Cloud Security Expert

Ness Solution is hiring a Cloud Security Expert to work with Microsoft Azure, Microsoft 365, and hybrid environments, focusing on cloud architecture and security standards.

• Practical experience designing, implementing, and maintaining Microsoft Azure and hybrid environments.
• Experience defining architectural patterns and standards for cloud services.
• Knowledge of designing environments ensuring high availability, scalability, performance, and resilience.
• Experience creating architectural documentation and technical standards.
• Knowledge of Azure components including Subscriptions, Management Groups, Azure Networking, Storage, Compute, Azure Monitor, Log Analytics, Key Vault, Azure Policy, and Azure Resource Manager.
• Practical experience securing Microsoft Azure and Microsoft 365.
• Familiarity with Microsoft IAM mechanisms: Microsoft Entra ID, RBAC, MFA, Conditional Access, PIM, and least privilege principle.
• Experience conducting architecture, configuration, and security reviews of cloud environments.

Nice to have:

• Knowledge of Infrastructure as Code: Terraform, Bicep, or ARM Templates.
• Experience with Azure DevOps, GitHub Actions, or other CI/CD tools.
• Knowledge of Microsoft Defender for Cloud, Defender XDR, Microsoft Sentinel, CSPM/CNAPP.
• Understanding of CASB, SSE/SASE, Azure Landing Zones, enterprise-scale governance.
• Experience with multiple cloud platforms such as AWS or GCP.
• Knowledge of containers, Kubernetes/AKS, and container workload security.
• Familiarity with standards and regulations like ISO 27001, NIS2, DORA, RODO, or regulated sectors.
• Experience building and maintaining Cloud Governance including tagging, budgeting, limits, subscription management, and cost control.
• Certifications such as AZ-500, SC-100, SC-300, AZ-104, CCSP, CISSP, CISM or equivalents.

Cloud Architecture:

• Design, develop, and maintain cloud and hybrid environment architectures.
• Define target models and architectural standards for cloud services.
• Design solutions considering high availability, performance, scalability, and resilience.
• Analyze cloud environment architecture and operational parameters.
• Create and maintain technical documentation, architectural standards, and cloud platform roadmaps.

Cloud Security:

• Design and implement security mechanisms for Microsoft Azure and Microsoft 365.
• Monitor environment configurations for vulnerabilities, risks, and compliance with standards.
• Design and deploy identity and access management, data protection, network segmentation, logging, and security monitoring.
• Define and maintain security standards, configurations, and monitoring and cost control mechanisms.
• Identify areas for security improvements and recommend enhancement actions.

Technical Controls & Audits:

• Conduct periodic reviews of cloud environment architecture, configuration, and security.
• Participate in technical, security, and compliance audits.
• Coordinate activities arising from audits and reviews.
• Prepare reports, non-compliance registers, and remediation plans.
• Monitor remediation actions, verify effectiveness, and close identified non-compliances.