Material+ - Technical Lead - DevOps & Security

About the Role:

Srijan, a Material company, is a global digital engineering firm specialising in solving complex technology challenges. We are seeking a Technical Lead DevOps & Security with strong expertise in Azure platform security, identity and access management, API security, cloud networking, observability, and DevOps engineering.

Responsibilities:

• Design and implement Azure platform security controls using Microsoft Entra ID, Azure API Management (APIM), Azure networking, and native Azure monitoring and security services.

• Configure Microsoft Entra ID app registrations, service principals, OAuth 2.0 scopes, delegated and application permissions, OBO token flows, and consent models.

• Implement resource-scoped permissions, including Exchange Application RBAC and resource-specific consent (RSC)-style scoping.

• Develop and stage APIM policies, including client-specific policies, correlation-ID propagation, content-safety controls, and token-limit enforcement.

• Configure network security groups, firewall and egress rules, private endpoints, private connectivity, and subnet segmentation.

• Implement observability and audit logging using Azure Monitor, Log Analytics, Microsoft Sentinel, OpenTelemetry, and KQL.

• Review application source code and agent workflows to determine minimum permissions for MCP servers, tools, and Microsoft Graph resources.

• Build shared instrumentation libraries or SDKs that enforce structured event emission, schema compliance, and consistent logging.

• Implement CI/CD pipelines and infrastructure-as-code practices to promote controls through DEV and UAT environments.

• Follow a native-first, GA-only approach, prioritising existing Azure security capabilities.

• Apply default-deny, least-privilege, and fail-closed principles to prevent unauthorised access.

• Design and execute positive and negative security tests to verify permitted operations and block unauthorised access.

• Produce audit-ready evidence, including permission exports, allow/deny matrices, tamper tests, and control designs.

• Coordinate with client platform, cloud networking, and SecOps teams to implement network segmentation and security dashboards.

• Manage control implementation through two-week sprint cycles, ensuring staged promotion and validation.

• Collaborate with architecture and governance stakeholders to support ARB, TRC, and security/compliance sign-offs.

• Drive continuous hardening of platform controls, ensuring they are operationally effective and verifiable.

Requirements :

• 6 - 10 years of experience in DevOps engineering, cloud security, platform engineering, or security engineering, with strong hands-on expertise in Microsoft Azure.