Summary

We are seeking a highly skilled Cloud Security specialist with deep expertise across the Microsoft Cloud security ecosystem to help clients design, implement, and optimize secure cloud environments. The successful candidate will work with enterprise customers to assess security posture, define cloud security strategies, architect secure solutions, and deliver security transformation initiatives across Microsoft Azure and Microsoft Security platforms.

This is a client-facing consulting role requiring a blend of technical expertise, advisory capability, and stakeholder management skills. The consultant will collaborate with security leaders, cloud architects, engineers, and business stakeholders to enable secure adoption of cloud technologies while maintaining compliance and resilience.

Key Responsibilities

Security Advisory & Consulting

Conduct cloud security assessments, maturity reviews, and gap analyses.

Advise clients on Microsoft security best practices, Zero Trust architecture, and cloud governance.

Develop security roadmaps, operating models, and remediation plans.

Support security strategy and cloud transformation initiatives.

Cloud Security Architecture

Design secure Azure landing zones and enterprise cloud platforms.

Architect solutions aligned with Microsoft Cloud Adoption Framework (CAF) and Well-Architected Framework (WAF).

Define security controls for identity, networking, data protection, and workload security.

Conduct architecture reviews and security design assurance activities.

Microsoft Security Platform Implementation

Implement and optimize:

Microsoft Defender for Cloud

Microsoft Defender XDR

Microsoft Sentinel (SIEM/SOAR)

Microsoft Entra ID

Microsoft Purview

Azure Key Vault

Azure Policy and Governance Controls





Configure Continuous Security Monitoring and Threat Detection capabilities.

Identity & Access Management

Design and implement:

Microsoft Entra ID

Conditional Access

Privileged Identity Management (PIM)

Identity Governance

Role-Based Access Control (RBAC)

Implement Zero Trust identity strategies.

DevSecOps & Automation

Integrate security controls into CI/CD pipelines.

Implement Infrastructure as Code security using Terraform, Bicep, and Azure DevOps.

Establish Policy-as-Code and compliance automation.

Support secure application and container deployment practices.

Governance, Risk & Compliance

Align cloud environments with security and regulatory frameworks such as:

ISO 27001

NIST

CIS Benchmarks

SOC 2

Essential Eight (where applicable)

Assist with audit readiness and security governance activities.

Develop security standards, policies, and reference architectures.

Client & Stakeholder Engagement

Facilitate workshops and technical design sessions.

Present recommendations to technical and executive audiences.

Support presales activities including solution design, effort estimation, and proposal development.

Mentor junior consultants and engineers.

.

Skills & Experience

Technical Skills

Strong hands-on experience with Microsoft Azure security services.

Expertise in:

Microsoft Defender for Cloud





Microsoft Sentinel

Microsoft Entra ID

Microsoft Purview

Azure Policy

Azure Firewall

Azure Key Vault

Network Security Groups (NSGs)

Private Endpoints

Robust understanding of:

Zero Trust Architecture

Cloud Security Architecture

Identity & Access Management

Security Monitoring & Incident Response

Secure Network Design

Cloud & Platform Knowledge

Azure IaaS, PaaS, and cloud-native services.

Azure Landing Zones and Enterprise-Scale Architecture.

Kubernetes and Azure Kubernetes Service (AKS) security.

Hybrid cloud and cloud migration security considerations.

DevSecOps

Terraform, Bicep, ARM Templates.

Azure DevOps and GitHub Actions.

CI/CD Security and Infrastructure as Code.

Consulting Skills

Client-facing consulting experience.

Stakeholder management and workshop facilitation.

Strong communication, documentation, and presentation skills.

Ability to translate business requirements into secure technical solutions.

Preferred Qualifications

Certifications

Microsoft Certified: Azure Security Engineer Associate (AZ-500)

Microsoft Certified: Cybersecurity Architect Expert (SC-100)

Microsoft Certified: Azure Administrator Associate (AZ-104)

Microsoft Certified: Azure Solutions Architect Expert

CISSP

CCSP

CISM

Experience

5+ years of cloud security, cybersecurity, or security consulting experience.

3+ years of hands-on Microsoft Azure security experience.

Experience delivering security solutions within enterprise or consulting environments.

Exposure to large-scale cloud transformation and modernization programs is highly desirable.

Note: Australian citizenship is mandatory

.

📌 Cloud Security Specialist (Australia)
🏢 Avanade
📍 Australia