Azure Security Architect

Mandatory: Azure Security Architect, who have hands-on experience with the Vulnerability management and Web application scanning
Job Description: We are seeking an experienced Azure Security Architect to join our dynamic team. As an Azure Security Architect, you will play a critical role in designing, implementing, and maintaining security solutions for our Azure cloud environment. The ideal candidate should possess a deep understanding of Azure services and a strong background in information security. Responsibilities: Azure Security Design: ➢ Architect, design, and implement secure Azure cloud solutions. ➢ Develop and maintain Azure security reference architectures and best practices. ➢ Collaborate with cross-functional teams to integrate security controls seamlessly into Azure services. Identity and Access Management: ➢ Design and implement robust identity and access management solutions on Azure. ➢ Configure and manage Azure Active Directory (AAD) for secure authentication and authorization. ➢ Implement role-based access controls (RBAC) and enforce least privilege principles. Network Security: ➢ Design and implement secure Azure network architectures. ➢ Implement network security controls, including virtual networks, NSGs, and firewalls. ➢ Ensure secure connectivity between on-premises and Azure environments. Data Protection: ➢ Implement data encryption solutions for data at rest and in transit. ➢ Configure Azure Key Vault for secure key management. ➢ Design and enforce data loss prevention (DLP) policies. Security Monitoring and Incident Response: ➢ Set up Azure Security Center for continuous monitoring and threat detection. ➢ Design and implement logging and monitoring solutions using Azure Monitor. ➢ Develop and maintain incident response plans for Azure environments. Compliance and Governance: ➢ Ensure Azure environments comply with industry standards and regulatory requirements. ➢ Implement Azure Policy and Azure Blueprints for governance and compliance. ➢ Conduct regular security assessments and audits.
Microland Ltd Internal Page 3 of 4 Collaboration and Communication: ➢ Work closely with development, operations, and infrastructure teams to address security requirements. ➢ Provide guidance and training to internal teams on Azure security best practices. ➢ Keep abreast of the latest Azure security features and industry trends. Requirements: ➢ Bachelor's degree in Computer Science, Information Technology, or related field. ➢ Proven experience as a Security Architect with a focus on Azure cloud environments. ➢ Azure certifications such as AZ-500, SC200 and SC100 : Microsoft Azure Security Technologies are highly desirable. ➢ In-depth knowledge of Azure services and capabilities. ➢ Strong understanding of security principles, protocols, and standards. ➢ Experience with scripting and automation (PowerShell, ARM templates). ➢ Excellent communication and interpersonal skills. ➢ Ability to work independently and collaboratively in a team environment. ➢ If you are passionate about Azure security, have a proven track record in designing secure cloud solutions, and enjoy staying ahead of the cybersecurity curve, we invite you to apply for this exciting opportunity. OVERALL SKILL SET FOR Vulnerability Assessment ➢ Strong professional experience in information security with a focus on vulnerability assessment (VA) ➢ Commanding knowledge of VA concepts and best practices, including the requirements for WhiteHat/ethical hacking ➢ Expert understanding of the difference between a vulnerability assessment in the context of assessment scope, objectives, and deliverables ➢ Extensive experience with common automated VAtools such as Balbix, Nessus, QualysGuard, etc, Hand-on implementation knowledge on Balbix is preferred. ➢ Hands on experience of working on Windows and Linux ➢ Working knowledge of CIS Security benchmarks ➢ Knowledge of Network Security technology in areas of Firewall, IPS, VPN, Gateway security solutions (proxy, web filtering) ➢ In-depth understanding on Common Vulnerability Exposure (CVE)/ Cert advisory database ➢ Ability to validate the presence of identified vulnerabilities with accuracy ➢ Mastery of common application platforms and technologies in order to effectively understand and evaluate complex application assessments via the use of manual techniques and simple tools such as proxies and browser plugins ➢ Authoritative understanding of OWASP, CVE, general security controls, and other foundational topics such as the latest application and operating system exploits ➢ Knowledge of common scripting and programming languages is advantageous

---