Senior Azure Infrastructure & Security Engineer

Kforce Inc; Phoenix (AZ); On-site; USD 140,000 - 190,000; Full time

Job summary

Kforce is seeking a Senior Azure Infrastructure & Security Engineer in Phoenix, AZ to architect, implement, and track tasks end-to-end. The role involves gathering SOC 2 audit evidence and working across Defender for Cloud, Microsoft Sentinel, Entra ID, and network architecture components such as hub-spoke designs, Private Endpoints, and WAF configurations.

The engineer will also drive Azure Policy governance and prepare written evidence for auditors, performing hands-on remediation rather than

Qualifications

• 7+ years infrastructure engineering with senior Azure hands-on experience.
• Azure Traffic Manager multiregion failover experience.
• Experience with Defender for Cloud, Microsoft Sentinel, and Entra ID (PIM, CA).
• IaC with Bicep or Terraform; Azure CLI/PowerShell proficiency.
• AZ-305 or AZ-500 certification preferred.

Responsibilities

• Architect, implement, and track tasks to closure.
• Gather evidence for SOC 2 auditors, locating Azure configs/logs quickly.
• Work across Defender for Cloud, Sentinel, Entra ID, and Azure Monitor/Activity Log.
• Use hub-spoke network architecture concepts, Private Endpoints, and Application Gateway/WAF.
• Contribute to governance with Azure Policy and produce audit-ready documentation.

Skills

Azure

IaC

Defender for Cloud

Microsoft Sentinel

Entra ID (PIM, CA)

Azure Policy

Azure CLI/PowerShell

Tools

Terraform

Bicep

JIRA

Azure CLI

PowerShell

Job description

Responsibilities

Kforce has a client in Phoenix, AZ that is seeking a Senior Azure Infrastructure & Security Engineer. Summary: Work covers architecture, implementation, and tracking the assigned tasks to closure. During the SOC 2 audit the engineer will also gather evidence: when the auditor asks us to show X, we need someone who already knows where in Azure to go and can pull it quickly. Expect work across Defender for Cloud and Sentinel, Entra ID privileged access, network architecture (hub-spoke, Private Endpoints, Application Gateway/WAF, Traffic Manager), Azure Policy and governance, and producing written evidence for auditors as tasks are completed. This is not an advisory role; the engineer does the work.

Responsibilities

Kforce has a client in Phoenix, AZ that is seeking a Senior Azure Infrastructure & Security Engineer. Summary: Work covers architecture, implementation, and tracking the assigned tasks to closure. During the SOC 2 audit the engineer will also gather evidence: when the auditor asks us to show X, we need someone who already knows where in Azure to go and can pull it quickly. Expect work across Defender for Cloud and Sentinel, Entra ID privileged access, network architecture (hub-spoke, Private Endpoints, Application Gateway/WAF, Traffic Manager), Azure Policy and governance, and producing written evidence for auditors as tasks are completed. This is not an advisory role; the engineer does the work.

Requirements

• 7+ years infrastructure engineering with 4+ years hands-on in Azure at a senior level; has personally done this kind of remediation before, not just designed it
• Azure Traffic Manager: has designed and implemented Traffic Manager profiles for multi-region failover in production
• Experience with Microsoft Defender for Cloud, Microsoft Sentinel, and Entra ID (PIM, Conditional Access, service principal hygiene)
• Infrastructure as Code with Bicep or Terraform; Comfortable in Azure CLI/PowerShell
• AZ-305 (Azure Solutions Architect Expert) or AZ-500 (Azure Security Engineer) experience
• Knows the Azure portal, Entra ID, Defender, Sentinel, and Azure Monitor/Activity Log well enough to locate and export audit evidence (configs, logs, screenshots, reports) on request
• Self-directed; Takes assigned tasks, tracks them in JIRA to closure, and communicates clearly with a product owner and a software manager

Nice To Have

• Azure networking depth (VNets and peering, hub-spoke, Private Link, Application Gateway/WAF, NSGs)
• SOC 2 or financial-services vendor assessment experience
• SQL Server on Azure VMs/Azure SQL
• .NET/App Service familiarity
• Cloudflare DNS in front of Azure experience
• Azure Well-Architected Framework reviews

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.

We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.

Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law.

This job is not eligible for bonuses, incentives or commissions.

Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.