Cloud Security & Compliance Engineer

If you're seeking a sense of community and the ability for growth, look no further. Since 1982, we have been 100% dedicated to our people. Our approach permits greater ownership for individuals and welcomes input into decisions for a thriving workplace and happy employees. Our people are the core reason for AIS' success. As an employee owned company, we are looking for individuals that are passionate about finding innovative solutions, and excited about emerging technologies and capabilities.

This role is responsible for implementing secure authentication, identity management, and access controls across Azure and Databricks environments, ensuring compliance with regulatory standards like GDPR and SOC 2. The engineer will manage secrets, enforce network isolation, support audit readiness, and enable secure onboarding of teams and services through infrastructure-as-code and Azure-native security tools.

- Manage authentication and SSO using Azure Entra ID (Azure AD).
- Implement RBAC and managed identities for AKS, Blob, PostgreSQL, and Databricks

- Onboard engineers to proper groups for RBAC access to infrastructure

- Establish new secure authentication mechanisms in Databricks, AI Foundry and AKS to leverage Workload Identity based access where possible

- Request and justify new networking patterns at the IP level with documentation

- Secure secrets and credentials in Azure Key Vault with purge protection

- Secure OpenAI API access via APIM policies and enforce network isolation
- Ensure compliance with GDPR, SOC 2, and conduct regular audits

This posting is part of our ongoing talent pipeline initiative. While there may not be an immediate opening, we are actively building a network of qualified candidates for future opportunities. If you're interested in being considered when a role becomes available, we encourage you to submit your resume.

• This is a remote position with occasional travel (if needed)

• Advanced Terraform for infrastructure automation

• Strong understanding of Azure roles, RBAC, and least-privileged access principles

• Experience with identity and access management in Azure, including Entra ID and Workload Identity

• Proficiency in secret and credential management across cloud environments (e.g., Azure Key Vault)

• Solid grasp of Kubernetes fundamentals and AKS integration

• Familiarity with Azure Policy and network security configurations

• Experience conducting audits and ensuring compliance with standards such as GDPR and SOC 2

Applied Information Sciences does not discriminate on the basis of race, national origin, religion, color, gender, sexual orientation, age, disability, protected veteran status, or any other basis. Employment decisions are based solely on qualifications, merit, and business needs.