Azure Cloud & API Security Engineer

Compunnel, Inc.; Port Reading, Northern (NJ, KY); Hybrid; USD 140,000 - 170,000; Full time

Job summary

Compunnel, Inc. is seeking an Azure Cloud & API Security Engineer to design, implement, and secure enterprise cloud and API ecosystems. You will work hands-on across Azure, API security, IAM, and data platforms to build secure cloud-native solutions and governance.

The role collaborates with infrastructure, development, and data teams to ensure robust authentication, authorization, encryption, and threat protection across REST APIs and cloud workloads, including Snowflake data platforms.

Qualifications

• Bachelor's degree in CS, IT, cybersecurity, engineering or related field.
• Hands-on Azure cloud services experience.
• Proven API security architecture and implementation skills.
• Experience securing REST APIs and enterprise integration platforms.
• Knowledge of OAuth 2.0, OpenID Connect (OIDC), API gateway security, and Zero Trust.
• Experience with IAM, RBAC, Conditional Access and Privileged Access Management.
• Familiarity with cloud security monitoring, auditing, and incident response.

Responsibilities

• Design, implement, and maintain secure cloud solutions in Azure.
• Develop and enforce API security standards and governance.
• Secure REST APIs and cloud-native apps via auth, encryption, and threat protection.
• Assess, design, and implement API gateway and API management solutions.
• Configure and manage IAM using Azure Entra ID with RBAC and PAM.
• Perform cloud security reviews, risk assessments, and remediation activities.
• Monitor cloud and API environments for threats, compliance, and performance.
• Collaborate with development teams to embed security in the SDLC.
• Develop security solutions for integrations across cloud apps and data platforms.
• Implement logging, monitoring, auditing, and alerting for workloads and APIs.
• Support incident response, root-cause analysis, and remediation efforts.
• Work with Snowflake and data teams to secure data access and integrations.
• Document architectures, standards, and implementation guidelines.

Skills

Azure

API security

IAM

RBAC

Conditional Access

Privileged Access

Zero Trust

OAuth 2.0

OIDC

DevSecOps

Secure SDLC

Threat monitoring

Incident response

Education

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field

Tools

APIM

Terraform

ARM Templates

Bicep

Snowflake

Job description

We are seeking a highly skilled Azure Cloud & API Security Engineer to design, implement, secure, and support enterprise cloud and API ecosystems. The ideal candidate will possess strong hands‑on experience in Microsoft Azure cloud environments, API security architecture, identity and access management, and cloud‑native security controls. This role requires a technical contributor who can actively build, configure, troubleshoot, and optimize secure cloud platforms and APIs while collaborating with infrastructure, application development, and data teams. Experience working with Snowflake data platforms and data lake environments is highly desirable.

KEY RESPONSIBILITIES

• Design, implement, and maintain secure cloud solutions within Microsoft Azure environments.
• Develop and enforce API security standards, governance frameworks, and best practices.
• Secure REST APIs and cloud‑native applications through authentication, authorization, encryption, and threat protection mechanisms.
• Assess, design, and implement API gateway and API management solutions.
• Configure and manage identity and access management solutions using Azure Active Directory (Microsoft Entra ID).
• Implement role‑based access controls (RBAC), privileged access management, and least‑privilege security models.
• Perform cloud security reviews, risk assessments, and vulnerability remediation activities.
• Monitor cloud and API environments for security threats, compliance issues, and performance concerns.
• Collaborate with application development teams to embed security controls throughout the software development lifecycle.
• Develop and support security solutions for integrations involving cloud applications, APIs, and enterprise data platforms.
• Implement logging, monitoring, auditing, and alerting solutions for cloud workloads and APIs.
• Support incident response, root cause analysis, and security remediation efforts.
• Work closely with Snowflake and data engineering teams to secure data access, integrations, and cloud‑based data platforms.
• Document security architectures, standards, operational procedures, and implementation guidelines.
• Participate in cloud modernization, migration, and digital transformation initiatives.

REQUIRED QUALIFICATIONS

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field.
• Strong hands‑on experience with Microsoft Azure cloud services and infrastructure.
• Proven expertise in API Security Architecture and Implementation.
• Experience securing REST APIs and enterprise integration platforms.
• Deep understanding of:
  • OAuth 2.0
  • OpenID Connect (OIDC)
  • API Gateway Security
  • Zero Trust Security Principles
• Experience with Azure security services and controls.
• Strong knowledge of:
  • Identity and Access Management (IAM)
  • RBAC
  • Conditional Access
  • Privileged Access Management
• Experience implementing cloud security monitoring and auditing solutions.
• Understanding of network security concepts including:
  • HTTPS/TLS
  • Firewalls
  • WAF
  • DNS Security
  • Private Networking
• Knowledge of DevSecOps and secure software development practices.
• Strong troubleshooting, analytical, and problem‑solving skills.
• Excellent communication and stakeholder collaboration skills.
• Must be a hands‑on engineer actively involved in design, implementation, and support activities.

PREFERRED QUALIFICATIONS

• Experience working with Snowflake Data Cloud and Snowflake Data Lake environments.
• Experience securing enterprise data platforms and cloud data architectures.
• Experience with Azure API Management (APIM).
• Experience with cloud‑native security tools and monitoring platforms.
• Familiarity with data governance, data security, and compliance frameworks.
• Experience with Infrastructure as Code (Terraform, ARM Templates, Bicep).
• Experience supporting enterprise‑scale cloud transformation programs.
• Knowledge of AWS cloud security concepts.

CERTIFICATIONS

• Microsoft Certified: Azure Security Engineer Associate (Preferred)
• Microsoft Certified: Azure Solutions Architect Expert (Preferred)
• Certified Information Systems Security Professional (CISSP) (Preferred)
• Certified Cloud Security Professional (CCSP) (Preferred)
• API Security Certification (Preferred)