Azure Security Engineer

WorkNovas LLC; Phoenix (AZ); Hybrid; USD 110,000 - 150,000; Full time

Job summary

WorkNovas LLC is seeking an Azure Security Engineer in Phoenix, AZ. Hybrid role focusing on reviewing and enforcing security controls across Azure environments, with multi-cloud awareness including AWS, GCP, and OCI.

Responsibilities include developing Azure Policy, maintaining Terraform modules, using JSON configurations, and collaborating with engineering teams to remediate findings and maintain security posture.

Qualifications

• Proficient in securing Azure environments and implementing security controls.
• Experience with Azure Policy definitions, initiatives, assignments, and exemptions.
• Hands-on with Terraform for IaC and security policy deployment.
• Familiarity with JSON-based configurations and templates for cloud configurations.
• Experience using Git and GitHub to manage IaC and security policy changes.
• Knowledge of GitHub Actions and CI/CD workflows.

Responsibilities

• Review Azure services for security risks and compliance requirements.
• Develop, test, deploy, and maintain Azure Policy definitions and guardrails.
• Maintain Terraform modules and security controls for Azure security deployment.
• Work with JSON-based configurations and templates supporting service certifications.
• Manage infrastructure changes using Git/GitHub and review PRs.
• Monitor Azure environments for vulnerabilities and policy violations; coordinate remediation.
• Support cloud security operations and incident investigations across teams.
• Apply cloud security principles across multi-cloud environments with Azure focus.

Skills

Azure security

Azure Policy

Terraform

JSON configurations

GitHub Actions

Git & version control

Tools

Terraform

JSON

GitHub

Job description

Role: Azure Security Engineer

Client Location: Phoenix, AZ 85054 (Hybrid role)

Duration: 6 months

Role Summary

Responsible for reviewing, implementing, and maintaining security controls across Microsoft Azure environments, with Azure serving as the primary cloud platform for this role. The position focuses on evaluating Azure services from a security perspective, developing Azure-native policies and guardrails, managing approved exceptions and allow policies, and supporting day-to-day cloud security operations.

Experience with other major cloud platforms-including Amazon Web Services (AWS), Google Cloud Platform (GP), and Oracle Cloud

Infrastructure (OCI)is preferred and will support broader multi-cloud security initiatives and collaboration.

Key Responsibilities

• Review and assess existing and new Azure services, resources, architectures, and configurations for security risks, compliance requirements, vulnerabilities, and misconfigurations.
• Develop, test, deploy, and maintain Azure Policy definitions, initiatives, assignments, guardrails, exemptions, and approved allow policies; evaluate policy impacts and troubleshoot deployment or operational issues.
• Develop and maintain Terraform modules and security controls, using Terraform as the primary infrastructure-as code (laC) tool for Azure security and policy deployment.
• Work with JSON-based configurations and templates, including those supporting Azure service certifications and security requirements.
• Use Git and GitHub to manage infrastructure-as-code and security policy changes, including validating GitHub Actions workflows and pull requests (PRs) as needed.
• Monitor Azure environments for security findings, vulnerabilities, misconfigurations, and policy violations; recommend remediation actions and partner with application and engineering teams to track findings through resolution
• Support cloud security operations, incident investigations, and troubleshooting, collaborating with cloud engineering, architecture, risk, compliance, cybersecurity, and CSE teams as needed.
• Apply cloud security principles across a multi-cloud environment, with Azure as the primary focus and AWS, GCP, and OCT as secondary platforms.
• Maintain clear documentation for security policies, standards, service certifications, exceptions, guardrails, and operational procedures.

Desired Skills

• Strong knowledge of Microsoft Azure, including Azure security, networking, identity, resource management, and security best practices.
• Hands-on experience with Azure Policy, including policy definitions, initiatives, assignments, exemptions, compliance evaluation, and remediation.
• Experience securing and supporting enterprise-scale Azure environments.
• Strong understanding of cloud security, risk, governance, and compliance concepts.
• Hands-on experience with Terraform for infrastructure-as-code, security controls, and policy deployment.
• Familiarity with JSON for cloud configurations, policy definitions, templates, and service certification requirements.
• Familiarity with Git and GitHub, including source control, pull requests, and GitHub Actions.