About the role
Design, deploy and manage secure cloud architectures on Microsoft Azure for enterprise clients. You will lead Entra ID, Defender for Cloud and Microsoft Purview implementations — translating complex security requirements into robust, well-documented technical solutions.
What you will do
Design and implement secure Azure architectures aligned to Zero Trust principles
Deploy and configure Microsoft Entra ID, Conditional Access and Privileged Identity Management
Lead Microsoft Defender for Cloud and Microsoft Purview deployments for new clients
Develop Infrastructure-as-Code (IaC) templates for repeatable, secure deployments
Review and harden existing client cloud environments — identifying misconfigurations and gaps
Produce clear technical documentation and handover materials for client teams
What we are looking for
Strong hands-on experience with Microsoft Azure security services
Deep proficiency with Microsoft Entra ID and Conditional Access
Experience deploying Microsoft Defender for Cloud and Defender for Endpoint
Familiarity with Infrastructure-as-Code (Bicep, Terraform or ARM templates)
AZ-500 or equivalent Microsoft security certification
Eligibility to work without restriction
Nice to have
These are not required — but they will help your application stand out.
Microsoft SC-300 (Identity and Access Administrator)
Experience with Microsoft Purview and data classification
Exposure to Microsoft Sentinel connector development
Prior managed security services or consultancy background