Role & responsibilities:

- Design and implement security architecture for enterprise Azure environments, including Azure Landing Zones, security guardrails and governance.
- Build and manage Azure security policies and controls to ensure secure and compliant cloud environments.
- Design and implement network security and segmentation using VNets, NSGs, Azure Firewall, WAF, Private Endpoints and related Azure networking controls.
- Implement security controls for AKS/Kubernetes and containerized workloads, including container/image security, workload isolation and access controls.
- Implement and manage Microsoft Defender for Cloud and Microsoft Sentinel for cloud security monitoring, threat detection and response.
- Design identity and access controls using Microsoft Entra ID, RBAC, PIM and Conditional Access.
- Automate security controls using Terraform/Bicep, Policy-as-Code, PowerShell/Python and CI/CD pipelines.
- Work closely with Cloud, Platform, Network and Application Engineering teams to define secure architecture patterns and remediate security risks.
- Support security assessments, incident response and continuous improvement of cloud security controls.





Preferred candidate profile :

- 10+ years of cybersecurity/cloud security experience, with strong hands-on experience in Azure Cloud Security Architecture.
- Strong experience designing or implementing Azure Landing Zones, Azure Policy and enterprise cloud-security guardrails.
- Hands-on experience with AKS/Kubernetes and container security.
- Strong knowledge of Azure network security and segmentation, including Azure Firewall, WAF, VNets, NSGs and Private Endpoints.
- Solid experience with Microsoft Entra ID, PIM, RBAC and Conditional Access.
- Hands-on experience with Defender for Cloud and Microsoft Sentinel.
- Experience with Terraform/Bicep, IaC, Policy-as-Code and security automation.
- Exposure to CNAPP/CSPM/CWPP solutions such as Wiz or equivalent cloud-security platforms.
- Exposure to security tools such as CrowdStrike, Proofpoint, Rapid7 and Checkmarx would be an advantage.
- Ability to work as a senior hands-on individual contributor, owning security design as well as implementation.

📌 Principal Cybersecurity Engineer (Hyderabad)
🏢 PROVIDENCE GLOBAL CENTER
📍 Hyderabad