JOB SUMMARY

We are seeking a highly skilled Azure Cloud & API Security Engineer to design, implement, secure, and support enterprise cloud and API ecosystems. The ideal candidate will possess strong hands-on experience in Microsoft Azure cloud environments, API security architecture, identity and access management, and cloud-native security controls. This role requires a technical contributor who can actively build, configure, troubleshoot, and optimize secure cloud platforms and APIs while collaborating with infrastructure, application development, and data teams. Experience working with Snowflake data platforms and data lake environments is highly desirable.

KEY RESPONSIBILITIES
• Design, implement, and maintain secure cloud solutions within Microsoft Azure environments.
• Develop and enforce API security standards, governance frameworks, and best practices.
• Secure REST APIs and cloud-native applications through authentication, authorization, encryption, and threat protection mechanisms.
• Assess, design, and implement API gateway and API management solutions.
• Configure and manage identity and access management solutions using Azure Active Directory (Microsoft Entra ID).
• Implement role-based access controls (RBAC), privileged access management, and least-privilege security models.
• Perform cloud security reviews, risk assessments, and vulnerability remediation activities.
• Monitor cloud and API environments for security threats, compliance issues, and performance concerns.
• Collaborate with application development teams to embed security controls throughout the software development lifecycle.
• Develop and support security solutions for integrations involving cloud applications, APIs, and enterprise data platforms.
• Implement logging, monitoring, auditing, and alerting solutions for cloud workloads and APIs.
• Support incident response, root cause analysis, and security remediation efforts.
• Work closely with Snowflake and data engineering teams to secure data access, integrations, and cloud-based data platforms.
• Document security architectures, standards, operational procedures, and implementation guidelines.
• Participate in cloud modernization, migration, and digital transformation initiatives.

REQUIRED QUALIFICATIONS
• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field.
• Strong hands-on experience with Microsoft Azure cloud services and infrastructure.
• Proven expertise in API Security Architecture and Implementation.
• Experience securing REST APIs and enterprise integration platforms.
• Deep understanding of:

- OAuth 2.0

- OpenID Connect (OIDC)

- JWT Tokens

- API Authentication & Authorization

- API Gateway Security

- Zero Trust Security Principles
• Experience with Azure security services and controls.
• Strong knowledge of:

- Microsoft Entra ID (Azure Active Directory)

- Identity and Access Management (IAM)

- RBAC

- Conditional Access

- Privileged Access Management
• Experience implementing cloud security monitoring and auditing solutions.
• Understanding of network security concepts including:

- HTTPS/TLS

- Firewalls

- WAF

- DNS Security

- Private Networking
• Knowledge of DevSecOps and secure software development practices.
• Strong troubleshooting, analytical, and problem-solving skills.
• Excellent communication and stakeholder collaboration skills.
• Must be a hands-on engineer actively involved in design, implementation, and support activities.

PREFERRED QUALIFICATIONS
• Experience working with Snowflake Data Cloud and Snowflake Data Lake environments.
• Experience securing enterprise data platforms and cloud data architectures.
• Experience with Azure API Management (APIM).
• Experience with cloud-native security tools and monitoring platforms.
• Familiarity with data governance, data security, and compliance frameworks.
• Experience with Infrastructure as Code (Terraform, ARM Templates, Bicep).
• Experience supporting enterprise-scale cloud transformation programs.
• Knowledge of AWS cloud security concepts.

CERTIFICATIONS
• Microsoft Certified: Azure Security Engineer Associate (Preferred)
• Microsoft Certified: Azure Administrator Associate (Preferred)
• Microsoft Certified: Azure Solutions Architect Expert (Preferred)
• Certified Information Systems Security Professional (CISSP) (Preferred)
• Certified Cloud Security Professional (CCSP) (Preferred)
• API Security Certification (Preferred)