Azure Cloud Security Architect - Secure & Compliant Designs

Avanade; Lisboa; Presencial; EUR 70 000 - 100 000; Tempo integral

Resumo da oferta

Avanade is seeking an experienced Cloud Security Architect to assess and enhance the security posture of client cloud environments, emphasizing both technical controls and governance. You will guide security assessments, architecture reviews, and implementation plans for Azure-based solutions.

The role requires deep Azure security expertise, familiarity with NIST/ISO 27001 frameworks, and strong communication with technical and non-technical stakeholders. Lisbon-based client work is expected.

Qualificações

• Minimum 5 years of experience in cloud security architecture and assessment, specifically within Microsoft Azure environments.
• Deep knowledge of Azure security architecture and cloud-native security resiliency patterns.
• Strong experience with security frameworks and methodologies (e.g., NIST CSF, ISO/IEC 27001).
• Proficient in vulnerability management, risk assessment, and security compliance standards.
• Ability to communicate complex security concepts clearly to both technical and non-technical stakeholders.
• Strong written and verbal communication and documentation skills.
• Hands-on experience with Azure security and governance services: Microsoft Defender for Cloud, Sentinel, Key Vault, Azure AD (Entra ID), PIM, Azure Policy, Azure Monitor, and Log Analytics.
• Familiarity with Microsoft Security Assessments, such as the Well-Architected Review Assessment (WARA) and Microsoft Security Assessment Frameworks.
• Experience working directly with clients in customer-facing roles to deliver security assessments and solutions.
• Solid understanding of process governance, security incident response planning, and Major Incident Response Plan (MIRP) development.

Responsabilidades

• Assess the security posture of customer cloud workloads and environments to identify vulnerabilities and gaps.
• Recommend and design security interventions aligned with best practices and compliance requirements.
• Evaluate and strengthen configurations for Azure security services, including Microsoft Defender for Cloud, Sentinel, Key Vault, Azure AD (Entra ID), PIM, Azure Policy, Azure Monitor, and governance and observability tools such as Azure Monitor and Log Analytics.
• Lead and facilitate security architecture workshops, risk assessments, and governance reviews with client teams.
• Collaborate with cross-functional teams to ensure alignment between security, operations, and business objectives.
• Conduct thorough security risk assessments and ensure mitigation strategies are implemented.
• Drive continuous improvement of security processes and controls based on evolving threat landscapes and compliance frameworks.
• Ensure adherence to industry frameworks and regulations such as NIST, ISO/IEC 27001, HIPAA, GDPR, and FedRAMP.

Conhecimentos

Azure security architecture

Cloud security assessment

NIST CSF

ISO/IEC 27001

Vulnerability management

Communication skills

Documentation

Formação académica

Bachelor's degree in Computer Science or related field

ITIL Foundation Certification

Ferramentas

Microsoft Defender for Cloud

Sentinel

Key Vault

Azure AD (Entra ID)

PIM

Azure Policy

Azure Monitor

Log Analytics

Descrição da oferta de emprego

Avanade is seeking an experienced Cloud Security Architect to assess and enhance the security posture of client cloud environments, emphasizing both technical controls and governance. You will guide security assessments, architecture reviews, and implementation plans for Azure-based solutions.

The role requires deep Azure security expertise, familiarity with NIST/ISO 27001 frameworks, and strong communication with technical and non-technical stakeholders. Lisbon-based client work is expected.