Azure Security Engineer- Remote (Anywhere in the U.S.)

GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation’s top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk. General Description We are looking for a skilled Azure Security Engineer to support our GuidePoint Microsoft Cloud Security Practice. This role will engage in the development of customer facing Azure security engineering services while providing “Wow Them” service to clients and/or internal customers or co-workers. The Azure Security Engineer is responsible for designing, implementing, and securing our customers Azure infrastructure. Azure Security Engineers operate primarily in a remote customer facing role with a focus on integrating cloud security technologies into either an existing or new environment while providing expertise in cloud computing to drive business efficiency and innovation. Azure Security Engineers evaluate existing cloud infrastructure and provide recommendations and or implement improvements to strengthen the cloud security posture of the environment. Azure Security Engineers demonstrate strong working knowledge across Azure Commercial and Azure Gov Cloud tenants, subscription management, landing zones, networking, security, and infrastructure through implementation of Microsoft Azure best practices and infrastructure as code (IaC). Azure Security Engineers work with cloud infrastructure team members as needed to provide secure configurations within the Microsoft Azure infrastructure. As a subject matter expert (SME), the Azure Security Engineer also brings deep, hands-on expertise across the broader Azure platform—including AI platform engineering with Azure AI Foundry and enterprise API management and governance with Azure API Management (APIM)—and serves as the technical authority for architecting, securing, and operationalizing these workloads for customers. About the Cloud Practice The Cloud Practice is responsible for providing advisory services as well as secure implementations specific to security tooling with the intent of protecting the customers' identities, endpoints, data, applications, and cloud infrastructure by designing, deploying, and operationalizing Cloud Solution Providers native security solutions. We focus specifically on ensuring cloud security, data security, identity and access management, as well as threat protection has been implemented following best practices across the organization. Our team of Microsoft specialists focus on deploying Microsoft security, compliance, and identity solutions to protect identities, devices, data, apps, and infrastructure. We partner with other internal Teams and resources to ensure the overall goals of the clients are achieved and align with industry standards and best practices. Roles and Responsibilities:    Design Azure cloud solutions with a secure-by-design approach Collaborate with customer IT teams to implement and secure cloud resources, implement configurations based on security policies, standards, and best practices Develop and implement scalable and resilient cloud architecture solutions within Azure Commercial or Azure Gov Cloud environments Develop and implement migration strategies for local on premises hosted environments to Azure cloud tenants Work with customers to secure Microsoft Entra ID Create and implement migration plans for each Azure infrastructure service, system, and/or application that will be deployed to Azure as part of a migration project Create architectural and data flow diagrams for Azure environments Develop and deploy infrastructure as code (IaC) using tools like Terraform, Azure Resource Manager (ARM) templates, Bicep, and PowerShell Ensure systems, applications, and data meet high availability design principles and/or are replicated to meet organizational requirements for disaster and business recovery Analyze and ensure that proper monitoring and alerting systems are in place for systems, services, and applications in customer Azure environments Evaluate and recommend Azure services based on business requirements and industry best practices Collaborate with software developers, system administrators, and other stakeholders to integrate Azure solutions into either new or existing systems and applications Ensure seamless interoperability between on-premises and cloud environments Implement and enforce security requirements to protect Azure-based systems and data Serve as the subject matter expert (SME) for Azure AI Foundry, architecting, deploying, and securing generative AI and machine learning workloads, including model catalog selection, model deployments, AI agents, and prompt flow orchestration Design and implement enterprise-grade Retrieval-Augmented Generation (RAG) and grounding solutions using Azure AI Foundry, Azure AI Search, and integrated customer data sources Establish Responsible AI, content safety, evaluation, and guardrail practices for AI workloads to ensure alignment with governance, data protection, and regulatory requirements Secure Azure AI Foundry workloads through network isolation (private endpoints), managed identities, customer-managed keys, and least-privilege access controls Serve as the subject matter expert (SME) for Azure API Management (APIM), designing and operating secure, scalable API gateways, products, versions, and revisions across Azure Commercial and Azure Gov Cloud environments Author and manage APIM policies for authentication and authorization (OAuth 2.0, JWT validation, mutual TLS), rate limiting, caching, request/response transformation, and backend routing Design and implement APIM as a GenAI gateway in front of Azure AI