Azure Cloud Security Engineer

Overview

Role Overview

Key Responsibilities

• Build, configure and harden Azure platform security controls: Azure Firewall, Application Gateway / Web Application Firewall (WAF), DDoS Protection, NSGs, User-Defined Routes and Private Endpoints.
• Make infrastructure-level changes in Azure – secure VNets, hub-and-spoke networking and hybrid connectivity (ExpressRoute, Site-to-Site / Point-to-Site VPN).
• Support and maintain Azure Landing Zone security architecture – Azure Policy, Management Groups, RBAC and governance guardrails.
• Operate Microsoft Defender for Cloud – cloud security posture management (CSPM), Secure Score, remediation and regulatory compliance.
• Secure VMs, data platforms (Azure SQL / Storage) and AI workloads (e.g. Azure OpenAI) from build through to runtime.
• Manage identity security – Microsoft Entra ID, Conditional Access, MFA, PIM and RBAC.
• Run Microsoft Sentinel for log onboarding, monitoring, incident handling and basic automation / playbooks (a supporting part of the role, not the core).
• Continuously improve detection rules and reduce false positives across cloud and endpoint.

Must-Have Skills & Experience

• 5–7 years in cloud / security, with a strong, hands-on Azure infrastructure focus.
• Demonstrable hands-on configuration (not just monitoring) of Azure Firewall, WAF, DDoS Protection, NSGs and Azure networking.
• Hybrid connectivity: ExpressRoute and Site-to-Site / Point-to-Site VPN.
• Azure Landing Zone, Azure Policy and governance (Management Groups, RBAC).
• Microsoft Defender for Cloud (CSPM / Secure Score).
• Microsoft Sentinel with working KQL for monitoring and incident handling.
• Identity security: Entra ID, Conditional Access, MFA, PIM.
• Based in the UAE and available locally.

Preferred Certifications & Nice-To-Have

• AZ-500 (Microsoft Azure Security Engineer) – strongly preferred.
• AZ-104 / AZ-305 and / or SC-200.
• Infrastructure-as-Code (Terraform / Bicep).
• Banking or government sector exposure in the GCC
• Interested candidates, please share cv: [email protected]