Azure Security DevSecOps Engineer

TekLeaders, Inc; San Francisco (CA); Remote; USD 250,000 +; Full time

Job summary

A cloud security solutions provider is seeking an experienced Azure Security DevSecOps Engineer to enhance security practices within their cloud team. The candidate will focus on Entra ID, ensuring secure infrastructure and governance. Responsibilities include designing secure Azure environments and risk analysis. Ideal for a candidate with substantial DevSecOps experience and proficiency in Azure tools. This role is remote.

Qualifications

• 10 years of experience in cloud security or DevSecOps, with 3 years on Azure.
• Proven expertise in Entra ID with advanced configurations.
• Hands-on experience with cloud security monitoring tools like Wiz.

Responsibilities

• Design and maintain secure Azure environments using DevSecOps principles.
• Architect and manage Entra ID configurations including RBAC and MFA.
• Conduct risk analysis and threat modeling for Azure-based applications.

Skills

Cloud security knowledge

DevSecOps expertise

Entra ID configuration

Terraform

Vulnerability scanning with Wiz

Scripting in PowerShell

Automation skills

Tools

Azure Security Center

SonarQube

GitHub Actions

Azure DevOps

Job description

Overview

Job Title: Azure Security DevSecOps Engineer – Entra ID Expert

Location: Remote only on w2

We are seeking a highly skilled Azure Security DevSecOps Engineer with deep expertise in Microsoft Entra ID (formerly Azure AD) to join our cloud platform engineering team. This role is pivotal in embedding security across the software development lifecycle, ensuring robust identity and access management, and aligning with enterprise-grade security frameworks.

Responsibilities

• Secure Azure Infrastructure: Design, implement, and maintain secure Azure cloud environments using DevSecOps principles and Infrastructure as Code (IaC) via Terraform.
• Identity & Access Management: Architect and manage Entra ID configurations including RBAC, Conditional Access, MFA (hard/soft tokens), SSPR, and Service Principal setups.
• Security Posture Management: Leverage Wiz for vulnerability scanning, compliance monitoring, and cloud security posture management.
• Code Security & Quality: Integrate SonarQube for static code analysis and enforce clean-code practices aligned with ISO/IEC 5055 and OWASP standards.
• CI/CD Integration: Embed security into CI/CD pipelines using tools like GitHub Actions, Azure DevOps, and Sonar scanner CLI.
• Network Security: Secure Azure networking components including NSGs, Azure Firewall, VPNs, and DDoS protection.
• Security Frameworks Compliance: Implement and enforce NIST, CIS, ISO 27001, and Zero Trust principles across cloud workloads.
• Threat Modeling & Risk Analysis: Conduct assessments for Azure-based applications and infrastructure, and respond to incidents using Azure Security Center and Sentinel.
• Automation & Governance: Automate security workflows and contribute to centralized governance initiatives like the SHIELD program.
• Collaboration: Work cross-functionally with development, operations, and cybersecurity teams to drive secure-by-design and shift-left strategies.

Required Skills & Qualifications

• Experience 10 years in cloud security or DevSecOps roles, with 3 years focused on Azure.
• Entra ID Expertise: Proven experience with advanced Entra ID configurations, including custom policies in Azure B2C and third-party identity provider integrations.
• Wiz: Hands-on experience with Wiz for cloud security monitoring and compliance.
• Terraform: Strong proficiency in writing and managing IaC for Azure.
• SonarQube: Practical knowledge of SonarQube for code quality and security scanning.
• Scripting: Proficiency in PowerShell and Python for automation and integration.
• Security Frameworks: Familiarity with NIST, CIS, ISO 27001, OWASP, and PCI-DSS.
• Azure Services: Deep knowledge of Azure Security Center, Key Vault, Sentinel, and Azure Monitor.

Preferred Qualifications

• Certifications: Microsoft Certified: Azure Security Engineer Associate, Certified DevSecOps Professional, or equivalent.
• Tools: Experience with Checkmarx, Snyk, Qualys, and container security platforms (e.g., Aqua, Prisma Cloud).
• Container Security: Familiarity with Docker, Kubernetes, and related Azure services.
• Governance: Experience contributing to centralized DevSecOps governance programs like SHIELD.