cloud security specialist

What You Will Do:

• Define, maintain, and implement the end-to-end cloud and data security architecture, target-state roadmap, reusable patterns, and guardrails across Azure, Microsoft Fabric, and analytics services.

• Design, govern, and mature the role-based access control (RBAC) model, user access matrices, and Privileged Identity Management (PIM) arrangements mapped to Microsoft Entra groups and platform workspaces.

• Architect and implement fine-grained data protection controls, including row-level and column-level security, masking, encryption, key management, and data loss prevention across data warehouses and lakehouses.

• Establish secure delivery practices for CI/CD pipelines, Infrastructure as Code (IaC), deployment identities, branch protection, and credential lifecycle management.

• Lead the implementation, validation, and remediation of controls arising from Threat Risk Assessments, audits, and penetration tests, maintaining the central Security Controls Matrix and integrating with SIEM services.

What You Need to Apply for This Role:

• Extensive experience in cloud security, data security, IAM, or security architecture, with demonstrated success securing enterprise Microsoft Azure and Microsoft Fabric environments.

• In-depth expertise in Microsoft Entra ID, Azure RBAC, Privileged Identity Management (PIM), Conditional Access, and identity lifecycle governance.

• Proven track record implementing fine-grained data access controls (RLS, CLS, masking, entitlement models) across SQL, Power BI semantic models, lakehouses, and self-service analytics platforms.

• Strong background in DevSecOps practices, including securing CI/CD pipelines, release governance, secret/key rotation, and Infrastructure as Code.

• Exceptional ability to translate security assessments, threat models, and frameworks into actionable control matrices, remediation plans, and architecture documentation (with relevant certifications such as CISSP, CCSP, or Microsoft Cybersecurity Architect highly regarded).

Interested? Apply Now!

If you are a Cloud Security Specialist with experience in securing Microsoft Azure and Microsoft Fabric enterprise data platforms, we want to hear from you. Click “Apply Now”.

Alternatively, please reach out to Sian for more information - sian.asnicar@randstaddigital.com.au

You must be a Brisbane based candidate with working rights to be considered.

Randstad contractor benefits:

• Access to a Udemy license for ongoing learning and continuous professional development

• Access to exclusive discounts across various platforms

• Discounts on private health funds

• 3 payruns a week

At Randstad, we are passionate about providing equal employment opportunities and embracing diversity to the benefit of all. We actively encourage applications from any background.