Cloud Security Principal

Responsibilities

• Design and document secure architectures for high availability, scalability, and maintainability.
• Responsible for the governance of cloud security policies and standards and review of exceptions.
• Implementation of secure user access and privilege account management for access to cloud resources.
• Primary consumer of cloud security posture management tools and technology and serve as a subject matter expert for the risk assessment and remediation of findings.
• Perform security reviews of cloud architecture and applications, identify gaps, and develop a security risk management plan.
• Provide guidance and support to development teams in the secure design and implementation of cloud applications.
• Collaborate with cross-functional teams to integrate security controls and processes into cloud infrastructure and applications.
• Develop terraforms or IaC to maintain cloud security policies, standards, and procedures.
• Stay up-to-date with emerging threats, vulnerabilities, and best practices in cloud security.
• Integrating on-premises and cloud resources.
• Identify ways to optimize resources and minimize cost.
• All other duties and projects as assigned.

Qualifications

Bachelor’s degree in computer science, Information Security, or a related field.

Experience

• A minimum of 10+ years of direct cybersecurity cloud experience in the configuration and support of cloud applications and infrastructure
• Experience in the configuration and support of Microsoft 365 services including :
• Microsoft Endpoint Manager Intune and Configuration Manager
• Microsoft Defender for Cloud
• Conditional Access
• Microsoft Identity and Access - Microsoft 365 Active Directory / Entra and ADFS.
• Understanding of modern cloud technology components and deployment patterns : virtual machines, containers, Kubernetes, serverless, infrastructure as code, etc.
• Demonstrated knowledge of Azure architecture and core services such as Virtual Machines, Group Policy, MFA, Azure Active Directory, Management Groups, Resource Groups, Azure Regions, Azure Functions, Azure Networking, Azure IPsec Connections, Network Security Groups, Azure VDI, and Firewalls.
• Experience with DevOps and building CI / CD pipelines to support application and infrastructure deployments.
• Scripting and Programming : skills in scripting languages like PowerShell or Azure CLI for automation.
• Knowledge of network architectures, including VNETs, subnets, VPNs, and ExpressRoute, along with an understanding of Azure security tools and features like Azure Active Directory, Network Security Groups, and Azure Key Vault.
• Strong leadership, communication, and interpersonal skills.
• Collaborative and effective in cross-functional team environments.
• Strong analytical skills to assess risks and vulnerabilities in complex systems.

Preferred Qualifications

• Knowledge of programming languages like Python, .NET, or Java.
• Cloud Technology Expertise : demonstrate a working knowledge of various enterprise technology stacks used to build services in the cloud.
• Cloud Platform Experience : possess working knowledge and practical experience in security testing within cloud platforms, particularly Azure.
• Proficiency in scripting and automation for security testing.
• Knowledge of Azure configuration best practices.
30+ days ago