Azure Security Analyst

Role: Azure Security Analyst
Location: Phoenix, AZ (Onsite)
Employment Type: Full-Time

Experience: 5 12 years

Must-Have Qualifications:

• Strong knowledge of Microsoft Azure, including Azure security, networking, identity, resource management, and security best practices
• Hands-on experience with Azure Policy, including policy definitions, initiatives, assignments, exemptions, compliance evaluation, and remediation
• Experience securing and supporting enterprise-scale Azure environments
• Strong understanding of cloud security, risk, governance, and compliance concepts
• Hands-on experience with Terraform for infrastructure-as-code, security controls, and policy deployment
• Familiarity with JSON for cloud configurations, policy definitions, templates, and service certification requirements
• Familiarity with Git and GitHub, including source control, pull requests, and GitHub Actions
• Ability to evaluate security requirements, troubleshoot policy and configuration issues, and collaborate with application, engineering, architecture, and security teams
• Experience reviewing Azure services, resources, architectures, and configurations for security risks, compliance requirements, vulnerabilities, and misconfigurations
• Experience developing, testing, deploying, and maintaining Azure Policy definitions, initiatives, assignments, guardrails, exemptions, and approved allow policies
• Experience developing and maintaining Terraform modules and security controls, with Terraform as the primary IaC tool for Azure security and policy deployment
• Experience monitoring Azure environments for security findings, vulnerabilities, misconfigurations, and policy violations
• Experience supporting cloud security operations, incident investigations, and troubleshooting
• Understanding of cloud security concepts including IAM, network security, policy enforcement, encryption, logging/monitoring, and security posture management
• Strong documentation, analytical, troubleshooting, and communication skills
• Bachelor's degree in Computer Science or a related field

Preferred Qualifications:

• Working knowledge or hands-on security experience with AWS, GCP, and/or OCI
• Understanding of how cloud security concepts are implemented across Azure, AWS, GCP, and OCI
• Experience with GitHub Actions workflows and infrastructure-as-code pull request validation
• Experience working with risk, compliance, cybersecurity, cloud engineering, architecture, and security teams

Key Responsibilities:

• Review and assess Azure services, resources, architectures, and configurations for security risks and compliance
• Develop and maintain Azure Policy definitions, initiatives, assignments, guardrails, exemptions, and allow policies
• Develop and maintain Terraform modules and security controls for Azure security and policy deployment
• Manage JSON-based configurations and templates supporting Azure security requirements
• Manage infrastructure-as-code and security policy changes using Git and GitHub
• Monitor Azure environments and track security findings through resolution
• Support cloud security operations and incident investigations
• Apply cloud security principles across multi-cloud environments
• Maintain documentation for security policies, standards, service certifications, exceptions, guardrails, and operational procedures