Azure Security Engineer

Zeektek; Sacramento (CA); Vor Ort; USD 120.000 - 170.000; Vollzeit

Zusammenfassung

Zeektek is seeking a Senior Azure Security Engineer to design, implement, and manage security controls across our Azure cloud environment. You will embed security into migration and deployment, maintain security baselines, and configure Defender for Cloud and Entra ID/Intune to enforce access control policies.

With 7+ years in information security and strong collaboration across IT and engineering teams, you will lead cloud security initiatives, guide threat modeling, support incident response,

Qualifikationen

• 7+ years in information security or systems engineering
• Hands-on securing Azure cloud environments
• Experience with Entra ID and Intune
• Ability to embed security into architecture and migration
• Strong collaboration across IT and engineering teams

Aufgaben

• Designs, implements, and manages Azure security controls across the organization
• Embeds security into cloud migration and deployment processes
• Maintains cloud security baselines, guardrails, and configuration standards
• Configures Defender for Cloud and Azure Security Center to monitor posture and alerts
• Supports incident response, threat detection, and security validation
• Develops automation for security monitoring, alerting, and response
• Tracks KPIs and metrics to measure cloud security posture
• Supports audits and regulatory compliance
• Develops cloud-specific security standards and documentation
• Collaborates with IT and business stakeholders to align security initiatives

Kenntnisse

Azure security

Intune

Entra ID

Microsoft Defender for Cloud

Cloud security architecture

Tools

PowerShell

Azure CLI

Azure Security Center

Endpoint security

Jobbeschreibung

We have a direct hire for an Senior Azure Security Engineer with Intune, defender and entra.

• Designs, implements, and manages security controls across the organization's Azure cloud environment, ensuring secure configurations, access controls, and compliance with company standards.


• Supports the organization's transition from on-prem infrastructure to Azure by embedding security into architecture, migration, and deployment processes.


• Establishes and maintains cloud security baselines, guardrails, and configuration standards (identity, networking, and data protection).


• Configures and manages Microsoft Defender for Cloud and Azure Security Center to monitor posture, secure score, and alerts.


• Acts as the organization's cloud security SME, supporting IT and engineering teams through design reviews, threat modeling, and security validation.


• Partners with infrastructure, application, and data teams to integrate security into system design and project delivery.


• Identifies and remediates security gaps in Azure and hybrid architectures.


• Implements and manages secure identity and access controls using Entra ID and related technologies (RBAC, Conditional Access, least privilege principles).


• Supports the design and implementation of identity strategies across cloud and on-prem environments.


• Manages and enhances device compliance and endpoint security using Microsoft Intune, including compliance policies and conditional access enforcement.


• Develops and enhances threat detection capabilities across Azure and enterprise environments using Microsoft-native telemetry.


• Participates in incident response activities, including investigation, containment, and post-incident reviews.


• Builds and maintains automation workflows for security monitoring, alerting, and response.


• Improves security processes through scripting and integration with existing tools and platforms.


• Develops and tracks KPIs and metrics to measure cloud security posture and program effectiveness.


• Supports security audits and helps ensure compliance with applicable regulatory frameworks.


• Develops and maintains cloud-specific security standards, procedures, and documentation.


• Contributes to vulnerability management and risk remediation efforts across cloud and enterprise systems.


• Works closely with IT, security, and business stakeholders to align security initiatives with organizational goals.


• Serves as the organization's primary point of contact for cloud security given the company's size, including managing relevant vendor relationships (a plus, not required).


• Provides guidance on emerging cloud threats, risks, and best practices.


• Supports disaster recovery and business continuity planning for cloud systems.


• Other duties as assigned.


• Qualifications


• 7+ years of progressive experience in information security or systems engineering, with hands-on experience securing Azure cloud environments and enterprise infrastructure.


• Strong technical experience with Entra ID, Intune, and Microsoft Defender for Cloud / Azure Security Center.


• Strong technical experience with cloud security controls, identity and access management (RBAC, Conditional Access), endpoint security, and device compliance.


• Proven ability to collaborate across IT operations, engineering, and business teams to embed security into system design, implementation, and ongoing operations.


• Experience with vulnerability management, incident response, and threat detection.


• Strong analytical and problem-solving skills with the ability to translate risk into actionable recommendations.


• Experience supporting cloud migrations or transformation initiatives.


• Experience with scripting or automation (PowerShell preferred).


• Leadership experience or vendor relationship management is a plus, given this role acts as the primary cloud security resource for the company.