Azure Security Specialist

Sasso Consulting (Pty) Ltd; Johannesburg; On-site; ZAR 850,000 - 1,250,000; Part time

Job summary

Sasso Consulting (Pty) Ltd seeks an experienced Azure Security Specialist to design, implement and continuously improve security controls across Microsoft Azure environments. The role focuses on protecting cloud infrastructure, applications, identities and data against cyber threats.

The candidate will work on hands-on Azure security technologies, threat protection, monitoring and regulatory compliance, across hybrid and multi-cloud setups.

Qualifications

• Relevant degree or diploma in IT, CS, Cybersecurity, Cloud Computing or related.
• 3–5 years of cloud security/enterprise IT security experience with Azure.
• Proven experience implementing security controls in Azure and supporting cloud security operations.

Responsibilities

• Design, implement and maintain security controls across Azure environments.
• Configure Defender for Cloud to monitor and strengthen security posture.
• Manage identity security: Entra ID, RBAC, MFA, Conditional Access and PIM.
• Configure NSGs, ASGs, Azure Firewall and network security policies.
• Monitor security events; coordinate incident response with teams.
• Support secure DevOps and CI/CD with security checks.

Skills

Azure security architecture

Threat protection

Cloud security operations

Zero Trust architecture

Incident response coordination

Security monitoring

Education

Diploma or degree in IT/CS/Cybersecurity/Cloud Computing

Tools

Microsoft Defender for Cloud

Microsoft Defender for Servers

Microsoft Defender for Storage

Microsoft Defender for SQL

Microsoft Sentinel

Azure Security Benchmark

Azure Policy

Azure Monitor

Azure Log Analytics

Azure Resource Manager

Job description

Azure Security Specialist

Location: Centurion, Gauteng (provisional - to be confirmed)
Positions Available: 5
Salary: Market-related
Employment Type: To be confirmed

Job Overview

We are seeking experienced and technically proficient Azure Security Specialists to design, implement, manage and continuously improve security controls across Microsoft Azure cloud environments.

The successful candidates will be responsible for protecting cloud infrastructure, applications, identities, networks and sensitive data against cybersecurity threats, vulnerabilities and unauthorised access.

This role requires strong hands-on expertise in Microsoft Azure security technologies, cloud security architecture, identity and access management, threat protection, security monitoring and regulatory compliance.

The ideal candidates will have proven experience securing enterprise Microsoft Azure environments, implementing Microsoft security solutions and supporting cloud security operations across hybrid and multi-cloud infrastructures.

Key Responsibilities

Azure Cloud Security Management

• Design, implement, configure and maintain security controls across Microsoft Azure environments.
• Assess Azure infrastructure, services and workloads to identify security risks and vulnerabilities.
• Implement Azure security best practices and secure configuration standards.
• Configure and maintain Microsoft Defender for Cloud to monitor and strengthen cloud security posture.
• Implement security policies, governance controls and compliance requirements across Azure subscriptions.
• Monitor Azure security recommendations and coordinate remediation of identified vulnerabilities.
• Support secure deployment and management of Azure virtual machines, storage accounts, databases and cloud services.
• Conduct regular Azure security assessments and configuration reviews.
• Assist with cloud security architecture design and infrastructure modernisation initiatives.

Identity and Access Security

• Implement and manage Microsoft Entra ID security controls.
• Configure role-based access control (RBAC) and least-privilege access policies.
• Implement multi-factor authentication (MFA), Conditional Access and Privileged Identity Management (PIM).
• Secure privileged accounts, service principals, managed identities and enterprise applications.
• Monitor suspicious sign-in activities and identity-related security threats.
• Support identity governance, access reviews and privileged access management.
• Integrate Azure identity security controls with on-premises Active Directory and hybrid identity environments.
• Implement Zero Trust identity and access security principles.

Azure Network and Infrastructure Security

• Configure and manage Azure Network Security Groups (NSGs) and Application Security Groups (ASGs).
• Implement and maintain Azure Firewall, Web Application Firewall (WAF) and network security policies.
• Secure Azure Virtual Networks, subnets, private endpoints and network connectivity.
• Configure secure connectivity through VPN gateways, ExpressRoute and private networking solutions.
• Implement network segmentation and traffic filtering controls.
• Monitor network security events and investigate suspicious traffic patterns.
• Support secure hybrid connectivity between on-premises and Azure environments.
• Assist with protecting Azure workloads against network-based cyber threats.

Security Monitoring and Threat Protection

• Implement, configure and maintain Microsoft Defender for Cloud.
• Support Microsoft Sentinel security monitoring, threat detection and incident investigation.
• Configure security alerts, monitoring rules and automated response workflows.
• Analyse Azure security logs, diagnostic data and threat intelligence.
• Investigate security incidents affecting Azure resources and cloud identities.
• Coordinate incident response and remediation activities with cybersecurity and infrastructure teams.
• Implement and maintain Azure Monitor, Log Analytics and security reporting solutions.
• Support integration with Security Information and Event Management (SIEM) and Security Orchestration, Automation and Response (SOAR) platforms.

Data Protection and Cloud Compliance

• Implement encryption and data protection controls for Azure workloads.
• Configure and manage Azure Key Vault, secrets, certificates and cryptographic keys.
• Secure Azure Storage, SQL databases and other cloud data services.
• Implement secure access controls for sensitive information and cloud applications.
• Support data classification, retention and information protection requirements.
• Ensure Azure security configurations align with recognised cybersecurity frameworks and organisational policies.
• Support compliance assessments, cloud security audits and remediation activities.
• Maintain security documentation, risk assessments and compliance evidence.

Automation and Continuous Improvement

• Develop and maintain security automation using PowerShell, Azure CLI and infrastructure-as-code technologies.
• Implement Azure Policy to enforce security standards and configuration requirements.
• Support secure DevOps and CI/CD processes.
• Assist with integrating security checks into automated cloud deployment pipelines.
• Identify opportunities to improve Azure security posture and operational efficiency.
• Collaborate with cloud architects, infrastructure engineers, DevOps teams and cybersecurity specialists.
• Maintain technical documentation, security configurations and operational procedures.
• Stay informed about emerging Microsoft Azure security technologies and cybersecurity threats.

Minimum Requirements

• Relevant diploma or degree in Information Technology, Computer Science, Cybersecurity, Cloud Computing, Information Systems or a related discipline.
• Typically 3-5 years of relevant experience in cloud security, cybersecurity engineering or enterprise IT security, including substantial hands-on Microsoft Azure security experience.
• Proven practical experience implementing and managing security controls within Microsoft Azure environments.
• Strong understanding of Microsoft Azure architecture, infrastructure and cloud security principles.
• Hands-on experience with Microsoft Defender for Cloud.
• Experience implementing Microsoft Entra ID security controls, RBAC, MFA and Conditional Access.
• Strong knowledge of Azure networking and associated security technologies.
• Experience configuring Azure Firewall, Network Security Groups and cloud network access controls.
• Understanding of Azure Key Vault, encryption and data protection mechanisms.
• Experience monitoring cloud security events and investigating security vulnerabilities.
• Familiarity with Microsoft Sentinel, Azure Monitor or equivalent security monitoring solutions.
• Knowledge of Azure Policy, governance and cloud compliance requirements.
• Experience working with hybrid cloud environments and enterprise infrastructure.
• Understanding of Zero Trust architecture and cloud security best practices.
• Familiarity with ISO 27001, NIST and relevant cloud security frameworks.
• Strong technical troubleshooting, analytical and documentation skills.

Technical Skills and Competencies

Microsoft Azure Security Technologies

• Microsoft Defender for Cloud
• Microsoft Defender for Servers
• Microsoft Defender for Storage
• Microsoft Defender for SQL
• Microsoft Sentinel
• Azure Security Benchmark
• Azure Policy
• Azure Monitor
• Azure Log Analytics
• Azure Resource Manager

Identity and Access Management

• Microsoft Entra ID
• Azure Role-Based Access Control (RBAC)
• Multi-Factor Authentication (MFA)
• Conditional Access
• Privileged Identity Management (PIM)
• Managed Identities
• Service Principals
• Identity Protection
• Zero Trust identity security

Azure Network Security

• Azure Firewall
• Azure Web Application Firewall (WAF)
• Network Security Groups (NSGs)
• Application Security Groups (ASGs)
• Azure Virtual Networks
• Azure Private Link and Private Endpoints
• Azure DDoS Protection
• VPN Gateway
• ExpressRoute
• Network Watcher
• Network segmentation and secure connectivity

Cloud Data Protection

• Azure Key Vault
• Azure Storage security
• Azure SQL security
• Encryption at rest and in transit
• Customer-managed encryption keys
• Secrets and certificate management
• Data access controls
• Secure cloud database configurations

Security Monitoring and Incident Response

• Microsoft Sentinel
• Microsoft Defender XDR
• Azure Activity Logs
• Azure Diagnostic Logs
• Log Analytics
• Kusto Query Language (KQL)
• Security alert investigation
• Threat detection and response
• SIEM and SOAR integration
• Cloud security incident management

Automation and Infrastructure as Code

• PowerShell
• Azure CLI
• Azure Resource Manager (ARM) templates
• Bicep
• Terraform
• Azure DevOps
• GitHub Actions
• Security automation and policy enforcement
• Secure CI/CD pipeline integration

Security Frameworks and Standards

• Microsoft Cloud Security Benchmark
• Microsoft Cloud Adoption Framework
• Microsoft Azure Well-Architected Framework
• ISO/IEC 27001
• NIST Cybersecurity Framework
• CIS Microsoft Azure Foundations Benchmark
• Zero Trust security architecture
• POPIA and applicable data protection requirements

Relevant Certifications (Advantageous)

One or more of the following certifications would be beneficial:

• Microsoft Certified: Azure Security Engineer Associate (AZ-500)
• Microsoft Certified: Cybersecurity Architect Expert (SC-100)
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Microsoft Certified: Security Operations Analyst Associate (SC-200)
• Microsoft Certified: Azure Administrator Associate (AZ-104)
• Microsoft Certified: Azure Solutions Architect Expert (AZ-305)
• Certified Cloud Security Professional (CCSP)
• Certified Information Systems Security Professional (CISSP)
• CompTIA Security+
• Relevant Microsoft Azure, cloud security or cybersecurity certifications

Key Personal Attributes

• Strong technical and analytical problem-solving abilities.
• Excellent attention to detail and cybersecurity awareness.
• Ability to identify and remediate complex cloud security vulnerabilities.
• Strong understanding of enterprise cloud infrastructure and security architecture.
• Proactive approach to cloud security monitoring and threat prevention.
• Excellent communication and stakeholder engagement skills.
• Ability to collaborate effectively with cloud engineering, infrastructure and cybersecurity teams.
• Strong organisational and technical documentation skills.
• Ability to manage multiple security priorities and cloud infrastructure projects.
• High levels of confidentiality, accountability and professional integrity.