Senior Azure Cloud Security Engineer

About the Position

We are looking for a Senior Azure Cloud Security Engineer to join Group107 project. You will strengthen and scale the cloud network and identity security of a mature, cloud-native fintech platform serving institutional fixed-income clients across the US, Europe, and Latin America. Working directly with engineering leadership and the client CTO, you will own the Azure network architecture, deepen the zero-trust posture, and keep the security program aligned with the expectations of enterprise clients and regulatory auditors. This is a high-ownership role within an established security practice, with a defined two-year-plus roadmap and a strong voice in client-facing security reviews and enterprise onboarding.

Responsibilities

• Own and continuously improve the Azure network architecture - VNet topology (hub-spoke or VWAN), NSGs, Azure Firewall Premium, and Private Link / Private Endpoints.
• Drive maturation of the zero-trust model across the Azure environment, including Entra ID Conditional Access, PIM, and workload identity management.
• Design and manage integrations with external identity providers (Okta, Ping Identity, Auth0), including SAML, OIDC, and OAuth 2.0 federation with Entra ID.
• Evaluate and govern ExpressRoute / VPN Gateway configurations for client-dedicated connectivity.
• Maintain and evolve network security controls supporting the SOC 2 Type II program, in partnership with the internal compliance function; provide technical input to SOC 2 audits and client DDQs.
• Codify network and identity configuration through Infrastructure as Code (Terraform, Bicep, or ARM), with clean Git workflows and peer-reviewed pull requests, and embed this work into existing CI/CD pipelines.
• Produce and maintain technical documentation - network diagrams and data-flow maps - and communicate controls clearly to non-engineering stakeholders, including participation in client security conversations.
• Proactively assess and advance the cloud network and identity posture as scale and infrastructure complexity grow.

Requirements

• Advanced knowledge of Microsoft Azure, with 6+ years in cloud infrastructure or security engineering and at least 3 years focused on Azure.
• Deep hands-on expertise with Azure Firewall Premium, NSGs, Private Link, VNet peering, and hub-spoke / VWAN topology.
• Strong working knowledge of Entra ID (Azure AD), Conditional Access, Privileged Identity Management (PIM), and managed identities.
• Proven experience integrating external identity providers (Okta, Ping Identity, Auth0) with Entra ID via SAML, OIDC, or OAuth 2.0.
• Solid grounding in zero-trust architecture principles and their practical implementation in an Azure-native environment.
• Hands-on delivery of infrastructure changes through Infrastructure as Code (Terraform, Bicep, or ARM), including day-to-day Git workflow - branching, merging, conflict resolution, and PR-based code review.
• Comfortable operating within a CI/CD-driven change process - able to read and modify pipeline definitions (GitHub Actions or Azure DevOps YAML) for network and identity work.
• Experience working in a fast-paced, distributed engineering team using agile methodologies and DevOps practices.
• Advanced English (C1+), with the ability to participate in client interview and security-review meetings.
• Clear written and verbal communication - able to explain technical decisions to non-engineering stakeholders.
• Ownership mindset - comfortable making a design decision and living with its operational consequences.
• Strong collaboration across time zones - works effectively through PR review and asynchronous decision-making.
• Pragmatic - favors incremental, testable changes over big-bang rewrites.
• Mentorship and knowledge sharing within a senior, cross-functional team.

Nice to Have

• Background in financial services, FinTech, or other regulated industries.
• Relevant certifications: AZ-500, AZ-700, SC-300, SC-100, SC-200, CISSP, or CCSP.
• Experience supporting enterprise client security reviews or completing vendor due-diligence questionnaires (DDQs).

We Offer

• 20 vacation days (workdays)
• 7 sick days
• Personalized career growth
• Internal English classes
• Education reimbursement
• Corporate events and team buildings
• Equipment provided

About the Company

Life inside Group 107

Get a glimpse into our unique collaborative atmosphere and developer life.

Hi, my name is Anastasia and I am a Scrum-master in Group 107. In 2020, Group 107 came into my life and became my place of strength and development. Here I found the best mentors who teach me every day and help me to develop as a professional. Here I found a cool team that became friends and even family for me. I love how the company grows, welcomes new employees every day. I also adore the responsibility of each and the friendly relations within the team. I want our Group 107 family to only develop and grow.

Anastasia Makosiy

Scrum Master

The support of colleagues helped me a lot. Everyone is super friendly and open to giving a helping hand, I was also very motivated by the fact that I was allowed to work on a real project during my internship.

Andriy Goryachok

Android Developer

I have been working for Group 107 for almost 1.5 years. When I came to work there were only about 20 people, at the moment there are more than 100 of us and the feeling of support and friendship remains the same as in a small team. I love our people, I love the pace of the company, I love the fact that we are always moving forward. In short, our Group 107 is a big Italian family!

Anna Labish

Recruiter

I really liked the first impression of the company, the atmosphere is friendly, everybody is very calm, cheerful and pleasant. I am happy that Group 107 challenged me and that I managed to learn from that.

Bohdan Chepa

Back-End Developer

I have been working at Group 107 for half a year. I like the company that we all work as a united and well-coordinated team. The office is very cool, everything is well thought out for both work and leisure: there is a gym, PS4 and much more. The company provides great opportunities for development and career. Currently, I am working on a major project for a client from Israel. If there is an opportunity, I will definitely recommend to friends the company in which I work.

Denys Bondar

PHP Developer

Hey! My name is Dmytro, I have been working as a motion designer at Group 107 for over a year. Here I like the fact that I have the freedom to be creative and really cool projects on which I get the experience. The team also employs talented specialists who not only help but also share their tips. Of course, there are also cool corporate events and parties outside the city or in the office. Join us!

Dmytro Omelian

Motion Designer

Let's Connect

Complete the form below and our team will contact you shortly.

Full Name

Email

Phone Number

Cover Letter

CV / Resume

Choose The File

Please add me to your newsletter and contact list for the purpose of sending me promotional and business information and updates, including events information. Your personal data will be processed according to our Privacy Policy