Azure Engineer - Azure Policy

The Judge Group
The Judge Group

Remote

Posted on Jul 14, 2026

Employment Type: Contract

Work Location: Remote

Experience Level: Mid-Senior Level

Seeking an Azure Engineer with strong expertise in Azure Policy, Governance, and Cloud Security to support the implementation and ongoing management of Azure governance initiatives. This role will be responsible for developing, modifying, and maintaining Azure Policies that enforce organizational standards, regulatory compliance, and security best practices across enterprise Azure environments.

The ideal candidate has hands-on experience with Azure Resource Manager (ARM), Infrastructure as Code (IaC), Azure Policy, Role-Based Access Control (RBAC), and enterprise cloud governance.

Responsibilities

  • Design, develop, and deploy Azure Policies to enforce governance and compliance standards.
  • Create and maintain custom Azure Policy definitions and policy initiatives (policy sets).
  • Implement policy assignments, exemptions, and remediation tasks.
  • Assess existing Azure Policies and recommend improvements aligned with security and compliance requirements.
  • Support Azure Landing Zone governance and implementation initiatives.
  • Configure and maintain Azure Role-Based Access Control (RBAC).
  • Collaborate with security, infrastructure, and cloud architecture teams to implement governance controls and policy changes.
  • Automate policy deployments using Infrastructure as Code tools, including ARM templates, Bicep, or Terraform.
  • Develop and maintain automation scripts using PowerShell and Azure CLI.
  • Monitor and report on policy compliance across Azure environments.
  • Troubleshoot policy conflicts, compliance issues, and deployment failures.
  • Document governance standards, policy configurations, operational procedures, and change records.
  • Participate in change management and production deployment processes.
  • Support governance strategies for Azure Management Groups and subscriptions.

Required Qualifications

  • 5+ years of experience with Microsoft Azure.
  • 3+ years of experience implementing Azure Governance and Azure Policy solutions.
  • Experience developing custom Azure Policy definitions.
  • Strong understanding of Azure Landing Zone architecture and governance principles.
  • Experience managing enterprise-scale Azure subscriptions and environments.
  • Knowledge of cloud security frameworks and standards, including CIS Benchmarks, NIST, ISO 27001, and Microsoft Cloud Security Benchmark.
  • Experience with Infrastructure as Code (IaC) methodologies and tools.
  • Strong scripting and automation experience using PowerShell.
  • Experience implementing and supporting Azure DevOps CI/CD pipelines.
  • Strong analytical, troubleshooting, and problem-solving skills.
  • Excellent written and verbal communication skills.

Preferred Qualifications

  • Microsoft Certified: Azure Administrator Associate.
  • Microsoft Certified: Azure Security Engineer Associate.
  • Microsoft Certified: Azure Solutions Architect Expert.
  • HashiCorp Terraform Associate Certification.
  • Experience supporting large enterprise Azure environments.
  • Experience working in regulated industries such as healthcare, financial services, or pharmaceuticals.

Required Technical Skills

  • Microsoft Azure Administration
  • Azure Policy
  • Azure Management Groups
  • Azure Resource Manager (ARM)
  • Azure Role-Based Access Control (RBAC)
  • Azure governance and compliance solutions
  • Azure Monitor
  • Microsoft Defender for Cloud
  • Azure Security Center
  • Azure CLI
  • Azure PowerShell
  • ARM Templates
  • Bicep
  • Terraform
  • Azure DevOps Pipelines
  • Git Version Control

Preferred Skills

  • Enterprise cloud governance
  • Cloud security and compliance
  • Infrastructure automation
  • Azure Landing Zones
  • DevOps and CI/CD practices
  • Change management and production deployment support
  • Cross-functional collaboration in enterprise environments
By providing your phone number, you consent to: (1) receive automated text messages and calls from the Judge Group, Inc. and its affiliates (collectively “Judge”) to such phone number regarding job opportunities, your job application, and for other related purposes. Message & data rates apply and message frequency may vary. Consistent with Judge's Privacy Policy, information obtained from your consent will not be shared with third parties for marketing/promotional purposes. Reply STOP to opt out of receiving telephone calls and text messages from Judge and HELP for help.

Apply now