What are the responsibilities and job description for the Azure Security analyst position at Northern Base?
Role: Azure Security Analyst
Location: Phoenix, AZ (Onsite)
Employment Type: Full-Time
Experience: 5–12 years
Must-Have Qualifications:
- Strong knowledge of Microsoft Azure, including Azure security, networking, identity, resource management, and security best practices
- Hands-on experience with Azure Policy, including policy definitions, initiatives, assignments, exemptions, compliance evaluation, and remediation
- Experience securing and supporting enterprise-scale Azure environments
- Strong understanding of cloud security, risk, governance, and compliance concepts
- Hands-on experience with Terraform for infrastructure-as-code, security controls, and policy deployment
- Familiarity with JSON for cloud configurations, policy definitions, templates, and service certification requirements
- Familiarity with Git and GitHub, including source control, pull requests, and GitHub Actions
- Ability to evaluate security requirements, troubleshoot policy and configuration issues, and collaborate with application, engineering, architecture, and security teams
- Experience reviewing Azure services, resources, architectures, and configurations for security risks, compliance requirements, vulnerabilities, and misconfigurations
- Experience developing, testing, deploying, and maintaining Azure Policy definitions, initiatives, assignments, guardrails, exemptions, and approved allow policies
- Experience developing and maintaining Terraform modules and security controls, with Terraform as the primary IaC tool for Azure security and policy deployment
- Experience monitoring Azure environments for security findings, vulnerabilities, misconfigurations, and policy violations
- Experience supporting cloud security operations, incident investigations, and troubleshooting
- Understanding of cloud security concepts including IAM, network security, policy enforcement, encryption, logging/monitoring, and security posture management
- Strong documentation, analytical, troubleshooting, and communication skills
- Bachelor's degree in Computer Science or a related field
Preferred Qualifications:
- Working knowledge or hands-on security experience with AWS, GCP, and/or OCI
- Understanding of how cloud security concepts are implemented across Azure, AWS, GCP, and OCI
- Experience with GitHub Actions workflows and infrastructure-as-code pull request validation
- Experience working with risk, compliance, cybersecurity, cloud engineering, architecture, and security teams
Key Responsibilities:
- Review and assess Azure services, resources, architectures, and configurations for security risks and compliance
- Develop and maintain Azure Policy definitions, initiatives, assignments, guardrails, exemptions, and allow policies
- Develop and maintain Terraform modules and security controls for Azure security and policy deployment
- Manage JSON-based configurations and templates supporting Azure security requirements
- Manage infrastructure-as-code and security policy changes using Git and GitHub
- Monitor Azure environments and track security findings through resolution
- Support cloud security operations and incident investigations
- Apply cloud security principles across multi-cloud environments
- Maintain documentation for security policies, standards, service certifications, exceptions, guardrails, and operational procedures