Azure Security Specialist

• Azure Policy
• Azure Monitor
• Azure Log Analytics
• Azure Resource Manager

Location: Gauteng

Positions Available: 5

Salary: Market-related

Employment type: 3 Year contract, hybrid

We are seeking experienced and technically proficient Azure Security Specialists to design, implement, manage and continuously improve security controls across Microsoft Azure cloud environments.

The successful candidates will be responsible for protecting cloud infrastructure, applications, identities, networks and sensitive data against cybersecurity threats, vulnerabilities and unauthorised access.

This role requires strong hands‑on expertise in Microsoft Azure security technologies, cloud security architecture, identity and access management, threat protection, security monitoring and regulatory compliance.

The ideal candidates will have proven experience securing enterprise Microsoft Azure environments, implementing Microsoft security solutions and supporting cloud security operations across hybrid and multi-cloud infrastructures.

• Design, implement, configure and maintain security controls across Microsoft Azure environments.
• Assess Azure infrastructure, services and workloads to identify security risks and vulnerabilities.
• Implement Azure security best practices and secure configuration standards.
• Configure and maintain Microsoft Defender for Cloud to monitor and strengthen cloud security posture.
• Implement security policies, governance controls and compliance requirements across Azure subscriptions.
• Monitor Azure security recommendations and coordinate remediation of identified vulnerabilities.
• Support secure deployment and management of Azure virtual machines, storage accounts, databases and cloud services.
• Conduct regular Azure security assessments and configuration reviews.
• Assist with cloud security architecture design and infrastructure modernisation initiatives.

• Implement and manage Microsoft Entra  controls.
• Configure role-based access control (RBAC) and least-privilege access policies.
• Implement multi-factor authentication (MFA), Conditional Access and Privileged Identity Management (PIM).
• Secure privileged accounts, service principals, managed identities and enterprise applications.
• Monitor suspicious sign-in activities and identity-related security threats.
• Support identity governance, access reviews and privileged access management.
• Integrate Azure identity security controls with on-premises Active Directory and hybrid identity environments.
• Implement Zero Trust identity and access security principles.

• Configure and manage Azure Network Security Groups (NSGs) and Application Security Groups (ASGs).
• Implement and maintain Azure Firewall, Web Application Firewall (WAF) and network security policies.
• Secure Azure Virtual Networks, subnets, private endpoints and network connectivity.
• Configure secure connectivity through VPN gateways, Express Route and private networking solutions.
• Implement network segmentation and traffic filtering controls.
• Monitor network security events and investigate suspicious traffic patterns.
• Support secure hybrid connectivity between on-premises and Azure environments.
• Assist with protecting Azure workloads against network-based cyber threats.

• Implement, configure and maintain Microsoft Defender for Cloud.
• Support Microsoft Sentinel security monitoring, threat detection and incident investigation.
• Configure security alerts, monitoring rules and automated response workflows.
• Analyse Azure security logs, diagnostic data and threat intelligence.
• Investigate security incidents affecting Azure resources and cloud identities.
• Coordinate…