M&A Integration-M&A Cloud Security (Microsoft Azure)- On Contract

Key Responsibilities

Cloud Security Architecture & Governance

• Define and maintain multi-cloud security architectures aligned with organizational security strategy and compliance requirements.
• Develop and enforce cloud security policies, standards, and guardrails for Azure, AWS, and GCP.
• Conduct threat modeling and risk assessments for new cloud services and workloads.

Security Posture Management & Tooling

• Deploy, configure, and optimize Microsoft Defender for Cloud, Wiz, or CrowdStrike for CSPM, CWPP, and CNAPP capabilities.
• Integrate security findings into SIEM/SOAR workflows and drive remediation with engineering teams.
• Implement cloud-native security services such as Azure Policy, AWS Security Hub, and GCP Security Command Center.

DevSecOps & Automation

• Embed security into CI/CD pipelines using GitHub Actions, Azure DevOps, or Jenkins.
• Implement policy-as-code and IaC security scanning for Terraform, Bicep, and CloudFormation templates.
• Automate security controls and compliance checks using Python, PowerShell, or equivalent scripting languages.

Identity, Access & Network Security

• Design and enforce least privilege IAM policies, role-based access control, and conditional access across cloud platforms.
• Implement network segmentation, private endpoints, and firewall policies to secure workloads.

Monitoring, Detection & Incident Response

• Configure and monitor Defender for Cloud, Wiz, or CrowdStrike dashboards for anomaly detection and threat s.
• Lead cloud security incident investigations, root cause analysis, and remediation efforts.

Required Qualifications

• Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience).
• 5+ years of experience in cloud security, with strong expertise in Azure and exposure to AWS/GCP.
• Hands-on experience with Microsoft Defender for Cloud, Wiz, or CrowdStrike for CSPM, CWPP, and CNAPP.
• Strong knowledge of IAM, encryption, network security, and container security in cloud environments.
• Experience with DevSecOps practices, including IaC security and pipeline integration.
• Familiarity with compliance frameworks (CIS, NIST, ISO 27001, SOC 2).
• Scripting proficiency in Python or PowerShell.