Full job description

Azure Security ConsultantOutside IR35 | £450 per day | Initial 2-Month Contract | Fully Remote | Occasional Travel
We’re supporting a specialist consultancy engaged on a high-profile cloud security transformation programme and are looking for an experienced Azure Security Consultant to join on an immediate contract basis.
This is a hands-on engagement focused on securing a live Azure-hosted data platform while supporting a wider modernisation roadmap. The environment contains a mixture of legacy services and cloud-native technologies, and you’ll be responsible for strengthening security controls, reducing operational risk and ensuring the platform aligns with recognised Microsoft security standards.
There is a strong possibility of this evolving into a longer-term engagement or permanent leadership position within the consultancy’s growing security practice.
The OpportunityYou’ll work closely with technical stakeholders to identify security weaknesses, implement practical remediation measures and improve the overall security posture of a critical Azure environment.
This is not a governance-only role. We’re looking for someone comfortable rolling up their sleeves and delivering technical solutions across networking, identity, monitoring, cloud infrastructure and access management.
What You’ll Be Doing*Conducting detailed reviews of Azure security configurations and prioritising remediation activities
*Improving security controls across cloud data services, storage platforms and supporting infrastructure
*Reducing external exposure through network hardening and access restrictions
*Implementing and optimising Private Endpoints and private networking solutions
*Reviewing and improving Azure RBAC models and privileged access controls
*Leading adoption of Entra ID best practices, including group-based access management and PIM
*Deploying Managed Identities to reduce reliance on traditional credentials
*Strengthening secrets management and key protection using Azure Key Vault
*Implementing auditing, monitoring and security alerting across the Azure estate
*Working through Microsoft Defender recommendations and vulnerability remediation
*Identifying redundant, unused or legacy cloud resources and supporting their secure retirement
*Producing clear technical documentation and audit-ready evidence of security improvements
Essential Experience*Proven Azure Security Engineering or Azure Security Consultant experience
*Strong knowledge of Azure networking, including:*Private Endpoints
*Private DNS
*Network Security Groups (NSGs)
*Azure Firewall
*Virtual Networks and network segmentation

*Deep understanding of Microsoft Entra ID and Azure RBAC
*Experience implementing Privileged Identity Management (PIM)
*Strong background securing Azure Storage, SQL services and Key Vault environments
*Experience with Managed Identities and modern authentication approaches
*Hands-on experience with Azure Monitor, Log Analytics and Microsoft Defender for Cloud
*Ability to assess risks, prioritise remediation activities and deliver practical security improvements
*Strong documentation and stakeholder communication skills
Desirable Experience*Azure data platforms, analytics environments or enterprise data warehouse projects
*Azure Synapse Analytics
*Microsoft Cloud Security Benchmark (MCSB)
*CIS Azure Foundations Benchmark
*Azure Well-Architected Framework
*Legacy platform migration or decommissioning programmes
*Relevant Microsoft certifications such as:*AZ-500 Azure Security Engineer
*SC-100 Cybersecurity Architect
*SC-300 Identity and Access Administrator
*AZ-104 Azure Administrator

What’s on Offer?*£450 per day
*Outside IR35
*Initial 2-month engagement
*Fully remote working
*Very occasional travel for key workshops if required
*Opportunity to join a growing consultancy security practice longer term
*Immediate start available