Senior Cloud Platform Security Engineer

As a Senior Cloud Platform Security Engineer, you will be the primary technical owner of a large-scale Azure platform, cloud security controls, and infrastructure operations. You’ll play a hands-on role in keeping cloud environments secure, reliable, scalable, compliant, and operationally efficient. The position spans cloud architecture, identity and access management, security operations, infrastructure automation, compliance, disaster recovery, and cost optimization. You’ll also help enable secure data, AI, and agent-based workloads across a growing technology environment. Working as a senior individual contributor, you’ll collaborate closely with Technology, Engineering, Data & AI, Compliance, business stakeholders, auditors, vendors, and external partners. This is an opportunity to shape cloud standards, automate critical processes, strengthen security posture, and directly influence the resilience of an evolving technology platform.

• Cloud and security experience: 7+ years of hands-on cloud infrastructure or security engineering experience, including ownership of production Azure environments and demonstrated senior-level responsibility.
• Azure expertise: Strong experience with Azure subscriptions and management groups, networking, Microsoft Entra ID, RBAC, Azure Policy, monitoring, backup and recovery, security controls, and cloud cost management.
• Infrastructure as code: Demonstrated experience with Terraform, Bicep, ARM templates, or comparable infrastructure-as-code technologies, including source control, peer review, automated testing, and deployment practices.
• Security operations: Practical experience with cloud security operations, vulnerability remediation, logging and detection, incident response, access governance, configuration monitoring, and disaster-recovery testing.
• Data governance: Working knowledge of Microsoft Purview or comparable data-governance platforms, including classification, lineage, retention, DLP, and access controls.
• Compliance and risk: Experience translating regulatory, customer, or internal control requirements into technical designs, operating procedures, audit evidence, and measurable results; experience in financial services or another regulated environment is preferred.
• AI security: Experience securing AI, machine-learning, large-language-model, or agent-based workloads in production is preferred.
• Technical toolkit: Experience with Azure Monitor, Log Analytics, Microsoft Defender for Cloud, Microsoft Sentinel or comparable SIEM platforms, Azure DevOps pipelines, Azure Policy, Azure Key Vault, backup and recovery technologies, cloud networking, segmentation, firewalls, DNS security, zero-trust architectures, certificate and key management, and FinOps practices.
• Platform security: Experience with Databricks platform security, Microsoft 365 security, and SaaS identity integrations where applicable.
• Certifications: Relevant Microsoft certifications such as Azure Security Engineer Associate, Cybersecurity Architect Expert, Security Operations Analyst Associate, or Azure Solutions Architect Expert are preferred.
• Documentation and communication: Strong documentation skills across runbooks, architecture diagrams, standards, risk statements, and executive updates, with the ability to communicate clearly with technical teams, business stakeholders, executives, auditors, vendors, and external partners.
• Problem-solving and judgment: Strong independent judgment, risk-based decision-making, analytical thinking, and the ability to investigate complex systems, identify root causes, and continuously improve technology operations.
• Collaboration and adaptability: Comfortable balancing security, reliability, compliance, cost, and business priorities while managing multiple initiatives in a fast-moving environment and working effectively across distributed teams.
• Growth mindset: Naturally curious and proactive, with a demonstrated interest in automation, simplification, process improvement, and emerging cloud and security technologies.