A high profile Client is looking for a Microsoft Azure Cloud Security Engineer with hands-on experience of securing and engineering enterprise Azure environments, including landing zone/cloud foundation capabilities and shared platform services.Taking security requirements and architectural principles and translating them into practical, maintainable Azure configurations.Essential: Significant hands-on experience of Microsoft Azure engineering and cloud security. Demonstrable experience implementing security within enterprise Azure environments. Strong understanding of Azure hub-and-spoke architectures and enterprise cloud foundation/landing zone concepts. Strong practical experience of Microsoft Entra ID and Azure identity and access management. Detailed knowledge and hands-on experience of Azure RBAC, including role assignment at management group, subscription, resource group and resource level. Strong understanding of least privilege, separation of duties and privileged access management. Experience implementing and managing Microsoft Entra Privileged Identity Management (PIM). Experience of Conditional Access, Multi-Factor Authentication and identity security controls. Experience securing service principals, managed identities and application identities. Strong understanding of Azure management groups, subscriptions and resource organisation. Experience implementing and managing Azure Policy and cloud governance controls. Experience with Microsoft Defender for Cloud. ..... full job details .....