> Markdown version of [/jobs/ext/285248-cloud-security-engineer](https://www.wearedevelopers.com/jobs/ext/285248-cloud-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cloud Security Engineer - **Company:** Central Hudson - **Location:** Poughkeepsie, NY, United States - **Experience:** Expert - **Salary:** $73,000.0 - $171,300.0 - **Contract:** Permanent contract - **Skills:** Software System Penetration Testing, Microsoft Azure, Cloud Computing, Cloud Computing Security, Cloud Engineering, Cloud Storage, Cyber Security, Databases, Identity and Access Management, Intrusion Detection Systems, Role-Based Access Control, Azure Active Directory, Cloud Services, Security Information and Event Management, Data Logging, Computer Networking Systems, In-Plane Switching (IPS), Computerised Systems, Firewalls (Computer Science), Information Technology, Bicep, Microsoft Sentinel, Hardware Infrastructure, Terraform, Key Vault, Vulnerability Analysis - **Published:** May 16, 2026 - **Apply:** https://www.juju.com/job/00000000g070qk ## About the Role + Bachelor's degree in Computer Science, Information Technology or related field of study and relevant work experience in information security or a closely related domain. In lieu of a bachelor's degree, an associate's degree in the aforementioned fields with 5 years of information security or closely related experience or a high school diploma or equivalency degree and 5 years of information security to closely related experience will be considered. + Proven experience with Security Architecture and Engineering + Proven experience with creating and maintaining external and internal relationships with key stakeholders + Strong understanding of cybersecurity frameworks, standards, and best practices + Proficient in security technologies, including Cloud Security, Azure security solutions, SIEM solutions, IDS/IPS, firewalls, email security, and endpoint protection + Excellent communication skills, with the ability to collaborate effectively with diverse teams + Familiarity with regulatory requirements and compliance frameworks + Analytical mindset with the ability to assess complex situations and make informed decisions + A strong background with an understanding of the intersection between business and Information Security to improve security practices + A results-oriented mindset with the ability to solve problems and make decisions + Risk-based mindset with the ability to balance security with business enablement + Ability to work with limited direct supervision and professionally respond to constructive feedback + Valid driver's license Preferred: + Experience in the energy and utility industry, services industry, or a regulated or co-sourced environment + Deep hands on experience with Microsoft Azure services and security controls + Strong understanding of Cloud Security architecture principles + Experience with Microsoft Defender for Cloud, Microsoft Sentinel and other cloud-native security tools + Proficiency in Azure networking + In-depth knowledge of National Institute of Standards and Technology (NIST) Cybersecurity Framework and 20 Critical Security Controls, NERC Critical Infrastructure Protection (NERC CIP) + Strong knowledge of computer systems, information security software and hardware components, network systems, databases, and information security safeguards + Relevant certifications such as Azure Security Engineer Associate, Azure Solutions Architect, CISSP, CCSP, AZ-500 or SC-100 ## Description A Cloud Security Engineer is responsible for designing, implementing, and maintaining secure cloud environments. This role ensures that cloud infrastructure-primarily within Microsoft Azure-is architected and operated in a way that aligns with security best practices, compliance requirements, and organizational risk tolerance, while enabling the business to scale efficiently and securely. What does a Cloud Security** **Engineer do? + Partners with Cloud Engineering and Infrastructure teams to design and implement secure, scalable Azure architecture + Embeds security controls and best practices into cloud deployments, including networking, identity, and data protection + Evaluates and hardens Azure services such as Virtual Networks, NSGs, Azure AD (Entra ID), Key Vault, Storage Accounts, and compute resources + Reviews and provides security guidance on infrastructure-as-code (IaC) deployments (e.g., Bicep, ARM, Terraform) + Monitors, triages, and remediates security findings from tools such as Microsoft Defender for Cloud, SIEM/SOAR platforms, and vulnerability scanners + Acts as a primary liaison between Security and Cloud teams to drive timely remediation of vulnerabilities and misconfigurations + Analyzes results from third-party security assessments, penetration tests, and audits, and coordinate remediation efforts + Develops and maintains cloud security standards, baselines, and guardrails aligned to frameworks (e.g., CIS, NIST, Microsoft CAF) + Implements and manages identity and access controls using Azure AD / Entra ID, including RBAC, Conditional Access, and Privileged Identity Management (PIM) + Ensures secure configuration of logging, monitoring, and alerting across Azure environments + Supports incident response efforts related to cloud security events and help improve detection and response capabilities + Collaborates with IAM and Security Governance teams to enforce least privilege and strong identity controls in the cloud + Drives continuous improvement by identifying opportunities for automation, policy enforcement, and security posture enhancements + Stays current on Azure security capabilities, emerging threats, and industry best practices + Provides support for storm restoration efforts What does it take to be a Cloud Security Engineer? ## Related Videos - [Back(end) to the Future: Embracing the continuous Evolution of Infrastructure and Code](https://www.wearedevelopers.com/videos/440-back-end-to-the-future-embracing-the-continuous-evolution-of-infrastructure-and-code) - [Infrastructure as Code: The Developer's Secret Weapon](https://www.wearedevelopers.com/videos/1221-infrastructure-as-code-the-developer-s-secret-weapon) - [Best Practices for Using GitHub Secrets](https://www.wearedevelopers.com/videos/1214-best-practices-for-using-github-secrets) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Implementing Feature Environments with AWS and Terraform](https://www.wearedevelopers.com/videos/531-implementing-feature-environments-with-aws-and-terraform) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers)