Azure Security Engineer- Remote (Anywhere in the U.S.)

GuidePoint Security is looking for a skilled Azure Security Engineer to support its Microsoft Cloud Security Practice. The engineer will design, implement, and secure customers' Azure infrastructure.

Responsibilities:

• Design Azure cloud solutions with a secure-by-design approach
• Collaborate with customer IT teams to implement and secure cloud resources
• Develop and implement scalable and resilient cloud architecture solutions within Azure Commercial or Azure Gov Cloud environments
• Develop and implement migration strategies for local on-premises hosted environments to Azure cloud tenants
• Work with customers to secure Microsoft Entra ID
• Create and implement migration plans for each Azure infrastructure service, system, and/or application that will be deployed to Azure as part of a migration project
• Create architectural and data flow diagrams for Azure environments
• Develop and deploy infrastructure as code (IaC) using tools like Terraform, Azure Resource Manager (ARM) templates, Bicep, and PowerShell
• Ensure systems, applications, and data meet high availability design principles and/or are replicated to meet organizational requirements for disaster and business recovery
• Analyze and ensure that proper monitoring and alerting systems are in place for systems, services, and applications in customer Azure environments
• Evaluate and recommend Azure services based on business requirements and industry best practices
• Collaborate with software developers, system administrators, and other stakeholders to integrate Azure solutions into either new or existing systems and applications
• Ensure seamless interoperability between on-premises and cloud environments
• Implement and enforce security requirements to protect Azure-based systems and data
• Serve as the subject matter expert (SME) for Azure AI Foundry, architecting, deploying, and securing generative AI and machine learning workloads
• Design and implement enterprise-grade Retrieval-Augmented Generation (RAG) and grounding solutions using Azure AI Foundry, Azure AI Search, and integrated customer data sources
• Establish Responsible AI, content safety, evaluation, and guardrail practices for AI workloads to ensure alignment with governance, data protection, and regulatory requirements
• Secure Azure AI Foundry workloads through network isolation (private endpoints), managed identities, customer-managed keys, and least-privilege access controls
• Serve as the subject matter expert (SME) for Azure API Management (APIM), designing and operating secure, scalable API gateways, products, versions, and revisions across Azure Commercial and Azure Gov Cloud environments
• Author and manage APIM policies for authentication and authorization (OAuth 2.0, JWT validation, mutual TLS), rate limiting, caching, request/response transformation, and backend routing
• Design and implement APIM as a GenAI gateway in front of Azure AI Foundry and Azure OpenAI endpoints
• Integrate APIM with Microsoft Entra ID, Application Gateway / Web Application Firewall (WAF), private networking, and self-hosted gateways to enforce Zero Trust and secure hybrid connectivity
• Establish API governance, lifecycle management, developer portal experiences, and end-to-end observability (logging, metrics, and diagnostics) for customer API estates
• Define and maintain Azure Governance policies including Subscription Management, Cost Management, Security, Resource Consistency, Identity Baseline, Deployment Acceleration, etc.
• Ensure compliance of architectural and engineering policies, standards, and procedures
• Stay current with emerging cloud technologies and trends and advise on the adoption of new Azure features and services
• Work closely with development teams to support DevOps practices and implement continuous integration and continuous deployment (CI/CD) pipelines
• Lead technical discussions and presentations for internal teams as well as customers
• Recommend strategies to streamline Azure native technologies for effectiveness and efficiency, considering client needs
• Consistently produce work product in conformance with GuidePoint Security standards
• Approach problem-solving collectively with senior staff and internal and external clients to achieve a mutually beneficial result
• Participate in the development of the Microsoft Cloud team's strategic plans, training materials, and tools
• Effectively train and mentor staff on new and emerging Azure-specific technologies
• Demonstrate the ability to author professional documentation that serves as customer deliverables and internal standard operating procedures and delivery playbooks
• Perform other duties and responsibilities as required