> Markdown version of [/jobs/ext/3954338-vdot-senior-cloud-security-engineer](https://www.wearedevelopers.com/jobs/ext/3954338-vdot-senior-cloud-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # VDOT Senior Cloud Security Engineer - **Company:** The Custom Group of Companies - **Location:** Mechanicsville, VA, United States - **Experience:** Expert - **Salary:** $156,000.0 - $168,480.0 - **Contract:** Permanent contract - **Skills:** Microsoft Azure, Cloud Computing, Cloud Computing Security, Cloud Engineering, CompTIA Security+, Cyber Security, DevOps, Identity and Access Management, Intrusion Detection and Prevention, Network Security, Log Analysis, Network Segmentation, Network Virtualization, Role-Based Access Control, Zero Trust Network Access, Security Information and Event Management, Software Engineering, Software Vulnerability Management, Azure Automation, Cloud Monitoring, Firewalls (Computer Science), National Institute of Standards and Technology Cybersecurity Framework, Cybercrime, Nessus, Microsoft Sentinel, CIS Benchmarks, Splunk - **Published:** October 27, 2026 - **Apply:** https://www.careerbuilder.com/job-details/vdot-senior-cloud-security-engineer-mechanicsville-va--278d8ce5-3e1b-47af-9249-40357b2b3cb8 ## About the Role Cloud Computing, Software Engineering, Cloud Computing, Software Engineering, Microsoft Windows Azure, Incident Response, Security Information and Event Management (SIEM), Network Security, Computer Security, Cloud Architecture, The ideal candidate will have strong hands-on expertise in Azure cloud security, infrastructure engineering, network security, SIEM, incident response, vulnerability management, and identity and access management (IAM). This position requires someone who can both design secure cloud architectures and implement security solutions in complex enterprise environments., 8+ years of enterprise cloud engineering or infrastructure experience. * 5+ years of hands-on cloud security experience. * Advanced experience securing Microsoft Azure enterprise environments. * Strong knowledge of Azure Firewall, NSGs, WAF, Azure Monitor, Log Analytics, and virtual networking. * Hands-on experience with Splunk, Microsoft Sentinel, SIEM monitoring, log analysis, and threat detection. * Experience with incident response, threat hunting, security investigations, and vulnerability management. * Experience with Tenable, Nessus, Microsoft Defender, CSPM, CWPP, or CNAPP. * Experience developing Azure Policies and Azure Automation runbooks. * Strong understanding of IAM, RBAC, PAM, Zero Trust, CIS Benchmarks, NIST CSF, NIST 800-53, and SEC530. * Experience working in large-scale, highly regulated enterprise or government environments. * Strong communication, problem-solving, and technical leadership skills. Certifications Required: Azure Security Engineer Associate, CompTIA Security+, CCSP Preferred: Microsoft Azure AZ-305 Apply today if you are a hands-on Azure Cloud Security Engineer with strong enterprise infrastructure and cybersecurity experience. ## Description We are seeking an experienced Senior Azure Cloud Security Engineer to support a large-scale enterprise Azure cloud migration and security modernization initiative., * Design, implement, and secure enterprise Microsoft Azure cloud infrastructure. * Configure and manage Azure Firewall, NSGs, WAF, Application Gateway, virtual networks, and network segmentation. * Implement security monitoring and threat detection using Splunk, Microsoft Sentinel, Azure Monitor, and Log Analytics. * Lead security investigations, incident response, threat hunting, and vulnerability remediation. * Develop Azure Policies and Azure Automation runbooks to enforce compliance and automate security operations. * Implement identity security controls, including IAM, RBAC, PAM, MFA, and Zero Trust. * Support cloud security posture management using CSPM, CWPP, and CNAPP solutions. * Collaborate with Cloud Engineering, DevOps, Infrastructure, and Security Operations teams. * Conduct security risk assessments, support compliance audits, and provide technical leadership.