Lead Cloud Azure Security Engineer (Policy & Platform Build)

Quick Facts

• Role: Lead Cloud Azure Security Engineer (Policy & Platform Build)

• Focus: Azure governance and security policy framework for large-scale Azure environments

Description

You will lead the continuous development of an Azure Policy framework and translate cloud governance and security requirements into technical platform solutions. The role includes creating and optimizing standard policy sets, managing exemptions for specific scopes, and supporting staged rollout with testing, technical validation, and documentation. You will also analyze and resolve policy-driven incidents and conflicts with teams across Security, Architecture, Operations, and Cloud Governance.

Responsibilities

• Develop and implement Azure governance requirements using Azure Policy and initiatives

• Model standard policy sets for Management Groups and Subscriptions to ensure consistent protection across environments

• Create, maintain, and optimize Azure Policy and initiative definitions for encryption, logging, network restrictions, and security configuration hardening

• Implement approved exemptions in a technically correct and traceable way, limiting them to affected scopes

• Support staged rollout of policy sets across test, pilot, and production with validation and alignment with release, security, and governance processes

• Collaborate with Cloud Governance, Security, Architecture, Operations, platform teams, and application teams

• Analyze policy-related disruptions, help teams adopt standards, and embed governance requirements into the platform

Requirements

• Strong understanding of large Azure environments

• Experience implementing governance and security requirements via Management Groups, Subscriptions, Scopes, and Azure Policy

• Hands-on experience with Azure Policy including implementation, testing, rollout, and ongoing improvement

• Practical experience with automation and Infrastructure as Code; Terraform, Bicep, ARM Templates, or CI/CD pipelines are preferred

• Understanding of hardening standards, application security, traceability, and documented exception processes in a regulated environment

• Experience managing controlled changes across test, pilot, and production environments with attention to quality, stability, documentation, and application impact

• Analytical ability to structure and resolve policy violations, technical conflicts, and incidents and propose secure, feasible solutions

• Strong collaboration and communication skills across platform, security, architecture, application, and governance functions

• Structured, independent, solution-oriented working style

• Very good German and good English skills (written and spoken)

Benefits

• Opportunity to continuously evolve an Azure Policy framework and implement cloud-specific governance requirements

• Work on scalable, secure standard policy sets for consistent protection across environments