Senior Cloud Security Engineer (Azure)
Employer: Tesco (via hackajob) – collaborating with Tesco to connect exceptional tech professionals for this role.
About The Role
Exciting Opportunity at Tesco Technology! Join as an Azure Cloud Security Engineer within the infrastructure security architecture team. Your core purpose will be acting as the go-to subject matter expert between the wider Technology Security area and Cloud Platform Engineering team for the large Microsoft Azure estate within Tesco, and supporting security teams within Technology Security to help them achieve their security goals, using your knowledge and experience of Azure.
Responsibilities
This is a contract position and does not require people management. Your responsibilities will be as a specialist within the Azure and Azure security domain and will cover:
* Managing Azure Policy direction and supporting exemptions
o Assess suitability and impact of Azure policy exemptions at the team, environment, or global scale and create exemptions at the appropriate scope.
o Providing approvals upon completion of suitability assessment.
* Ensure design, review and delivery of upcoming Azure Policies and assess viability of upcoming policies/approach.
* Act as an SME advisor – assessing impact of upcoming Azure security-related change initiatives and ensuring compliance with security policies and standards.
* Deliver via proposed/implemented centralised controls, or by reducing friction of consuming organisationally aligned infrastructure.
* Working with and supporting key functions of the business to provide security architecture advice and review control appropriateness.
* Working with senior stakeholders in Cloud Platform Engineering and Infrastructure Architect teams, supporting them with security deliverables and assessing upcoming changes with a security lens.
* Supporting and providing advice on complex and custom implementations that other security or engineering teams are building.
* Supporting in security incident response – available to support response efforts and provide support to Security Operations teams where incidents occur within Azure environment.
* Monitoring & reporting of security compliance – defining measures and metrics to demonstrate compliance of implementation and environment against Tesco security standards and best practices; providing reporting of policy compliance to stakeholders.
* Collaboration and Documentation – working with wider CPE team to document centralised constructs, modules, or artefacts; creating documentation understandable by multiple audiences; contributing to standards and cookbooks.
Qualifications
You’ll need to demonstrate experience with:
* Knowledge of Azure best practices and working with teams.
* Demonstrable experience with Azure CLI, PowerShell or Azure Graph REST API.
* Minimum 5 years' experience in a senior Azure architecture or engineer role.
* Ability to operate independently with limited support and without additional training required; able to communicate and work with experienced infrastructure, security, and software development engineers.
* Comprehensive knowledge of Microsoft Azure; familiarity with other cloud platforms helpful. Experience with Cloud Security Posture Management (CSPM) and Cloud Workload Protection (CWP) solutions.
* Familiarity with Role Based Access Control, policy, and other governance constructs.
* Familiarity with Entra ID, specifically security best practices, hardening, and conditional access.
* Familiarity with Azure Policy – exemptions, initiatives, policy definitions, assignments, compliance reporting.
* Familiarity with Log Analytics Workspace, DCR, Diagnostic setting, and KQL queries.
* Experience with Microsoft Defender for Cloud best practices; ability to evaluate new Defender capabilities and assess impact of enabling/disabling plans.
* Experience automating enablement of Microsoft Defender for Cloud.
* Designing secure solutions in public or private clouds.
* Experience designing and supporting implementation of new security controls.
* Conducting risk assessments or threat modelling exercises on cloud systems.
* Understanding compliance frameworks such as Microsoft Cloud Security Benchmark, NIST, CIS, ISO 27001, PCI-DSS.
* Experience with Kubernetes and Docker security best practices for ACR, AKS, Azure Key Vault, Azure Storage, Container Apps and Container Instances.
* Exposure to Sentinel (SIEM) – reviewing alerts and fine-tuning connectors related to Azure services focusing on cyber threat activities.
* CI/CD experience with GitHub, GitHub Actions, Azure DevOps preferable; knowledge of Jenkins, ArgoCD.
* Proficiency with Bash, Terraform, ARM or Bicep.
* Strong documentation and communication abilities.
* Collaborative work with diverse colleagues.
* Tech enthusiast with passion for technology, staying abreast of latest advancements.
* Customer‑centric and pragmatic outlook.
* Strong delivery skills and proactive, independent, resilient approach.
#J-18808-Ljbffr