Senior Azure Infrastructure & Security Engineer

RESPONSIBILITIES:
Kforce has a client in Phoenix, AZ that is seeking a Senior Azure Infrastructure & Security Engineer.

Summary:
Work covers architecture, implementation, and tracking the assigned tasks to closure. During the SOC 2 audit the engineer will also gather evidence: when the auditor asks us to show X, we need someone who already knows where in Azure to go and can pull it quickly. Expect work across Defender for Cloud and Sentinel, Entra ID privileged access, network architecture (hub-spoke, Private Endpoints, Application Gateway/WAF, Traffic Manager), Azure Policy and governance, and producing written evidence for auditors as tasks are completed. This is not an advisory role; the engineer does the work.

REQUIREMENTS:
* 7+ years infrastructure engineering with 4+ years hands-on in Azure at a senior level; has personally done this kind of remediation before, not just designed it
* Azure Traffic Manager: has designed and implemented Traffic Manager profiles for multi-region failover in production
* Experience with Microsoft Defender for Cloud, Microsoft Sentinel, and Entra ID (PIM, Conditional Access, service principal hygiene)
* Infrastructure as Code with Bicep or Terraform; Comfortable in Azure CLI/PowerShell
* AZ-305 (Azure Solutions Architect Expert) or AZ-500 (Azure Security Engineer) experience
* Knows the Azure portal, Entra ID, Defender, Sentinel, and Azure Monitor/Activity Log well enough to locate and export audit evidence (configs, logs, screenshots, reports) on request
* Self-directed; Takes assigned tasks, tracks them in JIRA to closure, and communicates clearly with a product owner and a software manager

Nice to have:
* Azure networking depth (VNets and peering, hub-spoke, Private Link, Application Gateway/WAF, NSGs)
* SOC 2 or financial-services vendor assessment experience
* SQL Server on Azure VMs/Azure SQL
* .NET/App Service familiarity
* Cloudflare DNS in front of Azure experience
* Azure Well-Architected Framework reviews

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.

We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.

Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law.

This job is not eligible for bonuses, incentives or commissions.

Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.

By clicking ?Apply Today? you agree to receive calls, AI-generated calls, text messages or emails from Kforce and its affiliates, and service providers. Note that if you choose to communicate with Kforce via text messaging the frequency may vary, and message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You will always have the right to cease communicating via text by using key words such as STOP.