Senior Azure Infrastructure & Security Engineer

Kforce has a client in Phoenix, AZ that is seeking a Senior Azure Infrastructure & Security Engineer. Summary: Work covers architecture, implementation, and tracking the assigned tasks to closure. During the SOC 2 audit the engineer will also gather evidence: when the auditor asks us to show X, we need someone who already knows where in Azure to go and can pull it quickly. Expect work across Defender for Cloud and Sentinel, Entra ID privileged access, network architecture (hub-spoke, Private Endpoints, Application Gateway/WAF, Traffic Manager), Azure Policy and governance, and producing written evidence for auditors as tasks are completed. This is not an advisory role; the engineer does the work.

• 7+ years infrastructure engineering with 4+ years hands-on in Azure at a senior level; has personally done this kind of remediation before, not just designed it
• Azure Traffic Manager: has designed and implemented Traffic Manager profiles for multi-region failover in production
• Experience with Microsoft Defender for Cloud, Microsoft Sentinel, and Entra ID (PIM, Conditional Access, service principal hygiene)
• Infrastructure as Code with Bicep or Terraform; Comfortable in Azure CLI/PowerShell
• AZ-305 (Azure Solutions Architect Expert) or AZ-500 (Azure Security Engineer) experience
• Knows the Azure portal, Entra ID, Defender, Sentinel, and Azure Monitor/Activity Log well enough to locate and export audit evidence (configs, logs, screenshots, reports) on request
• Self-directed; Takes assigned tasks, tracks them in JIRA to closure, and communicates clearly with a product owner and a software manager

• Azure networking depth (VNets and peering, hub-spoke, Private Link, Application Gateway/WAF, NSGs)
• SOC 2 or financial-services vendor assessment experience
• SQL Server on Azure VMs/Azure SQL
• .NET/App Service familiarity
• Cloudflare DNS in front of Azure experience
• Azure Well-Architected Framework reviews