Security Engineer - Cloud Infrastructure

Responsibilities: - Design and implement Azure cloud-based infrastructure, including using tools for infrastructure as code(IaC) and automation to meet technical, security and business needs. - Design and implement Azure cloud environments (tenant, subscription, VM, storage account, databases, networking, firewalling) optimized for AI/ML workloads. - Manage and maintain Azure Networking, Azure firewalls/VPN and associated policies/rules, Web Application Firewall, Application Gateway, Front Door, VNET peering, ensuring security, availability, scalability, and performance. - Secure Azure Kubernetes clusters, containers, and images. - Establish and enforce Azure security policies, manage access controls, and ensure the infrastructure complies with relevant regulations. - Automate tenant and infrastructure provisioning, deployments, and other routine tasks to increase efficiency. - Monitor Azure cloud resources, analyze performance, and troubleshoot issues as they arise. - Perform incident troubleshoot and problem resolution for office network, cloud infrastructure, and own postmortems. - Work with Engineering teams and external teams, gather requirements, develop and integrate cloud solutions and support business needs. - Actively participate in architecture, code reviews, presentations, share learns and best practices to enable flawless deployment and quality operations. - Evaluate and implement new security features/services/products to secure Truveta Azure infrastructure. - Support innovation and cost management by developing new ideas for Azure cloud infrastructure and related tools. - Interact with compliance team to deliver compliance certificates and remediate gaps during compliance finding and controls. Qualifications: - A minimum bachelor's in computer science, Software Engineering, Electrical or Electronics Engineering, Information Systems, or equivalent - 5+ years’ experience in public cloud networking & security design, implementation & support - Experience of TCP/IP IPv4/v6, office network (Routing/Switching/WAN, Wi-Fi & Security) management - 3+ years automation experience in Azure Cloud Networking / Azure DevOps or GitHub CI/CD pipelines in any of the following: Python, PowerShell, Terraform, Bicep, YAML template - 3+ years network security practices in on-premises and/or cloud environment - Experience managing and supporting Windows Desktop OS, MacOS, managed endpoint administration at scale across an enterprise sized environment - Understanding the Windows Desktop/Mac OS packaging, scripting, and automated deployment tools, such as Microsoft Intune and Jamf. - Ability to participate in on-call rotation. Preferred qualifications: - Experience in implementation & securing platforms/services in one or more public clouds (Azure, AWS, GCP) - Self-starter with proven ability to develop creative solutions that enable customers and cost efficiency - Interest and ability to research new and emerging technologies to better solve cloud infrastructure problems or improve security posture - Certifications in Cloud/Network/Security (such as Azure AZ500, AZ700, Cisco CCNA/CCNP, Fortinet NSE 3-6, Palo Alto PCNSE, etc.)