Azure Security Engineer

Geek Soft Consulting | Fixed Term Employment

Amsterdam, Netherlands

• Help design, build and continuously improve the clients online platform.
• Research, suggest and implement new technology solutions following best practices/standards.
• Take responsibility for the resiliency and availability of different products.
• Be a productive member of the team.

• 6+ years overall IT experience, with at least 3+ years dedicated to Azure/Cloud Security.
• Design, deploy, and maintain security controls across Azure subscriptions, resource groups, and enterprise workloads.
• Implement network security configurations using NSGs, Azure Firewall, Web Application Firewall (WAF), and DDoS protection.
• Configure identity and access management using Azure AD (Entra ), including Conditional Access, MFA, PIM, and RBAC.
• Manage secrets, SSL/TLS certificates, and cryptographic keys using Azure Key Vault.
• Monitor cloud infrastructure, run security assessments, perform log analysis (Azure Monitor/Log Analytics), and manage incident response via Microsoft Defender for Cloud and Sentinel.
• Enforce cloud governance and compliance by building and applying Azure Policies and security blueprints.
• Support Dev Sec Ops  initiatives by integrating security tools (SAST/DAST, IaC security scanning) into CI/CD pipelines.
• Assist in auditing and aligning cloud infrastructure with industry standards such as ISO 27001, SOC 2, NIST, GDPR, and HIPAA.
• Prepare comprehensive security architecture documentation, threat reports, and audit artifacts.
• Hands-on proficiency with Microsoft Defender for Cloud and Microsoft Sentinel.
• Deep technical knowledge of Azure AD (Entra ), Conditional Access, MFA, PIM, and RBAC.
• Practical experience managing NSGs, Azure Firewall, WAF, and VPN/Express Route security.
• Proficiency with Azure Key Vault management
• Experience with Azure Policy, Infrastructure as Code (IaC) security principles, and compliance frameworks
• Scripting experience using Power Shell, Python, or Bash.
• Familiarity with Terraform, ARM, or Bicep scanning, and integrating SAST/DAST into CI/CD pipelines.
• Hands-on experience with vulnerability scanning and mitigation strategies.
• Strong analytical, risk-aware, and continuous-improvement mindset.
• Ability to work independently and drive technical ownership across projects.
• Excellent communication skills for conveying security risks and complex concepts to both technical and non-technical stakeholders.

• Microsoft Certified:
  Azure Security Engineer Associate (AZ-500)
• Microsoft Certified:
  Identity and Access Administrator Associate (SC-300)
• Microsoft Certified:
  Cybersecurity Architect Expert (SC-100)
• Certified Information Systems Security Professional (CISSP)
• CompTIA Security+

Fixed Term Employment Contract

Work-Life Balance

Flexible Work Mode

• International, collaborative consulting culture with clear career development paths.
• Comprehensive Dutch benefits package emphasizing well-being, mobility, and career growth.