**Who We Are** DEXIAN is a global American consulting company focused on technology talent solutions to support and strengthen our clients’ IT teams. We are present in 10 countries, with 45 offices worldwide. For more than 25 years, DEXIAN® has been serving global clients across multiple industries, with the mission of attracting and retaining the world’s top talent. Today, we are proudly recognized as one of the largest staffing augmentation companies in the United States by Staffing Industry Analysts (SIA). We are also a Minority\-Owned Company, and we take pride in our strong commitment to diversity. In Brazil, we have been operating since 2007 and have successfully partnered with more than 50 clients from different sectors of the economy. **What to Expect From Us** At DEXIAN, every movement is guided by five core values: collaboration, respect, fairness, commitment, and ingenuity. These are not just concepts — they define how we work, build partnerships, and support our teams every day. If you share these values, this is the right place for you to grow your career. DEXIAN Brazil strongly encourages diversity, and all opportunities are open to people with disabilities and rehabilitated professionals. **About the Client** This position will support one of our clients, focused on providing marina services, boat storage, maintenance, dockage, and premium waterfront experiences for the boating community. **About the position** * Own Azure security architecture, including landing zones, governance, networking, encryption, Key Vault, Defender for Cloud, Azure Policy, Sentinel, and secure\-by\-default patterns for Azure services. * Define and enforce cloud security standards across Azure and AWS, supporting governance, migrations, and security operations. * Architect and manage Palo Alto security solutions, including NGFW, Panorama, Prisma Cloud, Prisma Access/SASE, and Cortex integrations. * Lead data protection architecture, including classification, DLP, encryption, key management, Microsoft Purview, and cloud data platform security. * Drive Zero Trust and identity security through Microsoft Entra ID, Conditional Access, PIM, privileged access management, and workload identities. * Embed security into Infrastructure as Code and DevSecOps practices using Terraform, Bicep, CI/CD security controls, and policy\-as\-code. * Lead threat modeling, architecture reviews, risk management, security assessments, audits, and compliance initiatives. * Secure payment systems, OT/IoT environments, and distributed marina operations, ensuring segmentation, monitoring, and resilience. * Partner with engineering teams to promote secure design, automation, and continuous security improvement. **Required Qualifications** * 8\+ years in Information Security, with 5\+ years focused on Cloud Security Architecture or Engineering. * Deep hands\-on Azure security expertise (Entra ID, Defender for Cloud, Azure Policy, Networking, Key Vault, Sentinel). * Production experience securing AWS environments (IAM, Organizations, VPC, KMS, Security Hub, GuardDuty). * Strong experience with Palo Alto Networks (NGFW, Panorama, Prisma Cloud, Prisma Access, or Cortex). * Expertise in data security, DLP, encryption, cloud data platforms, and key management. * Strong knowledge of IAM, network security, threat detection, workload protection, and Zero Trust. * Hands\-on experience with Terraform and/or Bicep, plus scripting (PowerShell, Python, or Bash). * Experience with compliance frameworks such as PCI\-DSS, SOC 2, ISO 27001, or NIST. * Container and Kubernetes security experience (AKS/EKS). * Strong communication skills with both technical and executive stakeholders. **Preferred Qualifications** * Certifications such as AZ\-500, SC\-100, CISSP, CCSP, AWS Security Specialty, or PCNSE. * Microsoft Purview experience. * Experience with Microsoft Fabric, Synapse, Databricks, and AI/ML data governance. * Experience securing OT/IoT environments. * Background in M\&A integrations and multi\-site operations. * SIEM/SOAR engineering experience (Sentinel, Cortex XSIAM).