Descripción
Azure Security Manager Azure Jobboard Senior professional Advisory Amstelveen Jouw uitdagingen KPMG's Cyber & TechLaw practice enables clients to design and operate secure‑by‑default Microsoft Azure platforms. As an Azure Security Manager/Expert, you lead the design, build and hardening of cloud landing zones and core services, embedding zero‑trust, policy‑as‑code and identity‑first controls across enterprise and regulated environments. Dit neem jij mee - 7-12 years in cyber/cloud security with 3+ years leading Azure platform security architecture and hardening. - Hands‑on depth in Entra ID (CA, PIM), Azure Policy, Bicep/Terraform, Key Vault, network security and Defender for Cloud (CSPM). - Ability to map designs to CAF/Enterprise‑Scale, Well‑Architected (Security), CIS Azure and NIST CSF 2.0. - Consulting skills: stakeholder management, clear storytelling and delivery leadership. - Typical certifications: SC‑100, AZ‑500, SC‑300. Twijfel je of je moet solliciteren omdat je niet aan alle vereisten voldoet? Als deze functie je aanspreekt en je jezelf herkent in het profiel, dan horen we graag van je. Omdat wij geloven dat talent op veel verschillende manieren groeit en tot uiting komt. Wat ga je doen? Cloud platform architecture & landing zones - Design Enterprise‑Scale Azure Landing Zones per CAF (management groups, subscription strategy, naming/tagging). - Engineer guardrails using Azure Policy/initiatives and automate subscription vending with Bicep/Terraform. Data protection & key management - Enforce encryption by default; apply CMK for PaaS; govern secrets/certificates with Azure Key Vault. - Adopt Microsoft Purview‑aligned protection patterns and define DR/backup guardrails for critical data services. Container & platform hardening - Define AKS standards (policy for Kubernetes, RBAC, network policies, ACR signing/scanning gates). - Secure PaaS (App Service, Functions, Storage, SQL, Cosmos DB) with least privi...