Cloud Platform Engineering - Azure Security, AVP

Role Overview

Azure Cloud Security

• Define and execute enterprise identity and access management strategies leveraging Microsoft Entra ID
• Lead design and implementation of Azure Identity Governance, Privileged Identity Management (PIM), Conditional Access, Identity Protection, Access Reviews, and Zero Trust security controls
• Drive enterprise adoption of Azure IAM best practices, RBAC models, least-privilege access, federated identity solutions, and authentication services
• Lead architecture and governance of Azure AD B2C / External Identity solutions for client-facing and partner-facing applications
• Partner with security, risk, compliance, and audit teams to ensure adherence to regulatory and security requirements

Azure Governance & Platform Engineering

• Define enterprise cloud governance frameworks using Azure Policy, Management Groups, Landing Zones, and subscription governance models
• Lead implementation of Policy-as-Code, Governance-as-Code, and Security-as-Code capabilities using modern engineering practices
• Establish automated compliance validation, remediation, and continuous governance processes across Azure environments
• Collaborate with architecture, security, application, and infrastructure teams to define cloud standards and guardrails
• Drive platform engineering initiatives focused on self-service capabilities, standardization, scalability, and operational excellence

Automation & AI Enablement

• Champion automation-first engineering practices using Terraform, PowerShell, Python, GitHub Actions, Azure DevOps, and other cloud-native tooling
• Identify and implement AI-driven solutions to improve engineering productivity, governance automation, operational efficiency, compliance monitoring, and developer experience
• Lead adoption of intelligent operational workflows leveraging Generative AI, Copilot technologies, and engineering automation frameworks

Stakeholder & Client Engagement

• Collaborate with internal technology teams, enterprise architecture, cybersecurity, operations, product management, and executive leadership
• Partner with external clients, vendors, and strategic partners to understand requirements and deliver secure cloud solutions
• Influence and negotiate across multiple stakeholder groups to drive alignment on priorities, standards, and platform roadmaps
• Act as a trusted advisor to senior leaders on cloud strategy, identity modernization, security posture, and governance transformation

Leadership & People Management

• Lead, mentor, and develop a team of cloud platform, security, and identity engineers
• Manage the end-to-end employee lifecycle including workforce planning, hiring, onboarding, performance management, compensation discussions, talent development, succession planning, promotions, and retention strategies
• Conduct year-end performance reviews, goal setting, career development planning, and ongoing performance coaching
• Foster a culture of accountability, collaboration, innovation, and continuous improvement
• Effectively manage employee relations, conflict resolution, difficult conversations, and stakeholder escalations
• Provide executive-level reporting and updates to senior technology leadership, engineering leadership, and business stakeholders
• Build and maintain a high-performing engineering organization aligned with business priorities and strategic objectives

Required Qualifications

• Bachelor's degree in Computer Science, Engineering, Information Technology, or related discipline
• 15-20 years of extensive experience in cloud security, identity management
• 5+ years of direct people management experience leading Cloud engineering teams
• Demonstrated experience managing year-end reviews, performance management processes, career development, employee mentoring, and conflict resolution
• Deep expertise in Microsoft Entra ID, including Conditional Access, Identity Protection, Privileged Identity Management (PIM), Access Reviews, Identity Governance, Federation and SSO
• Strong experience with Azure IAM, RBAC, Privileged Access models, and Zero Trust architectures
• Extensive experience with Azure Security services including Microsoft Defender for Cloud, Microsoft Sentinel, Key Vault, Security Center, Azure Monitor, Security Governance Frameworks
• Strong expertise implementing Azure Policy, Policy-as-Code, Governance-as-Code, and enterprise cloud controls
• Experience reporting platform health, risk, compliance, security, and delivery metrics to executive leadership
• Proven ability to manage complex stakeholder relationships across global organizations
• Strong communication, presentation, influencing, and leadership skills

Preferred Qualifications

• Experience leading cloud transformation programs within large-scale financial services or regulated enterprise environments
• Strong understanding of Azure Landing Zones, enterprise networking, hybrid connectivity, and multi-cloud operating models
• Strong experience developing infrastructure automation using Terraform, Bicep, PowerShell, Python, and CI/CD platforms
• Hands-on expertise with Azure AD B2C / External Identities and customer identity management solutions
• Experience building platform engineering organizations and self-service cloud capabilities
• Exposure to AI-assisted engineering, Generative AI platforms, Microsoft Copilot, agentic AI frameworks, and automation-based operational models
• Knowledge of regulatory frameworks such as NIST, ISO 27001, CIS, SOC2, PCI-DSS, and financial industry compliance standards

Microsoft Certifications

• Azure Solutions Architect Expert
• Azure Security Engineer Expert
• Microsoft Cybersecurity Architect Expert
• Azure Administrator Expert
• Identity and Access Administrator Associate

What We Value