Job Description

Junior Azure Platform Engineer

Location: Offshore

Function: Cloud Run Service Operations

Type: Permanent, Full‑time

Reports to: Service Ops Lead – Platform Services

KPMG Overview

Joining KPMG means joining a talented team of exceptional colleagues who bring innovative thoughts and a natural curiosity to the work they do each day. No one type of person succeeds at KPMG; a diverse business requires diverse personalities, characters and perspectives. There really is a place for you here.You will be working within Group Digital Platform Services Operations which services the broader Firm through delivery of core technology and managed services capabilities, collaboration and innovation development services and building our Alliances network.

Responsibilities

Key Responsibilities

Cloud Platform Support

Assist in implementing and maintaining security configurations across Azure services and Landing Zones.
Support platform security components including:

Azure Firewall, NSGs, ASGs
Private Endpoints, Virtual Networks, routing and segmentation
Managed identities and Key Vault

Contribute to platform hardening activities and secure‑by‑design reviews.

Security Monitoring & Incident Support

Monitor and triage alerts from Defender for Cloud and Sentinel, escalating when necessary.
Assist senior engineers in investigating platform‑level security events.
Support the improvement of detection rules, dashboards, and reporting.

Identity & Access Controls

Support platform access governance using Azure RBAC and Privileged Identity Management (PIM).
Assist with access reviews, entitlement hygiene, and platform‑level identity audits.
Help enforce identity requirements such as MFA and Conditional Access.

Governance & Compliance

Help apply and monitor Azure Policy, tagging standards, and platform guardrails.
Assist with compliance checks against frameworks like CIS Benchmarks and ISO 27001.
Maintain platform documentation, configuration baselines, and evidence for audits.

Automation & Scripting (Foundational Level)

Contribute to basic automation tasks using PowerShell, Azure CLI, Bicep, or Terraform (training provided).
Support continuous improvement of platform security tooling and automated checks.

Collaboration & Continuous Learning

Work closely with cloud engineers, architects, and Cyber Ops teams.
Participate in platform security reviews, change boards, and engineering stand-ups.
Stay updated on new Azure security features and evolving cloud threats.
Engage in structured learning paths and certification development.

Qualifications

Required Skills & Experience

1–2 years of experience in IT, cybersecurity, cloud operations, or related field (or strong educational/bootcamp background).
Basic understanding of Azure concepts including subscriptions, resource groups, VNETs, RBAC, and monitoring.
Foundational knowledge of security principles such as:

Least privilege
Network security basics
Encryption
Threat detection

Strong interest in cloud security and platform engineering.
Good communication skills and ability to document technical procedures.

Preferred Qualifications (Nice To Have)

Exposure to Azure tools such as:

Defender for Cloud, Sentinel, Key Vault, PIM

Basic scripting experience (PowerShell, Python, Azure CLI).
Familiarity with compliance frameworks (CIS, ISO 27001, NIST).
Relevant certifications or training paths:

AZ‑900: Azure Fundamentals
SC‑900: Security, Compliance & Identity Fundamentals
AZ‑104: Azure Administrator (in progress or planned)
AZ‑500: Azure Security Engineer (aspirational)

#KGS

DE Bayer|SDC14 | shared Automatization

Z3_Zimperium Support

DevOps Engineer

Junior Azure Infra Apps Platform Engineer- Associate Consultant - MFT - KGS CH

VMware_Nutanix_Azure Administrator