Senior Cloud Security Engineer

We are seeking an experienced Senior Cloud Security Engineer to lead the design, implementation, and security of enterprise-level Microsoft Azure cloud environments. The candidate will play a key role in supporting the organization’s Azure cloud migration while ensuring infrastructure security aligns with Zero Trust principles, SEC530 requirements, and enterprise security and compliance standards.

The ideal candidate should have strong expertise in Azure Cloud Security, Security Architecture, Identity and Access Management (IAM), Network Security, Azure Policy, SIEM, Vulnerability Management, and Incident Response.

Roles & Responsibilities:

• Design, implement, and maintain secure enterprise Azure cloud infrastructure.
• Lead cloud security architecture and ensure compliance with enterprise security standards.
• Identify cloud security vulnerabilities, assess risks, and implement remediation strategies.
• Implement Zero Trust security principles and cloud governance controls.
• Configure and manage Azure Policies, Azure Automation, and security runbooks.
• Secure Azure cloud networks using Network Security Groups (NSGs), Azure Firewalls, and access controls.
• Implement Identity and Access Management (IAM), RBAC, and Microsoft Entra ID security controls.
• Monitor security events using SIEM tools and coordinate security incident response activities.
• Implement security controls and automated security gates within CI/CD pipelines.
• Conduct cloud security assessments, vulnerability scans, audits, and compliance reviews.
• Support Azure migration initiatives by ensuring secure cloud architecture and infrastructure configurations.
• Develop and maintain security documentation, architecture diagrams, IP addressing schemes, and access control standards.
• Provide technical leadership and security guidance to cloud engineering and DevOps teams.

• Microsoft Azure Cloud Security
• Azure Security Architecture and Infrastructure Security
• Azure IAM, RBAC, and Microsoft Entra ID
• Microsoft Defender for Cloud (Azure Security Center)
• Azure Policy and Azure Automation Runbooks
• Azure Network Security, NSGs, and Azure Firewall
• Zero Trust Security Architecture
• SIEM / SOC Operations and Security Monitoring
• Incident Response and Threat Management
• Vulnerability Management and Risk Assessment
• DevSecOps and CI/CD Pipeline Security
• Cloud Security Governance and Compliance
• Security Auditing and Documentation

Preferred Skills:

• Azure Landing Zones and Cloud Governance.
• Infrastructure as Code (Terraform / ARM Templates / Bicep).
• Microsoft Sentinel.
• Microsoft Defender XDR.
• Key Vault and Secrets Management.
• Azure Monitor and Log Analytics.
• Security Compliance Frameworks such as NIST, CIS, and SOC 2.
• Experience with government or public-sector cloud environments., * Strong hands-on experience in Microsoft Azure Cloud Security.
• Proven experience designing and securing enterprise cloud environments.
• Deep understanding of IAM, RBAC, network security, and Zero Trust principles.
• Experience with SIEM tools, vulnerability remediation, and incident response.
• Experience implementing DevSecOps security controls and cloud governance.
• Strong communication, documentation, and technical leadership skills.
• Ability to work in a hybrid environment in Mechanicsville, VA.