Job Description

Junior Azure Platform Engineer

Location: Offshore
Function: Cloud Run Service Operations
Type: Permanent, Full‑time
Reports to: Service Ops Lead – Platform Services

KPMG Overview

Joining KPMG means joining a talented team of exceptional colleagues who bring innovative thoughts and a natural curiosity to the work they do each day. No one type of person succeeds at KPMG; a diverse business requires diverse personalities, characters and perspectives. There really is a place for you here.You will be working within Group Digital Platform Services Operations which services the broader Firm through delivery of core technology and managed services capabilities, collaboration and innovation development services and building our Alliances network.

Key Responsibilities

Cloud Platform Support

• Assist in implementing and maintaining security configurations across Azure services and Landing Zones.
• Support platform security components including:
  • Azure Firewall, NSGs, ASGs
  • Private Endpoints, Virtual Networks, routing and segmentation
  • Managed identities and Key Vault
• Contribute to platform hardening activities and secure‑by‑design reviews.

Security Monitoring & Incident Support

• Monitor and triage alerts from Defender for Cloud and Sentinel, escalating when necessary.
• Assist senior engineers in investigating platform‑level security events.
• Support the improvement of detection rules, dashboards, and reporting.

Identity & Access Controls

• Support platform access governance using Azure RBAC and Privileged Identity Management (PIM).
• Assist with access reviews, entitlement hygiene, and platform‑level identity audits.
• Help enforce identity requirements such as MFA and Conditional Access.

Governance & Compliance

• Help apply and monitor Azure Policy, tagging standards, and platform guardrails.
• Assist with compliance checks against frameworks like CIS Benchmarks and ISO 27001.
• Maintain platform documentation, configuration baselines, and evidence for audits.

Automation & Scripting (Foundational Level)

• Contribute to basic automation tasks using PowerShell, Azure CLI, Bicep, or Terraform (training provided).
• Support continuous improvement of platform security tooling and automated checks.

Collaboration & Continuous Learning

• Work closely with cloud engineers, architects, and Cyber Ops teams.
• Participate in platform security reviews, change boards, and engineering stand-ups.
• Stay updated on new Azure security features and evolving cloud threats.
• Engage in structured learning paths and certification development.

Required Skills & Experience

• 1–2 years of experience in IT, cybersecurity, cloud operations, or related field (or strong educational/bootcamp background).
• Basic understanding of Azure concepts including subscriptions, resource groups, VNETs, RBAC, and monitoring.
• Foundational knowledge of security principles such as:
  • Least privilege
  • Network security basics
  • Encryption
  • Threat detection
• Strong interest in cloud security and platform engineering.
• Good communication skills and ability to document technical procedures.

Preferred Qualifications (Nice to Have)

• Exposure to Azure tools such as:
  • Defender for Cloud, Sentinel, Key Vault, PIM
• Basic scripting experience (PowerShell, Python, Azure CLI).
• Familiarity with compliance frameworks (CIS, ISO 27001, NIST).
• Relevant certifications or training paths:
  • AZ‑900: Azure Fundamentals
  • SC‑900: Security, Compliance & Identity Fundamentals
  • AZ‑104: Azure Administrator (in progress or planned)
  • AZ‑500: Azure Security Engineer (aspirational)