Cloud Azure Security Engineer

Cloud Azure Security Engineer

Location: Colombia

.Monks Technology Services, part of Media.Monks and S4 Capital, is a global consulting firm mastering AI-powered transformations for the Fortune 100. We combine long-term strategic thinking, deep enterprise experience, and a human-centered approach to help clients transform business processes and dominate their industries.

As part of our commitment to inclusion and in compliance with Law 2466 of 2025 from Colombia, we have available spaces for people with disabilities.

About the Role

As a Cloud Azure Security Engineer, you’ll design, implement, and maintain security solutions that protect clients’ Microsoft Azure environments. You’ll assess cloud security posture, strengthen identity and access controls, address vulnerabilities and compliance gaps, and collaborate with engineering and operations teams to implement security best practices. Hands-on Microsoft Entra ID expertise is a mandatory requirement for this role.

Responsibilities

• Assess the security posture of Azure infrastructure, applications, and data to identify vulnerabilities, misconfigurations, and compliance gaps
• Develop and maintain cloud security policies, procedures, and controls aligned with industry standards, regulatory requirements, and organizational objectives
• Collaborate with stakeholders to translate business requirements into actionable security controls and policies
• Conduct security audits and assessments to validate policy adherence and identify opportunities for improvement
• Guide engineering and operations teams in implementing security best practices and remediating security issues
• Design and implement security solutions across cloud infrastructure, networks, identity, and access management
• Implement and enforce security and compliance controls across Azure environments
• Investigate and remediate security findings, vulnerabilities, and cloud misconfigurations
• Manage identity and access controls using Microsoft Entra ID, Conditional Access, Privileged Identity Management, access reviews, and identity governance
• Automate security controls and remediation through Terraform, GitHub Actions, PowerShell, Python, or Azure CLI
• Monitor emerging cloud threats, vulnerabilities, and security trends and incorporate findings into security controls
• Participate in incident response and support the investigation and resolution of security incidents
• Other duties as assigned

About You

Qualifications & Skills

• 2+ years of cloud security engineering experience, with a focus on Microsoft Azure
• Required: Hands-on experience with Microsoft Entra ID (formerly Azure Active Directory); candidates without practical Entra ID experience will not be considered
• Strong knowledge of Entra ID users, groups, roles, RBAC, administrative roles, service principals, managed identities, application registrations, and enterprise applications
• Proven experience implementing Entra ID Conditional Access policies, including MFA, risk-based access, device-based controls, and least-privilege access
• Experience with Entra ID Privileged Identity Management, access reviews, identity governance, and privileged access controls
• Knowledge of application authentication and authorization protocols, including SAML, OAuth 2.0, and OpenID Connect
• Bachelor’s degree in Computer Science, Information Technology, or a related field; master’s degree preferred
• Experience with Terraform, GitHub Actions, and container technologies
• In-depth knowledge of Microsoft Defender for Cloud, Microsoft Sentinel, Azure Firewall, Azure Policy, Azure Key Vault, and Network Security Groups
• Experience with scripting and automation using PowerShell, Python, or Azure CLI
• Strong understanding of network security, encryption, identity management, authentication, authorization, and Zero Trust principles
• Experience implementing Azure security policies and controls to support organizational and compliance requirements
• Experience with cloud security posture and vulnerability management tools such as Wiz, Microsoft Defender for Cloud, or similar platforms
• Ability to translate security findings into actionable remediation steps, including infrastructure-as-code changes
• Relevant certification such as Microsoft Certified: Azure Security Engineer Associate (AZ-500), Identity and Access Administrator Associate (SC-300), Certified Cloud Security Professional (CCSP), or similar
• Excellent problem-solving skills and the ability to work independently or collaboratively in a fast-paced environment
• Effective communication skills, including the ability to explain complex technical concepts to non-technical stakeholders
• English communication proficiency at B2 level or higher

.Monks Technology Services does not discriminate on the basis of race, sex, color, religion, age, national origin, marital status, disability, veteran status

#LI-Remote #LI-ML1