Azure data engineer

We are looking for an Azure Data Engineer to join a 12-month contract position based in Phoenix, Arizona. In this role, you will be responsible for reviewing, implementing, and maintaining security controls across Microsoft Azure environments, with a focus on cloud security operations and infrastructure-as-code deployment.

Responsibilities

• Review and assess existing and new Azure services, resources, architectures, and configurations for security risks, compliance requirements, vulnerabilities, and misconfigurations.
• Develop, test, deploy, and maintain Azure Policy definitions, initiatives, assignments, guardrails, exemptions, and approved allow policies; evaluate policy impacts and troubleshoot deployment or operational issues.
• Develop and maintain Terraform modules and security controls for Azure security and policy deployment.
• Work with JSON-based configurations and templates supporting Azure service certifications and security requirements.
• Use Git and GitHub to manage infrastructure-as-code and security policy changes, including validating GitHub Actions workflows and pull requests.
• Monitor Azure environments for security findings, vulnerabilities, misconfigurations, and policy violations; recommend remediation actions and partner with application and engineering teams to track findings through resolution.
• Support cloud security operations, incident investigations, and troubleshooting, collaborating with cloud engineering, architecture, risk, compliance, cybersecurity, and other teams as needed.
• Apply cloud security principles across a multi-cloud environment, with Azure as the primary focus.
• Maintain clear documentation for security policies, standards, service certifications, exceptions, guardrails, and operational procedures.

Qualifications

• Required

• Strong knowledge of Microsoft Azure, including Azure security, networking, identity, resource management, and security best practices.

• Hands-on experience with Azure Policy, including policy definitions, initiatives, assignments, exemptions, compliance evaluation, and remediation.

• Experience securing and supporting enterprise-scale Azure environments.

• Strong understanding of cloud security, risk, governance, and compliance concepts.

• Hands-on experience with Terraform for infrastructure-as-code, security controls, and policy deployment.

• Familiarity with JSON for cloud configurations, policy definitions, and templates.

• Familiarity with Git and GitHub, including source control, pull requests, and GitHub Actions.

• Ability to evaluate security requirements, troubleshoot policy and configuration issues, and collaborate effectively with application, engineering, architecture, and security teams.

• Preferred

• Working knowledge or hands-on security experience with Amazon Web Services (AWS), Google Cloud Platform (GCP), and/or Oracle Cloud Infrastructure (OCI).

• Understanding of how common cloud security concepts-such as IAM, network security, policy enforcement, encryption, logging/monitoring, and security posture management-are implemented across Azure, AWS, GCP, and OCI.

• HashiCorp Certified: Terraform Associate certification.

• Microsoft Certified: Azure Fundamentals (AZ-900) certification.

• Additional AWS, GCP, or Oracle Cloud certifications.