Azure Security Engineer - Encryption & Key Management

Job Title : Azure Security Engineer – Encryption & Key Management Experience : 5+ Years

Location : Pune (Hybrid)

Job Summary :

We are seeking an experienced Azure Security Engineer with a strong background in encryption technologies , key management , and cloud security . The ideal candidate will have hands-on experience with Microsoft Azure Security Services —including Azure Key Vault , Managed HSM , and Dedicated HSM —and will play a key role in designing and implementing secure encryption solutions across enterprise environments.

Key Responsibilities :

Implement, configure, and manage Azure KeyVault , Managed HSM , and Dedicated HSM services for secure key and secret management.

Support internal teams and business units in integrating and maintaining encryption solutions across cloud and on-prem environments.

Ensure compliance with data encryption standards , policies, and regulatory requirements.

Develop and automate infrastructure deployments using Infrastructure as Code (IaC) principles.

Utilize PowerShell or Bash scripting for system administration, configuration management, and automation tasks.

Collaborate with cross-functional teams to design secure, scalable, and reliable cloud environments.

Manage and monitor infrastructure components such as load balancers, firewalls, databases, and logging / monitoring tools.

Create and maintain technical documentation, standard operating procedures, and architecture diagrams.

Required Skills & Qualifications :

Minimum 5 years of experience in cloud security or related infrastructure roles.

Hands-on experience with Azure Security Technologies – Azure KeyVault , Azure Managed HSM , or Dedicated HSM .

Strong understanding of data encryption standards , cryptography , and key management best practices .

Proficiency in Azure administration and Infrastructure as Code (IaC) tools.

Solid scripting skills in PowerShell and / or Bash for automation and OS administration.

Good understanding of network and infrastructure components (load balancers, firewalls, databases, monitoring, alerting).

Excellent troubleshooting, documentation, and communication skills.

Preferred Qualifications (Good to Have) :

Experience with Azure Policy , Azure Defender , or Microsoft Sentinel .

Knowledge of security compliance frameworks (ISO 27001, NIST, SOC2).

Familiarity with DevSecOps practices and CI / CD pipeline integration for secure deployments.