Azure Security Engineer & Operator; Hands-On​/L3

Requirements:

Technical Skills

• Deep hands‑on expertise in Microsoft Azure security services (Azure AD/Entra , Azure Defender, Key Vault, Azure Policy, Azure Firewall, etc.). Including implementation, configuration, and tuning of security controls.
• Proven hands‑on experience with Azure Administration and Cloud Operations. Including troubleshooting, incident investigation, and operational security improvements.
• Strong knowledge of network security, identity & access management (IAM/RBAC), encryption (data in transit & at rest), and application security.
• Experience applying Dev Sec Ops  principles and building security automation (Power Shell, Azure CLI, Logic Apps, etc.).
• Understanding of compliance frameworks (ISO 27001, C5, NIST, GDPR).

Soft Skills

• Strong consulting and communication skills, with the ability to explain technical security concepts and incident findings to both technical and non‑technical stakeholders.
• Ability to manage multiple projects simultaneously in a fast‑paced environment.
• Analytical thinking with problem‑solving mindset.

Experience

• Proven experience in IT Security with at least 3 years focusing on Azure Security Operations, preferably in L2/L3 security engineering or incident response roles.
• Proven track record in designing and implementing cloud security controls for enterprise customers.
• Experience in multi‑tenant cloud hosting environments is a plus.

Must-Have Certifications

• Azure Administrator Associate (AZ-104)

• Azure Security Engineer Associate
• Microsoft Cybersecurity Architect Expert
• ITIL Foundation

Manage Now is a leading managed service provider in Germany and offers its customers IT infrastructures, application management, hybrid cloud solutions and digital workplace solutions. At Manage Now, we’re embarking on an exciting journey to establish a cutting‑edge Delivery Center in Romania. We are moving beyond traditional offshoring to create a dedicated center that promises flexibility, superior quality, and excellent growth potential.

We are seeking an experienced Azure Security Engineer & Operator to join our international Cloud Hosting Provider team. The role is responsible for defining and implementing security requirements for Azure operations, ensuring continuous system monitoring, and enabling advanced security analytics via Microsoft Sentinel or other SIEM platforms.
This is a strongly hands‑on engineering role focused on implementation, investigation, and continuous improvement of security controls rather than monitoring-only or ticket coordination activities.

You will work closely with Azure operations teams, customers, and internal stakeholders to design, implement, and maintain robust security frameworks that meet both industry best practices and customer‑specific compliance needs.

• Define and implement Azure-specific security requirements for infrastructure, applications, and services.
• Maintain hybrid identity integrations with Microsoft Entra  (Azure AD) and Azure AD Connect.
• Deploy, configure, and maintain Azure Security Services. Automate operational and security tasks with Power Shell and Azure CLI.
• Ensure compliance with ISO 27001, C5 and other relevant security standards.

• Configure, implement, and optimize Microsoft Sentinel, including development and tuning of detection rules and analytics.
• Create and manage dashboards, alerts, and automated remediation workflows.
• Investigate and resolve operational and security incidents, acting as technical escalation point for complex L3 cases.
• Collaborate with SOC teams to investigate and remediate security incidents.

• Serve as the security advisor for Azure-based customer projects.
• Translate customer‑specific security and compliance requirements into actionable operational tasks.
• Support proof‑of‑concept (PoC) and security assessment projects.

• Act as the interface between Azure operations teams, customer representatives, and security governance.
• Contribute to the definition of standard operating procedures (SOPs) and runbooks.
• Provide training and knowledge transfer to internal teams.