Role description
As a Cybersecurity Principal Cloud Security Engineer, you will be responsible to design, implement, and own the security posture of Azure Tenant including: - Own Azure tenant security posture, including subscriptions, management groups, landing zones, and cloud resource lifecycle. - Design and enforce Azure guardrails using Azure Policy and Policy Initiatives aligned to enterprise standards. - Define and govern RBAC models, PIM, managed identities, and service principals across tenants. - Implement and operationalize policy controls for tagging, regions, SKUs, encryption, and data residency. - Lead deployment and operations of Microsoft Defender for Cloud (CSPM/CWPP) across IaaS, PaaS, AKS, and containers. - Own SIEM data connectors, analytics rules, UEBA, threat intelligence enrichment, and automation playbooks. - Drive detection engineering, threat hunting enablement, and MTTR reduction in partnership with SOC teams. - Lead implementation and day‑to‑day operations of enterprise security platforms: CrowdStrike, Proofpoint, Rapid7, Wiz - Establish and govern secure Azure network architectures, including hub‑spoke/vWAN, Private Endpoints, Firewall, WAF, DDoS, NSGs, and ASGs. - Implement Policy as Code and Security Baselines as Code using GitOps and IaC practices. - Embed cloud and security controls into CI/CD pipelines to enable shift‑left and continuous compliance. - Maintain the enterprise cloud risk register and report security KPIs, trends, and risks to leadership. - Map and operationalize security controls against CIS, ISO 27001, SOC 2, HIPAA/HITRUST, enabling continuous evidence collection. - Lead incident response runbooks, purple‑team control validation, and post‑incident remediation for cloud threats. - Partner cross‑functionally with platform, infra, app, risk, compliance, and audit teams to ensure secure cloud adoption at scale. - (Nice to Have) Experience with Application Security practices and tools (e.g., Checkmarx for SAST/DAST/SCA) and integrating AppSec signals into cloud risk and SIEM workflows. What would your day look like? - Partner daily with Engineering, Network, and Platform teams to design, review, and operate a secure, compliant Azure cloud and data platform. - Act as a security authority on architecture and design reviews, shaping approved Azure, network, identity, and application patterns. - Oversee SIEM operations in partnership with Global Cyber SOC teams to gather threat visibility, reviewing detections, tuning rules, and guiding response for high‑risk security events. - Collaborate with security vendors and partners (CrowdStrike, Proofpoint, Rapid7, Wiz) on platform health, detections, and remediation outcomes. - Define and refine security SOPs, mentor L1/L2 teams, and ensure consistent triage, escalation, and incident handling. - Drive delivery of security initiatives and improvements through sprints, balancing hands‑on execution with architectural direction and stakeholder alignment. Who are we looking for? - 10+ years of cybersecurity experience with 5+ years focused on Azure cloud security architecture. - Deep hands‑on experience designing and operating Azure identity and access security, including Azure RBAC, Microsoft Entra ID, Conditional Access, PIM/PIM for Groups, and Identity Governance. - Strong operational experience with enterprise security platforms, including CrowdStrike, Proofpoint, Rapid7, Wiz, and Microsoft Defender for Cloud. - Proven expertise in SIEM/SOAR engineering, with hands‑on experience building and operating Microsoft Sentinel analytics, UEBA, automation playbooks, and threat integrations. - Demonstrated success delivering Azure Landing Zones aligned to Microsoft Cloud Adoption Framework (CAF) and Well‑Architected Framework security principles. - Strong understanding of identity federation and integrations, including SAML, OAuth2/OIDC, SCIM provisioning, and B2B scenarios. - Solid experience securing network and platform controls, including Azure Firewall, WAF, Private Endpoints, and Zero Trust architectures. - Automation‑first mindset with hands‑on skills in PowerShell, Python, Terraform, Bicep, Git, YAML, and CI/CD driven security enforcement. - (Nice to Have) Experience in Application Security, including SAST, DAST, SCA (e.g., Checkmarx), and embedding AppSec controls into CI/CD pipelines.
Skills
Azure Kubernetes Service, Azure Firewall, AWS Landing Zone, Azure Security, Checkmarx, HIPAA, Azure Managed Identity, Microsoft Entra ID, HITRUST
About UST
UST is a global digital transformation solutions provider. For more than 20 years, UST has worked side by side with the world’s best companies to make a real impact through transformation. Powered by technology, inspired by people and led by purpose, UST partners with their clients from design to operation. With deep domain expertise and a future-proof philosophy, UST embeds innovation and agility into their clients’ organizations. With over 30,000 employees in 30 countries, UST builds for boundless impact—touching billions of lives in the process.
