Track Lead - Azure & Cloud Security, Palo Alto Firewall

Job Summary

Owns remediation of SG's CIAP on Azure. Role emphasises coordination with Microsoft and management of Azure-native patching cadences rather than building heavy custom automation.

Key Responsibilities

• Drive remediation across Azure-native CIAP components: VMs, AKS, App Gateway, NSGs, Azure Firewall.
• Coordinate with Microsoft support and Azure shared-services for managed-service vulnerabilities.
• Apply Azure Policy and patch baselines via Update Manager and Azure Automation.
• Track Microsoft security advisories and align SG patching to vendor cadence.
• Document patterns for downstream automation.

Skill Requirements

• Azure infrastructure operations: compute, networking, identity, AKS, App Gateway.
• Azure Update Manager / Azure Automation experience.
• ARM templates / Bicep / Terraform on Azure.
• Strong understanding of Azure RBAC and Conditional Access.

Other Requirements

• Microsoft Certified: Azure Administrator (AZ-104) or Azure Security Engineer (AZ-500).
• Experience working with Microsoft Premier / Unified Support.