Position Summary

The Azure Cloud Security Engineer II will implement and operationalize Azure security governance controls through Azure Policy, Management Groups, compliance automation, and preventive guardrails. This role focuses on execution of approved cloud security standards and building scalable policy management frameworks that improve Azure security posture across subscriptions and environments. 

Primary Responsibilities

• Implement Azure Policy definitions, initiatives, assignments, and governance standards.
• Build policy deployment pipelines and source-controlled policy repositories.
• Manage policy compliance assessment and reporting.
• Deploy Audit, AuditIfNotExists, Modify, DeployIfNotExists, and Deny policy controls.
• Develop automated remediation workflows for non-compliant resources.
• Implement logging, monitoring, encryption, and identity-related security controls.
• Build health monitoring and compliance dashboards.
• Automate deployment validation and policy lifecycle management.
• Support managed identity and remediation workflow implementation.
• Create rollback procedures, operational runbooks, and governance documentation.

Required Experience

• 3-7 years of Azure engineering or Azure security experience.
• Experience with Azure Policy and Management Groups.
• Experience with Azure Defender for Cloud.
• Knowledge of Azure Monitor, Key Vault, Managed Identities, RBAC, and subscription governance.
• Terraform and CI/CD pipeline experience.
• Python or PowerShell automation experience.

Desired Technologies

Azure Policy, Defender for Cloud, Azure Monitor, Key Vault, Managed Identities, Terraform, Azure DevOps, GitLab, PowerShell, Python. 

Deliverables

• Azure governance guardrails.
• Automated compliance remediation.
• Health monitoring dashboards.
• Compliance reporting and evidence.
• Deployment validation automation.
• Operational documentation and support procedures.

Level: Engineer II (Mid-Level)