Azure Security Specialist

Sasso Consulting; Johannesburg; Hybrid; ZAR 700,000 - 900,000; Full time

Job summary

Sasso Consulting is seeking experienced Azure Security Specialists to design, implement, manage and improve security controls across Microsoft Azure environments. You will protect cloud infrastructure, identities, networks and data against cyber threats.

The role requires hands-on expertise with Defender for Cloud, Entra ID, RBAC, MFA and Zero Trust, in hybrid and multi-cloud setups, delivering secure architectures and compliant operations.

Qualifications

• Relevant diploma or degree in Information Technology, Computer Science, Cybersecurity, Cloud Computing, Information Systems or related discipline.
• Typically 3–5 years of relevant experience in cloud security with substantial Azure security exposure.
• Proven practical experience implementing and managing security controls within Microsoft Azure environments.
• Strong understanding of Microsoft Azure architecture, infrastructure and cloud security principles.
• Hands-on experience with Microsoft Defender for Cloud.
• Experience implementing Microsoft Entra ID security controls, RBAC, MFA and Conditional Access.
• Knowledge of Azure networking and associated security technologies.
• Experience configuring Azure Firewall, NSGs and cloud network access controls.

Responsibilities

• Design, implement, configure and maintain security controls across Microsoft Azure environments.
• Assess Azure infrastructure, services and workloads to identify security risks and vulnerabilities.
• Implement Azure security best practices and secure configuration standards.
• Configure and maintain Microsoft Defender for Cloud to monitor and strengthen cloud security posture.
• Implement security policies, governance controls and compliance requirements across Azure subscriptions.
• Monitor Azure security recommendations and coordinate remediation of identified vulnerabilities.
• Support secure deployment and management of Azure VMs, storage accounts, databases and cloud services.
• Conduct regular Azure security assessments and configuration reviews.

Skills

Azure security

Defender for Cloud

Entra ID / IAM

RBAC

MFA / Conditional Access

Zero Trust

Education

Relevant IT/CS/Cybersecurity degree

Tools

Microsoft Defender for Cloud

Microsoft Entra ID

Azure Firewall

NSGs / ASGs

Azure Monitor

Azure Log Analytics

Azure Resource Manager

PowerShell

Azure CLI

ARM templates / Terraform

Job description

• Azure Policy
• Azure Monitor
• Azure Log Analytics
• Azure Resource Manager

Location: Gauteng

Positions Available: 5

Salary: Market-related

Employment type: 3 Year contract, hybrid

Job Overview

We are seeking experienced and technically proficient Azure Security Specialists to design, implement, manage and continuously improve security controls across Microsoft Azure cloud environments.

The successful candidates will be responsible for protecting cloud infrastructure, applications, identities, networks and sensitive data against cybersecurity threats, vulnerabilities and unauthorised access.

This role requires strong hands‑on expertise in Microsoft Azure security technologies, cloud security architecture, identity and access management, threat protection, security monitoring and regulatory compliance.

The ideal candidates will have proven experience securing enterprise Microsoft Azure environments, implementing Microsoft security solutions and supporting cloud security operations across hybrid and multi-cloud infrastructures.

Key Responsibilities

Azure Cloud Security Management

• Design, implement, configure and maintain security controls across Microsoft Azure environments.
• Assess Azure infrastructure, services and workloads to identify security risks and vulnerabilities.
• Implement Azure security best practices and secure configuration standards.
• Configure and maintain Microsoft Defender for Cloud to monitor and strengthen cloud security posture.
• Implement security policies, governance controls and compliance requirements across Azure subscriptions.
• Monitor Azure security recommendations and coordinate remediation of identified vulnerabilities.
• Support secure deployment and management of Azure virtual machines, storage accounts, databases and cloud services.
• Conduct regular Azure security assessments and configuration reviews.
• Assist with cloud security architecture design and infrastructure modernisation initiatives.

Identity and Access Security

• Implement and manage Microsoft Entra ID security controls.
• Configure role-based access control (RBAC) and least-privilege access policies.
• Implement multi-factor authentication (MFA), Conditional Access and Privileged Identity Management (PIM).
• Secure privileged accounts, service principals, managed identities and enterprise applications.
• Monitor suspicious sign-in activities and identity-related security threats.
• Support identity governance, access reviews and privileged access management.
• Integrate Azure identity security controls with on-premises Active Directory and hybrid identity environments.
• Implement Zero Trust identity and access security principles.

Azure Network and Infrastructure Security

• Configure and manage Azure Network Security Groups (NSGs) and Application Security Groups (ASGs).
• Implement and maintain Azure Firewall, Web Application Firewall (WAF) and network security policies.
• Secure Azure Virtual Networks, subnets, private endpoints and network connectivity.
• Configure secure connectivity through VPN gateways, ExpressRoute and private networking solutions.
• Implement network segmentation and traffic filtering controls.
• Monitor network security events and investigate suspicious traffic patterns.
• Support secure hybrid connectivity between on-premises and Azure environments.
• Assist with protecting Azure workloads against network-based cyber threats.

Security Monitoring and Threat Protection

• Implement, configure and maintain Microsoft Defender for Cloud.
• Support Microsoft Sentinel security monitoring, threat detection and incident investigation.
• Configure security alerts, monitoring rules and automated response workflows.
• Analyse Azure security logs, diagnostic data and threat intelligence.
• Investigate security incidents affecting Azure resources and cloud identities.
• Coordinate incident response and remediation activities with cybersecurity and infrastructure teams.
• Implement and maintain Azure Monitor, Log Analytics and security reporting solutions.
• Support integration with Security Information and Event Management (SIEM) and Security Orchestration, Automation and Response (SOAR) platforms.

Data Protection and Cloud Compliance

• Implement encryption and data protection controls for Azure workloads.
• Configure and manage Azure Key Vault, secrets, certificates and cryptographic keys.
• Secure Azure Storage, SQL databases and other cloud data services.
• Implement secure access controls for sensitive information and cloud applications.
• Support data classification, retention and information protection requirements.
• Ensure Azure security configurations align with recognised cybersecurity frameworks and organisational policies.
• Support compliance assessments, cloud security audits and remediation activities.
• Maintain security documentation, risk assessments and compliance evidence.

Automation and Continuous Improvement

• Develop and maintain security automation using PowerShell, Azure CLI and infrastructure-as-code technologies.
• Implement Azure Policy to enforce security standards and configuration requirements.
• Support secure DevOps and CI/CD processes.
• Assist with integrating security checks into automated cloud deployment pipelines.
• Identify opportunities to improve Azure security posture and operational efficiency.
• Collaborate with cloud architects, infrastructure engineers, DevOps teams and cybersecurity specialists.
• Maintain technical documentation, security configurations and operational procedures.
• Stay informed about emerging Microsoft Azure security technologies and cybersecurity threats.

Minimum Requirements

• Relevant diploma or degree in Information Technology, Computer Science, Cybersecurity, Cloud Computing, Information Systems or a related discipline.
• Typically 3–5 years of relevant experience in cloud security, cybersecurity engineering or enterprise IT security, including substantial hands‑on Microsoft Azure security experience.
• Proven practical experience implementing and managing security controls within Microsoft Azure environments.
• Strong understanding of Microsoft Azure architecture, infrastructure and cloud security principles.
• Hands‑on experience with Microsoft Defender for Cloud.
• Experience implementing Microsoft Entra ID security controls, RBAC, MFA and Conditional Access.
• Strong knowledge of Azure networking and associated security technologies.
• Experience configuring Azure Firewall, Network Security Groups and cloud network access controls.
• Understanding of Azure Key Vault, encryption and data protection mechanisms.
• Experience monitoring cloud security events and investigating security vulnerabilities.
• Familiarity with Microsoft Sentinel, Azure Monitor or equivalent security monitoring solutions.
• Knowledge of Azure Policy, governance and cloud compliance requirements.
• Experience working with hybrid cloud environments and enterprise infrastructure.
• Understanding of Zero Trust architecture and cloud security best practices.
• Familiarity with ISO 27001, NIST and relevant cloud security frameworks.
• Strong technical troubleshooting, analytical and documentation skills.

Technical Skills and Competencies

Microsoft Azure Security Technologies

• Microsoft Defender for Cloud
• Microsoft Defender for Servers
• Microsoft Defender for Storage
• Microsoft Defender for SQL
• Microsoft Sentinel
• Azure Security Benchmark
• Azure Policy
• Azure Monitor
• Azure Log Analytics
• Azure Resource Manager

Identity and Access Management

• Microsoft Entra ID
• Azure Role-Based Access Control (RBAC)
• Multi-Factor Authentication (MFA)
• Conditional Access
• Privileged Identity Management (PIM)
• Managed Identities
• Service Principals
• Identity Protection
• Zero Trust identity security

Azure Network Security

• Azure Firewall
• Azure Web Application Firewall (WAF)
• Network Security Groups (NSGs)
• Application Security Groups (ASGs)
• Azure Virtual Networks
• Azure Private Link and Private Endpoints
• Azure DDoS Protection
• VPN Gateway
• ExpressRoute
• Network Watcher
• Network segmentation and secure connectivity

Cloud Data Protection

• Azure Key Vault
• Azure Storage security
• Azure SQL security
• Encryption at rest and in transit
• Customer-managed encryption keys
• Secrets and certificate management
• Data access controls
• Secure cloud database configurations

Security Monitoring and Incident Response

• Microsoft Sentinel
• Microsoft Defender XDR
• Azure Activity Logs
• Azure Diagnostic Logs
• Log Analytics
• Kusto Query Language (KQL)
• Security alert investigation
• Threat detection and response
• SIEM and SOAR integration
• Cloud security incident management

Automation and Infrastructure as Code

• PowerShell
• Azure CLI
• Azure Resource Manager (ARM) templates
• Bicep
• Terraform
• Azure DevOps
• GitHub Actions
• Security automation and policy enforcement
• Secure CI/CD pipeline integration

Security Frameworks and Standards

• Microsoft Cloud Security Benchmark
• Microsoft Cloud Adoption Framework
• Microsoft Azure Well-Architected Framework
• ISO/IEC 27001
• NIST Cybersecurity Framework
• CIS Microsoft Azure Foundations Benchmark
• Zero Trust security architecture
• POPIA and applicable data protection requirements

Relevant Certifications (Advantageous)

• Microsoft Certified: Azure Security Engineer Associate (AZ-500)
• Microsoft Certified: Cybersecurity Architect Expert (SC-100)
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Microsoft Certified: Security Operations Analyst Associate (SC-200)
• Microsoft Certified: Azure Administrator Associate (AZ-104)
• Microsoft Certified: Azure Solutions Architect Expert (AZ-305)
• Certified Cloud Security Professional (CCSP)
• Certified Information Systems Security Professional (CISSP)
• CompTIA Security+
• Relevant Microsoft Azure, cloud security or cybersecurity certifications

Key Personal Attributes

• Strong technical and analytical problem-solving abilities.
• Excellent attention to detail and cybersecurity awareness.
• Ability to identify and remediate complex cloud security vulnerabilities.
• Strong understanding of enterprise cloud infrastructure and security architecture.
• Proactive approach to cloud security monitoring and threat prevention.
• Excellent communication and stakeholder engagement skills.
• Ability to collaborate effectively with cloud engineering, infrastructure and cybersecurity teams.
• Strong organisational and technical documentation skills.
• Ability to manage multiple security priorities and cloud infrastructure projects.
• High levels of confidentiality, accountability and professional integrity.

Application Requirements

Interested candidates should submit an updated CV clearly detailing their practical Microsoft Azure security implementation, administration and cloud security engineering experience, together with copies of relevant academic qualifications and professional certifications.

Candidates should specifically highlight:

• Microsoft Azure environments they have secured, implemented or supported.
• Experience configuring Microsoft Defender for Cloud, Azure Firewall, Azure Policy and other Azure security services.
• Microsoft Entra ID, Conditional Access, RBAC and Privileged Identity Management experience.
• Azure network security, cloud infrastructure hardening and vulnerability management.
• Microsoft Sentinel, Defender XDR and security incident investigation experience.
• Azure Key Vault, encryption and cloud data protection experience.
• PowerShell, Azure CLI, Terraform, Bicep or security automation capabilities.
• Cloud security implementation, migration, remediation or architecture projects.
• The size and complexity of Azure environments they have supported.
• Relevant Microsoft Azure and cloud security certifications.

Important

This is a specialist Azure Security opportunity requiring demonstrable hands‑on experience securing Microsoft Azure environments. General cloud administration, Microsoft 365 support or IT infrastructure experience without substantial Azure security expertise will not be sufficient.

Please note

Specific project requirements, remuneration, employment arrangements and working conditions will be confirmed during the recruitment process.