Cloud Platform Security Engineer

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Cloud Platform Security Engineer based in United States.

As a Senior Cloud Platform Security Engineer, you will be the primary technical owner of a large-scale Azure platform, cloud security controls, and infrastructure operations. You'll play a hands-on role in keeping cloud environments secure, reliable, scalable, compliant, and operationally efficient. The position spans cloud architecture, identity and access management, security operations, infrastructure automation, compliance, disaster recovery, and cost optimization. You'll also help enable secure data, AI, and agent-based workloads across a growing technology environment.

• Own the Azure platform: design, configure, operate, and continuously improve Azure subscriptions, management groups, networking, compute, storage, platform services, and shared infrastructure.
• Strengthen cloud identity and security: design and maintain Microsoft Entra ID, MFA, Conditional Access, PIM, RBAC, managed identities, access reviews, emergency-access procedures, least-privilege controls, network segmentation, private connectivity, firewalls, DNS security, secure ingress and egress, and secrets management.
• Improve security operations and incident readiness: operate cloud-security posture management, vulnerability remediation, configuration monitoring, logging, detection, and threat-response capabilities.
• Build reliable infrastructure through automation: develop and maintain infrastructure using Terraform, Bicep, ARM templates, or comparable technologies.
• Support compliance and technology risk: translate requirements such as the GLBA Safeguards Rule, SOC 2, NIST Cybersecurity Framework into practical technical controls.
• Enable secure Data & AI operations: implement data governance and security controls covering discovery, classification, lineage, retention, DLP, access governance, and approved AI services.
• Drive reliability, recovery, and operational excellence: maintain at least 99.9% availability for critical platform services.
• Improve infrastructure-as-code adoption: drive toward at least 95% of production infrastructure being managed through infrastructure as code.
• Manage cloud costs and efficiency: own cloud budgets, alerts, tagging standards, forecasting inputs, and recurring optimization recommendations.
• Collaborate across technical and business functions.

• 7+ years of hands-on cloud infrastructure or security engineering experience, including ownership of production Azure environments.
• Strong experience with Azure subscriptions and management groups, networking, Microsoft Entra ID, RBAC, Azure Policy, monitoring, backup and recovery, security controls, and cloud cost management.
• Demonstrated experience with Terraform, Bicep, ARM templates, or comparable infrastructure-as-code technologies.
• Practical experience with cloud security operations, vulnerability remediation, logging and detection, incident response, access governance, configuration monitoring, and disaster-recovery testing.
• Working knowledge of Microsoft Purview or comparable data-governance platforms.
• Experience translating regulatory, customer, or internal control requirements into technical designs; experience in financial services or another regulated environment is preferred.
• Experience securing AI, machine-learning, large-language-model, or agent-based workloads in production is preferred.
• Experience with Azure Monitor, Log Analytics, and related tooling.