• Closely working with Development and Cloud Application support team to validate the new application design and VSTS pipeline build implementation flow. Then give suggestion to fix the security related gaps in design and build pipeline profile before application deployment in Azure and Alibaba Cloud.


• Supporting the post deployed application and operational security related activities in Azure and working along with application support and development team based on their dependencies in security issues.


• Fine tuning Azure security center policies and fix the security recommendation for the new deployed Azure resources.


•  Working with SQL DB team to fix the new and track the existing vulnerabilities status as per the Azure security center Dashboard.


• Working with development team to fix the application container image vulnerabilities as per the Aqua scan report in Azure DevOps and Security center scanning results.


• Managing to Create, Renew and delete the Public and Private certificate for Azure cloud hosted applications.


• Key Management activities – Managing the Secrets which is stored in Azure Key Vault for application deployment and operation use.


• Adding/Managing the NSG rules for Azure hosted web application security.


• Managing Private and Public DNS in Azure for Azure hosted web application.


• Working with end customer/client to solve them Application integration and operation issue from their environment to Azure Cloud.


• Closely monitoring and fix the Non-Compliance Azure resources as per the AzSK scanned results which is integrated with Jira Sensor Platform for Alert and notifications.

Managing the Cloud SaaS based WAF security – Akamai Kona for front end security for client accessing URL/FQDN for Azure Hosted Web applications

Skills Required:

• Required Knowledge on below Azure Network & Security Controls
  
  
  • NSG, Load Balancer, Application Gateway, Route Tables, Azure or Third party Firewall Knowledge, VPN Gateway, key vaults
  
  
  
  


• Required knowledge on Azure Security Center and how to work on recommendations and it fixes.


• Required knowledge on basic routing.


• Required knowledge on DNS delegation, Public domain management.


• Required knowledge on Public and Self signed certificate management and having experience to coordinate with public CA vendors (Examples: DigiCert, Quovadis) for certificate lifecycle management.


• Required knowledge on any WAF technology (Examples: Akamai, CloudFlare).