Senior Azure Consultant | Cloud Infrastructure, Networking & Security

Senior Azure Consultant | Cloud Infrastructure, Networking & Security

• Cyber Security
• Microsoft Azure

FOKUS
• Architektur und Umsetzung sicherer Azure-, Hybrid-Cloud- und AI-Workloads – vom Design bis zur Betriebsübergabe.

BRANCHENERFAHRUNG
• Finanzsektor und internationale Banken
• Öffentlicher Dienst und hochregulierte Enterprise-Umgebungen
• Enterprise-IT mit 10.000–30.000 Benutzern.

AZURE SECURITY & LANDING ZONES
• Sichere Azure-Landing-Zones: Management Groups, Subscriptions, Azure Policy, RBAC, Resource Locks, Logging und Monitoring.
• Azure Network Security: VNets, VNet Peering, NSGs/UDRs, Private Endpoints, Private DNS, Azure Firewall, Application Gateway/WAF, DDoS Protection, VPN Gateway und ExpressRoute.
• Schutz von Compute, Storage, Datenbanken, App Services, Containern, APIs und Key Vault; Verschlüsselung, Managed HSM und sichere Admin-Zugriffe.

IDENTITY & ZERO TRUST
• Microsoft Entra ID: Conditional Access, MFA/Passwordless, PIM, Identity Protection, Access Reviews, Managed/Workload Identities, App Registrations und Hybrid Identity; Zero Trust und Least Privilege.

MICROSOFT DEFENDER & SENTINEL
• Defender for Cloud: CNAPP, CSPM, CWPP, Secure Score, Attack Path Analysis und Cloud Security Explorer; Schutz von Servern, Storage, Databases, App Services, Containers, APIs, Key Vault und AI Services.
• Defender XDR, Defender for Endpoint, Identity, Office 365 und Cloud Apps.
• Incident Analysis, Advanced Hunting, Vulnerability Management, ASR Rules und Endpoint Hardening.
• Microsoft Sentinel: SIEM/SOAR, Data Connectors, Analytics/Automation Rules, Incidents, Workbooks, Watchlists und Logic Apps; KQL, Threat Hunting und Detection Engineering.

AI & LLM SECURITY
• Security Engineering für LLMs, Microsoft Foundry, Azure OpenAI, Copilot, RAG-Anwendungen und AI Agents.
• KI Security Posture Management und Threat Protection; Schutz vor Prompt Injection, Indirect Prompt Injection, Data Leakage, Data/RAG Poisoning, Jailbreaks, Credential Theft und Agent/Tool Abuse.
• Sichere Identitäten, Key Vault, Content Safety, Prompt Shields, Guardrails, Monitoring und Logging; Integration mit Entra ID, Defender XDR und Sentinel.

AUSBILDUNG
• Dipl.-Ing. Informatik (fünfjähriges Hochschulstudium)

Azure Security
• Microsoft Certified: Cybersecurity Architect Expert (SC-100)
• Microsoft Certified: Azure Security Engineer Associate (AZ-500)
• Microsoft Certified: Information Security Administrator Associate (SC-401)
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Microsoft Certified: Security Operations Analyst Associate (SC-200)
• Security, Compliance, and Identity Fundamentals (SC-900)

AI Security
• Microsoft Certified: Cloud and AI Security Engineer Associate (SC-500)

Azure Architecture
• Microsoft Certified: Azure Solutions Architect Expert (AZ-305)
• Microsoft Certified: Azure Administrator Associate (AZ-104)
• Microsoft Certified: Azure Network Engineer Associate (AZ-700)

Microsoft Legacy
• MCP, MCSA, MCSE, MCTS, MCITP

IT Service Management
• ITIL v3 Foundation