Azure Cloud Platform Engineering AM

Engineering supports the firm by delivering modern platform capabilities, observability

Responsibilities

• Provide deep technical leadership in cloud security, guiding implementation of complex controls across identity, network, compute, and data layers.
• Lead service onboarding for mission‑critical workloads, defining secure patterns and telemetry requirements.
• Review and approve core platform security changes and IaC module updates.
• Shape platform‑wide security strategy and lead adoption of security policies, standards, and governance controls.
• Own lifecycle management of cloud security policies, guardrails, and compliance measures.
• Drive access governance initiatives, privileged access review cycles, and enforcement of minimum‑privilege models.
• Architect scalable and automated security solutions including network perimeter protections, workload identity models, encryption strategies, and secrets management.
• Evaluate and design controls for multi‑environment and multi‑tenant scenarios.
• Lead integration of enterprise‑grade DevSecOps capabilities across CI/CD pipelines including attestation, SBOM, dependency scanning, SAST/DAST, and image hardening.
• Govern release gates, pipeline approvals, and policy‑as‑code implementations.
• Partner with security operations to enhance detection coverage, automated playbooks, and threat intelligence pipelines.
• Act as a senior responder during incidents—guiding containment, analysis, and remediation activities.
• Influence engineering, SRE, platform, and product teams to adopt secure engineering practices.
• Represent the Platform Security function in design assessments, architecture councils, and leadership forums.
• Provide deep technical insights to stakeholders in clear, concise language.
• Work in rotational shifts as required.
• Participate in on‑call rotations to respond to and resolve high‑severity incidents in a timely manner.

Requirements

• Deep expertise in cloud security architecture, IAM governance, network security, encryption, and policy‑as‑code.
• Strong leadership capabilities — able to influence, mentor, and enable multiple engineering teams.
• Demonstrated experience designing and implementing enterprise‑scale security controls.
• Strong grasp of DevSecOps, secure SDLC, CI/CD pipeline security, code signing, and reproducible builds.
• Experienced in threat detection, incident response, and cloud forensics.
• Extensive knowledge of CI/CD pipelining skills using Azure DevOps or equivalent
• Experience of working in an Enterprise environment.
• Works independently, makes strong technical decisions, and drives engineering excellence across teams.