Junior Azure Platform Engineer

Junior Azure Infra Apps Platform Engineer- Associate Consultant - MFT - KGS CH Junior Azure Platform Engineer Location: Offshore Function: Cloud Run Service Operations Type: Permanent, Fulltime Reports to: Service Ops Lead Platform Services KPMG Overview Joining KPMG means joining a talented team of exceptional colleagues who bring innovative thoughts and a natural curiosity to the work they do each day. No one type of person succeeds at KPMG; a diverse business requires diverse personalities, characters and perspectives. There really is a place for you here. You will be working within Group Digital Platform Services Operations which services the broader Firm through delivery of core technology and managed services capabilities, collaboration and innovation development services and building our Alliances network. Key Responsibilities Cloud Platform Support Assist in implementing and maintaining security configurations across Azure services and Landing Zones. Support platform security components including: Azure Firewall, NSGs, ASGs Private Endpoints, Virtual Networks, routing and segmentation Managed identities and Key Vault Contribute to platform hardening activities and securebydesign reviews. Security Monitoring & Incident Support Monitor and triage alerts from Defender for Cloud and Sentinel, escalating when necessary. Assist senior engineers in investigating platformlevel security events. Support the improvement of detection rules, dashboards, and reporting. Identity &Access Controls Support platform access governance using Azure RBAC and Privileged Identity Management (PIM). Assist with access reviews, entitlement hygiene, and platformlevel identity audits. Help enforce identity requirements such as MFA and Conditional Access. Governance &Compliance Help apply and monitor Azure Policy, tagging standards, and platform guardrails. Assist with compliance checks against frameworks like CIS Benchmarks and ISO 27001. Maintain platform documentation, configuration baselines, and evidence for audits. Automation &Scripting (Foundational Level) Contribute to basic automation tasks using PowerShell, Azure CLI, Bicep, or Terraform (training provided). Support continuous improvement of platform security tooling and automated checks. Collaboration &Continuous Learning Work closely with cloud engineers, architects, and Cyber Ops teams. Participate in platform security reviews, change boards, and engineering stand-ups. Stay updated on new Azure security features and evolving cloud threats. Engage in structured learning paths and certification development. Required Skills & Experience 12 years of experience in IT, cybersecurity, cloud operations, or related field (or strong educational/bootcamp background). Basic understanding of Azure concepts including subscriptions, resource groups, VNETs, RBAC, and monitoring. Foundational knowledge of security principles such as: Least privilege Network security basics Encryption Threat detection Strong interest in cloud security and platform engineering. Good communication skills and ability to document technical procedures. Preferred Qualifications (Nice to Have) Exposure to Azure tools such as: Defender for Cloud, Sentinel, Key Vault, PIM Basic scripting experience (PowerShell, Python, Azure CLI). Familiarity with compliance frameworks (CIS, ISO 27001, NIST). Relevant certifications or training paths: AZ900: Azure Fundamentals SC900: Security, Compliance & Identity Fundamentals AZ104: Azure Administrator (in progress or planned) AZ500: Azure Security Engineer (aspirational) Experience Level Entry Level