Full job description

What if your next Cyber Security role was designed to take you beyond engineering?

You'll join a growing cybersecurity consultancy where you can get hands-on with complex Azure security, identity, PIM and PAM work while sitting directly within the Architecture team. That means challenging projects now, exposure to experienced architects, and a genuine route into Security Architecture when you're ready.

Backed by a large, established parent organisation, they combine the variety and close-knit feel of a specialist consultancy with the stability and opportunities of a much larger group.

The Opportunity

This is a hands-on role with a strong focus on Microsoft Azure, Entra ID, PIM and PAM.

You'll secure Azure environments across identity, governance, networking, workload protection and monitoring, working with technologies including Azure Policy, Defender for Cloud, Key Vault, Azure Monitor and Log Analytics.

You'll work closely with experienced security architects, taking high-level designs and turning them into detailed technical solutions, build documentation, test plans and operational runbooks. Experience with Terraform, Bicep, PowerShell or Azure CLI will also be valuable.

It's a customer-facing position where you'll own pieces of technical delivery, solve complex security problems and work directly with clients across major projects.

What Are They Looking For?

The priorities are simple: strong hands-on Azure security experience and practical PIM/PAM knowledge.

You'll understand cloud security principles such as least privilege, defence in depth and secure-by-design, and be comfortable troubleshooting complex access, policy and configuration issues.

Previous consultancy experience is a big plus. Projects can move quickly, so this will suit someone who enjoys variety, communicates confidently with customers and is comfortable stepping outside their comfort zone when required.

You'll also need to be eligible for UK Security Clearance.

Nice to Have - Not Must Have

They're looking for the right person, not someone who ticks every box.

• Experience with Microsoft Purview would be particularly valuable, alongside Sentinel, Defender XDR, Azure DevOps/GitHub, CNI or other regulated environments.
• Microsoft certifications including AZ-500, AZ-104, SC-300, SC-400 or SC-100 are welcomed but aren't essential.