Azure Cloud Security Senior Consultant (m/w/d)

Job description

It all starts with the mission: NVISO is here to protect European society from potentially devastating cyber attacks! This means we offer cyber security services to private and governmental organizations to help them better prepare for, prevent, detect and respond to cyber security incidents. All of this is built on four fundamental values that define who we are: We are Proud, We Break Barriers, We Care and No BS! Tasks You will be joining NVISO’s Cloud Security team as an Azure Cloud Security Senior Consultant (m/w/d) . The ideal candidate has knowledge in Azure cloud services, with a particular focus on security. As part of a team of security consultants and engineers, you will collaborate closely with other colleagues and our customers to understand their business and security requirements, assess their current security posture, and develop tailored cloud security solutions for them. Responsibilities We are aware that cloud security features and products are abundant; the following list apply to the ones of interest to us. If you have experience or feel capable of conducting only some of them (not the full list), please reach out! Strategy and Governance Assess cloud security posture against frameworks (e.g., CIS, NIST, ISO 27001) and Microsoft benchmarks (Azure Security Benchmark, M365 baseline). Define cloud security strategy, target operating model, and roadmap aligned to business and regulatory requirements. Develop and maintain cloud security policies, standards, and guardrails for Azure and M365. Identity and Access Management (IAM) Design and implement Microsoft Entra tenant architecture, including identity lifecycle, conditional access, and MFA. Implement and tune Conditional Access policies, risk-based access, and device compliance integrations with Intune/Endpoint Manager. Deploy and operate Privileged Access Management (PAM), including PIM for Azure and M365 roles, just-in-time access, and break-glass accounts. Integrate on-premises identities (hybrid) with secure synchronization and hardening of federation where used. Platform Security and Hardening (Azure) Build secure landing zones using Azure Policy, Blueprints/Bicep/Terraform, and management groups. Enforce baseline controls for networking (NSGs, Azure Firewall, Private Link), compute (secure images, patching), and storage (encryption, private endpoints). Configure Azure Key Vault for sec…