Staff Platform Engineer (Infrastructure Security)

Job summary

The role involves overseeing the security of an Azure cloud environment and contributing to a multi-cloud security strategy. This is a hands-on, senior individual contributor position focused on defining security architecture and implementing security controls.

Qualifications

• 8+ years of experience in infrastructure or security engineering, with extensive Azure security expertise at production scale.
• Ability to operate at a staff level, demonstrating technical authority and cross-team influence.
• Strong knowledge of Entra ID security, including conditional access and Privileged Identity Management.
• Proven experience with Azure security controls and infrastructure-as-code using Terraform.
• Familiarity with compliance frameworks such as ISO 27001 and GDPR.

Responsibilities

• Define and implement security architecture for the Azure environment, including policy guardrails and network security.
• Ensure secure onboarding and configuration of the CNAPP platform.
• Conduct threat modeling for Azure infrastructure designs and automate compliance evidence collection.
• Align Azure security patterns with AWS and GCP to maintain a coherent multi-cloud security posture.

Skills

• Expertise in Azure security tools such as Defender for Cloud and Sentinel.
• Experience with CNAPP/CSPM tooling and observability platforms.
• Strong technical communication skills in English.

Education

• Relevant certifications such as AZ-500 are preferred.

Tools

• Familiarity with security detection tools like SIEM solutions and experience with Terraform for security automation.