SummaryWe are seeking a highly skilled Cloud Security specialist with deep expertise across the Microsoft Cloud security ecosystem to help clients design, implement, and optimize secure cloud environments. The successful candidate will work with enterprise customers to assess security posture, define cloud security strategies, architect secure solutions, and deliver security transformation initiatives across Microsoft Azure and Microsoft Security platforms. This is a client-facing consulting role requiring a blend of technical expertise, advisory capability, and stakeholder management skills. The consultant will collaborate with security leaders, cloud architects, engineers, and business stakeholders to enable secure adoption of cloud technologies while maintaining compliance and resilience. Key Responsibilities Security Advisory & Consulting Conduct cloud security assessments, maturity reviews, and gap analyses. Advise clients on Microsoft security best practices, Zero Trust architecture, and cloud governance. Develop security roadmaps, operating models, and remediation plans. Support security strategy and cloud transformation initiatives. Cloud Security Architecture Design secure Azure landing zones and enterprise cloud platforms. Architect solutions aligned with Microsoft Cloud Adoption Framework (CAF) and Well-Architected Framework (WAF). Define security controls for identity, networking, data protection, and workload security. Conduct architecture reviews and security design assurance activities. Microsoft Security Platform Implementation Implement and optimize: Microsoft Defender for Cloud Microsoft Defender XDR Microsoft Sentinel (SIEM/SOAR) Microsoft Entra ID Microsoft Purview Azure Key Vault Azure Policy and Governance Controls Configure Continuous Security Monitoring and Threat Detection capabilities.



Identity & Access Management Design and implement: Microsoft Entra ID Conditional Access Privileged Identity Management (PIM) Identity Governance Role-Based Access Control (RBAC) Implement Zero Trust identity strategies. DevSecOps & Automation Integrate security controls into CI/CD pipelines. Implement Infrastructure as Code security using Terraform, Bicep, and Azure DevOps. Establish Policy-as-Code and compliance automation. Support secure application and container deployment practices. Governance, Risk & Compliance Align cloud environments with security and regulatory frameworks such as: ISO 27001 NIST CIS Benchmarks SOC 2 Essential Eight (where applicable) Assist with audit readiness and security governance activities. Develop security standards, policies, and reference architectures. Client & Stakeholder Engagement Facilitate workshops and technical design sessions. Present recommendations to technical and executive audiences. Support presales activities including solution design, effort estimation, and proposal development. Mentor junior consultants and engineers. Equal Employment Prospect Statement All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by federal, state, or local law. Job candidates will not be obligated to disclose sealed or expunged records of conviction or arrest as part of the hiring process. Avanade is committed to providing veteran employment opportunities to our service men and women. Please read Avanade's Hiring and Privacy Statement for more information on how we process your data during the Recruiting and Hiring process.

📌 Cloud Security Specialist (Sydney)
🏢 Avanade
📍 Sydney