Cloud Security Engineer - Azure

1d1 day ago

Avnet

Tempe, US · Full-time · $130,000 – $170,000

About this role

At Avnet, the Cloud Security Engineer develops, maintains, and enhances secure cloud platform solutions in support of Business Cloud Services delivery. The role performs hands-on security operations and automates repeatable security and governance processes. It coordinates remediation across Azure, GitHub Enterprise, and BCS-managed applications.

Daily work includes monitoring Microsoft Defender for Cloud findings, triaging issues, and validating remediation actions. The engineer implements Microsoft Entra ID configurations, executes RBAC assignments, and supports privileged identity management processes. Access reviews and compliance activities are validated with supporting evidence.

Collaboration occurs directly with BCS developers, architects, and engineering teams to resolve vulnerabilities. Security controls are supported within GitHub Enterprise, including repository practices and CI/CD pipeline configuration. Vulnerabilities are tracked using tools such as Legit Security and ArmorCode.

Automation of repeatable tasks occurs through scripting and reusable templates for identity, access, and remediation. Shift-left security practices are advanced by providing developer-friendly guidance that helps teams prioritize findings efficiently.

Requirements

Hands-on experience operating security controls for Azure resources and cloud platform services
Proficiency with Microsoft Defender for Cloud and security findings triage workflows
Strong working knowledge of Microsoft Entra ID, RBAC, and privileged identity management
Experience implementing security controls and access management in GitHub Enterprise
Familiarity with CI/CD pipeline security and tools such as GitHub Advanced Security
Ability to automate security and governance processes through scripting and reusable templates

Responsibilities

Support the implementation, operation, and continuous improvement of security controls for BCS-managed Azure resources
Monitor, review, triage, and coordinate remediation of security findings from Microsoft Defender for Cloud
Implement and maintain Microsoft Entra ID security groups, app registrations, service principals, and managed identities
Execute RBAC assignments and access changes according to least privilege principles
Support Microsoft Entra Privileged Identity Management role assignments, activations, and reviews
Assist with CI/CD security practices using GitHub Advanced Security and secure pipeline configuration
Triage and track application and software supply chain security findings using Legit Security and ArmorCode
Automate repeatable security, governance, access, and remediation tasks using scripting and templates