuous improvement of security processes in response to evolving threats and frameworks.

Skills

Azure security

Security architecture

NIST CSF / ISO 27001

Vulnerability management

Client-facing communication

Security assessments

Incident response planning

Governance & compliance

Job description

Avanade Inc. is seeking a Cloud Security Senior Consultant in Portugal to assess and enhance client cloud security postures, focusing on Azure services and governance alignment.

You will guide security assessments, architecture reviews, and remediation planning for resilient cloud environments. The role emphasizes strong communication with technical and non-technical stakeholders, tailored security interventions, and ongoing improvements to controls in line with NIST/ISO frameworks and industry