Azure Security Architect | Zero Trust | Microsoft Sentinel | Identity & Access Management

Microsoft Azure Security Architecture
Expertise in designing and implementing end-to-end cloud and hybrid security architectures on Microsoft Azure, including Zero Trust models, network security (microsegmentation, Azure Firewall, WAF, NSGs), and compliance with NIS2, DORA, and PSD2 regulations.

Microsoft Sentinel & SIEM/SOAR
Expert-level proficiency in Microsoft Sentinel, including designing and deploying Sentinel environments from scratch, creating custom KQL detection rules, building Azure Logic App playbooks for automated incident response (SOAR), and implementing Sentinel-as-Code via Azure DevOps.

Identity & Access Management (IAM)
Deep knowledge of Identity and Access Management using Microsoft Entra ID (PIM), including handling complex identity incidents, PKI and IAM support, and implementing sensitivity labels and DLP policies in Microsoft Purview.

DevSecOps & Infrastructure-as-Code
Proficiency in DevSecOps practices including secure CI/CD gating, secret scanning, Defender for Containers and APIs, container hardening, and Infrastructure-as-Code using Terraform, Terragrunt, Policy-as-Code, and Entra-as-Code.

Threat Modelling & Risk Management
Application of threat modelling methodologies (STRIDE, DREAD) and risk management frameworks, including maintaining Risk Registers and developing incident response runbooks for scenarios such as identity compromise, data breach, DDoS, and malware.

Microsoft Defender XDR & Endpoint Security
Advanced endpoint threat investigation and response using Microsoft Defender XDR and CrowdStrike Falcon, including phishing response, escalation, and DDoS mitigation using NetScout Arbor.

Monitoring & Detection
Implementation of monitoring and detection solutions using Microsoft Sentinel, Azure Monitor, and Application Insights, as well as proactive threat hunting with tools such as FlowMon and GreyCortex MENDEL.

Compliance & Regulatory Frameworks
Knowledge and practical application of regulatory frameworks including NIS2, DORA, and PSD2, as well as security governance in regulated environments.

Azure AI & Automation
Integration of Azure AI agent capabilities and AI-assisted incident triage, as well as automation of security workflows using Logic Apps and SOAR platforms.