Jobs → Engineering → Security Engineer – Azure CIS Hardening

About the Role We are looking for a Security Engineer to join our team and implement the Azure side of the security program. This role focuses on hardening Azure environments according to the CIS Microsoft Azure Foundations Benchmark. Key Responsibilities • Assess management group, subscription and resource group structures and current security posture. • Harden Microsoft Entra ID, including Conditional Access, PIM and MFA enforcement. • Implement Azure Policy initiatives aligned with CIS, including compliance reporting and remediation. • Enable and tune Defender for Cloud, diagnostic settings, Log Analytics and Microsoft Sentinel integration. • Implement Azure Key Vault standards, including access management, rotation, soft delete and purge protection. • Implement network security controls, including NSGs, Azure Firewall policies and private endpoints. • Produce implementation records and evidence artifacts for each control. Requirements • 7+ years of cloud security engineering experience with strong Microsoft Azure expertise. • Hands-on implementation experience with CIS Microsoft Azure Foundations Benchmark. • Enterprise-level knowledge of Microsoft Entra ID, Conditional Access and PIM. • Infrastructure as Code experience with Bicep, ARM or Terraform.