Responsibilities:

• Azure Security Architecture
• Develop end-to-end security models for Azure (IaaS, PaaS, SaaS)
• Design secure landing zones, network segmentation, and identity/access management (Azure AD, RBAC, Privileged Identity Management)
• Implement Azure-native security controls: Defender for Cloud, Sentinel, Key Vault, managed identities, encryption-at-rest/in-transit
• Oversee secure integration of Azure services (Data Lake, Synapse, Databricks, Cosmos DB, API Management)

• Data Fabric Security
• Define security patterns for distributed data platforms (Data Fabric, Data Mesh, MDM, DQ, ETL/ELT)
• Implement data lineage, classification, and access controls across hybrid/multi-cloud
• Design and enforce data privacy, retention, and compliance frameworks (GDPR, ISO 27001, NIST)
• Integrate security controls with data pipelines, cataloging, and governance tools
• Risk & Compliance
• Conduct risk assessments, threat modelling, and gap analysis for cloud/data platforms
• Align architecture with regulatory requirements and enterprise policies
• Lead security reviews, audits, and remediation for Azure and Data Fabric solutions
• DevSecOps & Automation
• Embed security in CI/CD pipelines, IaC templates (ARM, Bicep, Terraform)
• Automate security monitoring, alerting, and incident response (SIEM, SOAR)
• Drive adoption of secure coding, vulnerability management, and patching practices
• Stakeholder Engagement
• Advise business, IT, and data teams on secure solution design and risk mitigation
• Provide architectural guidance for cloud migration, data modernization, and integration projects
• Typical Deliverables:
• Azure Security Reference Architecture
• Data Fabric Security Blueprint
• Security controls Matrix (cloud/data)
• Risk assessment and mitigation plan
• Compliance mapping (GDPR, ISO, NIST)
• Security runbooks and operational procedures

Preferred Skills & Experience

• 11+ years in security architecture, cloud security, or data platform security roles
• Hands-on experience with Azure security tools and services
• Strong knowledge of data governance, privacy, and compliance frameworks
• Experience with Data Fabric, Data Mesh, MDM, and distributed data platforms
• Familiarity with DevSecOps, automation, and CI/CD security integration
• Excellent communication, stakeholder management, and documentation skills
• Any of the following certifications is advantageous: Microsoft Certified: Azure Solutions Architect Expert (AZ-305), Microsoft Certified: Cybersecurity Architect Expert (SC-100), Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Cloud Security Professional (CCSP), ISO 27001 Lead Auditor/Lead Implementer

Please note candidates must hold or be eligible to undergo SC Clearance. This role is mainly remote, however occasional UK travel may be required.