Azure Security & Policy Engineer

Tata Consultancy Services Limited; Phoenix (AZ); On-site; USD 125,000 - 130,000; Full time

Job summary

Tata Consultancy Services Limited in Phoenix is seeking an Azure Security Analyst to protect enterprise Azure environments. You will review services, architectures, and configurations for security risks, and implement policy-driven controls across Azure and multi-cloud platforms.

You will develop Terraform modules, manage JSON configurations, and use Git/GitHub to track changes. The role requires strong knowledge of Azure policy, governance, and incident response, and collaboration with

Qualifications

• Strong knowledge of Microsoft Azure, including Azure security, networking, identity, resource management, and security best practices.
• Hands-on experience with Azure Policy, including policy definitions, initiatives, assignments, exemptions, compliance evaluation, and remediation.
• Experience securing and supporting enterprise-scale Azure environments.
• Strong understanding of cloud security, risk, governance, and compliance concepts.
• Hands-on experience with Terraform for infrastructure-as-code, security controls, and policy deployment.
• Familiarity with JSON for cloud configurations, policy definitions, templates, and service certification requirements.
• Familiarity with Git and GitHub, including source control, pull requests, and GitHub Actions.
• Ability to evaluate security requirements, troubleshoot policy and configuration issues, and collaborate effectively with application, engineering, architecture, and security teams.
• Preferred: Working knowledge or hands-on security experience with Amazon Web Services (AWS), Google Cloud Platform (GCP), and/or Oracle Cloud Infrastructure (OCI).
• Preferred: Understanding of how common cloud security concepts-such as IAM, network security, policy enforcement, encryption, logging/monitoring, and security posture management-are implemented across Azure, AWS, GCP, and OCI.

Responsibilities

• Review and assess existing and new Azure services, resources, architectures, and configurations for security risks, compliance requirements, vulnerabilities, and misconfigurations.
• Develop, test, deploy, and maintain Azure Policy definitions, initiatives, assignments, guardrails, exemptions, and approved allow policies; evaluate policy impacts and troubleshoot deployment or operational issues.
• Develop and maintain Terraform modules and security controls, using Terraform as the primary infrastructure-as-code (IaC) tool for Azure security and policy deployment.
• Work with JSON-based configurations and templates, including those supporting Azure service certifications and security requirements.
• Use Git and GitHub to manage infrastructure-as-code and security policy changes, including validating GitHub Actions workflows and pull requests (PRs) as needed.
• Monitor Azure environments for security findings, vulnerabilities, misconfigurations, and policy violations; recommend remediation actions and partner with application and engineering teams to track findings through resolution.
• Support cloud security operations, incident investigations, and troubleshooting, collaborating with cloud engineering, architecture, risk, compliance, cybersecurity, and CSE teams as needed.
• Apply cloud security principles across a multi-cloud environment, with Azure as the primary focus and AWS, GCP, and OCI as secondary platforms.
• Maintain clear documentation for security policies, standards, service certifications, exceptions, guard rails, and operational procedures.

Skills

Azure Security

Azure Policy

Terraform

JSON

Git/GitHub

Cloud security concepts

Multi-cloud awareness

Security collaboration

Vulnerability remediation

Tools

Terraform

JSON

Git

GitHub

Job description

Tata Consultancy Services Limited in Phoenix is seeking an Azure Security Analyst to protect enterprise Azure environments. You will review services, architectures, and configurations for security risks, and implement policy-driven controls across Azure and multi-cloud platforms.

You will develop Terraform modules, manage JSON configurations, and use Git/GitHub to track changes. The role requires strong knowledge of Azure policy, governance, and incident response, and collaboration with