We are seeking an experienced Cloud Security and Infrastructure Tech Lead (part time job) to join the project team.
The person in this role will provide technical leadership and hands-on expertise in Azure cloud infrastructure architecture, security, and operational management.
Responsibilities
- Manage the end-to-end vulnerability management process across Azure cloud environments.
- Coordinate remediation activities for vulnerabilities identified by Microsoft Defender for Cloud, MEND, and penetration testing exercises.
- Oversee remediation programmes arising from penetration test findings for platform releases.
- Administer and optimise Microsoft Defender for Cloud, including security policies, alert management, recommendations, and exclusion governance.
- Design and improve security monitoring processes and integrations between Microsoft Defender for Cloud, ServiceNow, and the SOC.
- Develop and enhance threat detection and monitoring capabilities within Microsoft Sentinel in collaboration with the SOC.
- Manage and tune Azure Web Application Firewall (WAF): analyse blocked requests, optimise rules, and implement business-required rule exclusions.
- Assess the security impact of WAF exemptions and provide risk-based recommendations to stakeholders.
- Conduct security reviews and risk assessments for new projects, infrastructure changes, and application releases.
- Support cloud and application teams in resolving security-related issues and implementing security controls.
- Prepare security reports, risk presentations, and technical recommendations for project stakeholders and client governance forums.
- Lead the architectural design and secure implementation of Azure cloud infrastructure with emphasis on operational excellence, troubleshooting, and cost management.
- Drive service operations and delivery assurance processes to align with contractual and stakeholder expectations.
- Provide technical vision and leadership to motivate the team to deliver incremental improvements aligned with client contracts and relationship goals.
- Foster a proactive, collaborative approach in managing relationships with clients and internal stakeholders.
Qualifications
- Proven experience in Azure cloud security and infrastructure architecture, including hands-on administration of Microsoft Defender for Cloud and Microsoft Sentinel.
- Experience managing vulnerability remediation programmes and coordinating with multiple teams and stakeholders.
- Proficiency with Azure Web Application Firewall (WAF) tuning and risk assessment of rule exemptions.
- Strong knowledge of identity and access management concepts including Azure RBAC, Entra ID (Azure AD), PIM, MFA and related integration patterns.
- Familiarity with containerisation and orchestration technologies (AKS, Kubernetes, Docker, Helm) and associated operational practices.
- Understanding of modern application architectures: .NET backend, React frontend, REST APIs, microservices and event-driven patterns.
- Experience with observability and CI/CD tools such as Dynatrace and Azure DevOps or equivalent.
- Working knowledge of OWASP Top 10 and vulnerability management best practices; experience with secrets management (Azure Key Vault) is desirable.
- Proven ability to present technical findings and risk-based recommendations to stakeholders and governance forums.
Benefits
- Part-time (50%) role allowing for flexible working arrangements consistent with project needs.
- Opportunity to lead security and infrastructure efforts on a high-impact Azure-based programme.
- Collaborative, outcomes-focused project environment.