Azure Security Specialist

Location: Centurion, Gauteng (provisional - to be confirmed)
Positions Available: 5
Salary: Market-related
Employment Type: To be confirmed

We are seeking experienced and technically proficient Azure Security Specialists to design, implement, manage and continuously improve security controls across Microsoft Azure cloud environments.

The successful candidates will be responsible for protecting cloud infrastructure, applications, identities, networks and sensitive data against cybersecurity threats, vulnerabilities and unauthorised access.

This role requires strong hands-on expertise in Microsoft Azure security technologies, cloud security architecture, identity and access management, threat protection, security monitoring and regulatory compliance.

The ideal candidates will have proven experience securing enterprise Microsoft Azure environments, implementing Microsoft security solutions and supporting cloud security operations across hybrid and multi-cloud infrastructures.

Azure Cloud Security Management

• Design, implement, configure and maintain security controls across Microsoft Azure environments.
• Assess Azure infrastructure, services and workloads to identify security risks and vulnerabilities.
• Implement Azure security best practices and secure configuration standards.
• Configure and maintain Microsoft Defender for Cloud to monitor and strengthen cloud security posture.
• Implement security policies, governance controls and compliance requirements across Azure subscriptions.
• Monitor Azure security recommendations and coordinate remediation of identified vulnerabilities.
• Support secure deployment and management of Azure virtual machines, storage accounts, databases and cloud services.
• Conduct regular Azure security assessments and configuration reviews.
• Assist with cloud security architecture design and infrastructure modernisation initiatives.

Identity and Access Security

• Implement and manage Microsoft Entra  controls.
• Configure role-based access control (RBAC) and least-privilege access policies.
• Implement multi-factor authentication (MFA), Conditional Access and Privileged Identity Management (PIM).
• Secure privileged accounts, service principals, managed identities and enterprise applications.
• Monitor suspicious sign-in activities and identity-related security threats.
• Support identity governance, access reviews and privileged access management.
• Integrate Azure identity security controls with on-premises Active Directory and hybrid identity environments.
• Implement Zero Trust identity and access security principles.

Azure Network and Infrastructure Security

• Configure and manage Azure Network Security Groups (NSGs) and Application Security Groups (ASGs).
• Implement and maintain Azure Firewall, Web Application Firewall (WAF) and network security policies.
• Secure Azure Virtual Networks, subnets, private endpoints and network connectivity.
• Configure secure connectivity through VPN gateways, Express Route and private networking solutions.
• Implement network segmentation and traffic filtering controls.
• Monitor network security events and investigate suspicious traffic patterns.
• Support secure hybrid connectivity between on-premises and Azure environments.
• Assist with protecting Azure workloads against network-based cyber threats.

Security Monitoring and Threat Protection

• Implement, configure and maintain Microsoft Defender for Cloud.
• Support Microsoft Sentinel security monitoring, threat detection and incident investigation.
• Configure security alerts, monitoring rules and automated response workflows.
• Analyse Azure security logs, diagnostic data and threat intelligence.
• Investigate security incidents affecting Azure resources and cloud identities.
• Coordinate incident response and remediation activities with cybersecurity and infrastructure teams.
• Implement and maintain Azure Monitor, Log Analytics and security reporting solutions.
• Support integration with Security Information and Event Management (SIEM) and Security Orchestration, Automation and Response (SOAR) platforms.

Data Protection and Cloud Compliance

• Implement encryption and data protection controls for Azure workloads.
• Configure and manage Azure Key Vault, secrets, certificates and cryptographic keys.
• Secure Azure Storage, SQL databases and other cloud data services.
• Implement secure access controls for sensitive information and cloud applications.
• Support data classification, retention and information protection requirements.
• Ensure Azure security…