Sr. Azure Cloud Security Engineer

Intone Inc; United States; Remote; USD 120,000 - 160,000; Full time

Job summary

Intone Inc is seeking a Senior Azure Cloud Security Engineer for a contract role (6+ months, remote) in the United States. You will partner with infrastructure, DevOps, and Security teams on security strategy, implementation, and ongoing management.

You will serve as a secure design SME for Azure, lead security controls, and contribute to risk management programs while staying ahead of evolving cloud security threats and AI-enabled services.

Qualifications

• 5+ years of Azure security implementation and management.
• Expertise with Azure networking and identity services.
• Ability to lead secure adoption of Azure AI services.
• Self-driven with the ability to work independently.
• Strong interpersonal skills and collaboration across teams.

Responsibilities

• Serve as Azure security SME and guide best practices.
• Support and maintain the information security program.
• Provide technical expertise on Azure security trends.
• Operate security capabilities and investigate incidents.
• Design and monitor security solutions including WAFs, CI/CD security controls.

Skills

Azure security leadership

Independent worker

Interpersonal skills

Tools

Azure Virtual Networks

Azure Firewall

Azure Front Door

Application Gateway

Web Application Firewall

ExpressRoute

VPN Gateway

Network Watcher

Traffic Manager

Private Link

Job description

We are seeking a Senior Azure Cloud Security Engineer for a contract position (6+ months, remote) to partner with infrastructure, DevOps, and Security teams on security strategy, implementation, and management.

Responsibilities

• Serve as an Azure security subject matter expert and provide guidance on industry best practices and in-depth defense strategies
• Contribute to the ongoing support, development, and maintenance of the information security and risk management program
• Provide technical expertise on trends and emerging changes to the Azure cloud security landscape
• Serve as a key member of the Detection and Incident Response team to operationalize newly developed security capabilities and perform investigations related to security incidents
• Research, design, collaborate on, implement, maintain, and monitor security solutions including Azure advanced DDoS protection, next-generation firewalls, host and network-based intrusion detection and prevention, WAFs, Application Gateways, load balancers, continuous security monitoring, and risk assessment for Azure cloud infrastructure
• Proactively identify security issues, recommend and implement configuration remediations in collaboration with team members
• Identify opportunities for security improvement of cloud infrastructure and services
• Analyze and make recommendations to improve security of cloud infrastructure, platform, and architectures
• Examine network, server, application, and aggregated logs to determine trends and identify security incidents
• Ensure implementation of security and compliance requirements are met and maintained
• Conduct security reviews of proposed new tooling, components, products, and systems including AI
• Maintain and create security and operational controls to enforce security policies
• Work closely with Infrastructure, DevOps, and Security teams to resolve security-related configuration issues
• Develop, document, and maintain security and compliance architecture standards for Azure cloud
• Assess, measure, and communicate the risk impact of identified security deficiencies and remediate as appropriate
• Implement, review, and maintain strong access controls and identity roles within Azure IAM
• Maintain and improve continuous monitoring of Azure resources
• Review and approve controls needed to protect technology assets and data
• Configure and troubleshoot security infrastructure resources
• Collaborate with DevOps to ensure cloud security and promote DevSecOps practices
• Participate in the ongoing maintenance, testing, and improvement of the incident response program
• Work with Infrastructure, DevOps, and Security teams to ensure security is factored into evaluation and deployment
• Assist in the review and updates to information security policies, architectures, and standards
• Assist in responding to audits, penetration tests, and vulnerability assessments
• Drive ongoing hardening of Azure infrastructure utilizing CIS Benchmark 2.0
• Monitor vulnerability feeds and prioritize findings; manage, monitor, and track completion in a plan of action and milestones (POA&M) list

Qualifications

• Required
  • Five or more years of experience implementing, enhancing, and operationally managing security solutions in Microsoft Azure
  • Expertise with Azure Virtual Networks, Azure Virtual WAN, ExpressRoute, VPN Gateway, Azure Firewall, Azure Front Door, Application Gateway, Web Application Firewall, Network Watcher, Traffic Manager, Private Link, Private DNS, Azure DNS, Active Directory, and Microsoft Entra ID
  • Hands-on architecture leadership for Azure hosting infrastructure and networking, including Virtual Networks, Virtual WAN, ExpressRoute, VPN connectivity, firewalls, private connectivity, ingress and egress architecture, DNS, load balancing, high availability, resiliency, disaster recovery, and business continuity
  • Ability to lead the secure and compliant adoption and integration of Azure AI services, including Azure AI Foundry, within hosted application environments
  • Self-driven; motivated with the ability to work independently with little or no supervision
  • Excellent interpersonal skills; ability to interact with all layers of personnel