Senior Azure Cloud Security Engineer

Group107

Що робити

Own and continuously improve the Azure network architecture — VNet topology (hub-spoke or VWAN), NSGs, Azure Firewall Premium, and Private Link / Private Endpoints
Drive maturation of the zero-trust model across the Azure environment, including Entra ID Conditional Access, PIM, and workload identity management
Design and manage integrations with external identity providers (Okta, Ping Identity, Auth0), including SAML, OIDC, and OAuth 2.0 federation with Entra ID
Evaluate and govern ExpressRoute / VPN Gateway configurations for client-dedicated connectivity
Maintain and evolve network security controls supporting the SOC 2 Type II program, in partnership with the internal compliance function; provide technical input to SOC 2 audits and client DDQs

Advanced knowledge of Microsoft Azure, with 6+ years in cloud infrastructure or security engineering and at least 3 years focused on Azure
Deep hands-on expertise with Azure Firewall Premium, NSGs, Private Link, VNet peering, and hub-spoke / VWAN topology
Strong working knowledge of Entra ID (Azure AD), Conditional Access, Privileged Identity Management (PIM), and managed identities
Proven experience integrating external identity providers (Okta, Ping Identity, Auth0) with Entra ID via SAML, OIDC, or OAuth 2.0
Solid grounding in zero-trust architecture principles and their practical implementation in an Azure-native environment

Знайдено через trackr.help/jobs · Канал: @trackrhelp · Бот для персональних сповіщень: @trackrhelpBot