Cloud Security Engineer

Security Officer - 6+ years ( Must have Purview ; Entra ID experience )

Cloud Security Architecture & Access Governance Designed Microsoft Fabric security architecture (workspaces, roles, capacities, domains) Implemented enterprise RBAC/ABAC across Azure & Fabric using Entra ID Configured SSO, MFA, Conditional Access, and identity federation Designed Zero Trust access boundaries across dev/test/prod and business domains Configured private endpoints, VNET integration, NSGs, and firewalls for secure access Data Protection, Encryption & Key Management Implemented encryption at rest and in transit for Fabric, OneLake, ADLS, SQL, and Warehouses Designed architectures using Customer-Managed Keys (CMK) with Azure Key Vault Implemented key rotation, secret governance, and certificate hygiene Implemented PII/PHI protection (column-level encryption, masking, tokenization) Designed encrypted and access-controlled data lifecycle across Bronze/Silver/Gold zones Designed encrypted backup and restore workflows with secure access controls Governance, Classification & Compliance (Purview) Implemented Microsoft Purview scanning, cataloging, and metadata governance Configured Purview sensitivity labels, access policies, and DLP rules Built and managed classification rules for PII/PHI tied to governance policies Designed and maintained end-to-end data lineage across multiple systems Monitoring, Auditing, Incident Response & Lifecycle Controls Implemented audit logging across Fabric, Entra ID, ADLS, SQL, and Purview Integrated security logs into Microsoft Sentinel or equivalent SIEM Built security alerting and automated incident response workflows Participated in or led security audits, penetration tests, and remediation cycles Configured continuous compliance and security posture management (Azure Policy, Defender for Cloud)