Azure Cloud Platform Engineering AM

Engineering supports the firm by delivering modern platform capabilities, observability

Responsibilities Provide deep technical leadership in cloud security, guiding implementation of complex controls across identity, network, compute, and data layers. Lead service onboarding for missioncritical workloads, defining secure patterns and telemetry requirements. Review and approve core platform security changes and IaC module updates. Shape platformwide security strategy and lead adoption of security policies, standards, and governance controls. Own lifecycle management of cloud security policies, guardrails, and compliance measures. Drive access governance initiatives, privileged access review cycles, and enforcement of minimumprivilege models. Architect scalable and automated security solutions including network perimeter protections, workload identity models, encryption strategies, and secrets management. Evaluate and design controls for multienvironment and multitenant scenarios. Lead integration of enterprisegrade DevSecOps capabilities across CI/CD pipelines including attestation, SBOM, dependency scanning, SAST/DAST, and image hardening. Govern release gates, pipeline approvals, and policyascode implementations. Partner with security operations to enhance detection coverage, automated playbooks, and threat intelligence pipelines. Act as a senior responder during incidentsguiding containment, analysis, and remediation activities. Influence engineering, SRE, platform, and product teams to adopt secure engineering practices. Represent the Platform Security function in design assessments, architecture councils, and leadership forums. Provide deep technical insights to stakeholders in clear, concise language. Work in rotational shifts as required. Participate in oncall rotations to respond to and resolve highseverity incidents in a timely manner. Requirements Deep expertise in cloud security architecture, IAM governance, network security, encryption, and policyascode. Strong leadership capabilities able to influence, mentor, and enable multiple engineering teams. Demonstrated experience designing and implementing enterprisescale security controls. Strong grasp of DevSecOps, secure SDLC, CI/CD pipeline security, code signing, and reproducible builds. Experienced in threat detection, incident response, and cloud forensics. Extensive knowledge of CI/CD pipelining skills using Azure DevOps or equivalent Experience of working in an Enterprise environment. Works independently, makes strong technical decisions, and drives engineering excellence across teams. .