Senior Cloud Platform Security Engineer

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Cloud Platform Security Engineer based in United States. As a Senior Cloud Platform Security Engineer, you will be the primary technical owner of a large-scale Azure platform, cloud security controls, and infrastructure operations. You’ll play a hands-on role in keeping cloud environments secure, reliable, scalable, compliant, and operationally efficient. The position spans cloud architecture, identity and access management, security operations, infrastructure automation, compliance, disaster recovery, and cost optimization. You’ll also help enable secure data, AI, and agent-based workloads across a growing technology environment. Working as a senior individual contributor, you’ll collaborate closely with Technology, Engineering, Data & AI, Compliance, business stakeholders, auditors, vendors, and external partners. This is an opportunity to shape cloud standards, automate critical processes, strengthen security posture, and directly influence the resilience of an evolving technology platform. Accountabilities: - Own the Azure platform: Design, configure, operate, and continuously improve Azure subscriptions, management groups, networking, compute, storage, platform services, and shared infrastructure while establishing standards for environment separation, naming, tagging, approved services, secure configurations, and change management.

- Strengthen cloud identity and security: Design and maintain Microsoft Entra ID, MFA, Conditional Access, PIM, RBAC, managed identities, access reviews, emergency-access procedures, least-privilege controls, separation of duties, network segmentation, private connectivity, firewalls, DNS security, secure ingress and egress, and secrets management. - Improve security operations and incident readiness: Operate cloud-security posture management, vulnerability remediation, configuration monitoring, logging, detection, and threat-response capabilities while developing actionable alerts, dashboards, escalation paths, and runbooks for security incidents. - Build reliable infrastructure through automation: Develop and maintain infrastructure using Terraform, Bicep, ARM templates, or comparable technologies, establishing reusable modules, peer-review practices, automated testing, deployment controls, and configuration-drift management. - Support compliance and technology risk: Translate requirements such as the GLBA Safeguards Rule, SOC 2, NIST Cybersecurity Framework, customer commitments, and internal policies into practical technical controls, documentation, evidence, and measurable outcomes while supporting audits and remediation activities. - Enable secure Data & AI operations: Partner with Data & AI teams to implement data governance and security controls covering discovery, classification, lineage, retention, DLP, access governance, and approved AI services, while securing AI, machine-learning, LLM, and agent-based workloads through appropriate data boundaries, privileged-action controls, logging, monitoring, human approval, and incident-response measures. - Drive reliability, recovery, and operational excellence: Maintain at least 99. 9% availability for critical platform services within your operational control, support agreed Sev-1/2 response expectations, validate disaster recovery at least twice annually, and ensure critical services have effective monitoring, alerting, escalation paths, and documented recovery procedures. - Improve infrastructure-as-code adoption: Drive toward at least 95% of production infrastructure being managed through infrastructure as code while reducing configuration drift and improving deployment consistency.