> Markdown version of [/jobs/ext/4670931-azure-cloud-security-engineer](https://www.wearedevelopers.com/jobs/ext/4670931-azure-cloud-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Azure Cloud Security Engineer

- **Company:** LIGHTFEATHER IO LLC
- **Location:** Washington, DC, United States
- **Experience:** Experienced
- **Salary:** $120,000
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Microsoft Azure, Cloud Computing, Cloud Computing Security, Collaborative Software, Cyber Security, Information Systems Security Architecture Professional, Python (Programming Language), Microsoft Security Essentials, Windows PowerShell, Role-Based Access Control, Zero Trust Network Access, Software Deployment, Data Logging, Scripting, Azure Powershell, SC Clearance, Data Management, Terraform, Databricks
- **Published:** November 11, 2026
- **Apply:** https://www.dcjobsite.com/job.asp?id=3513153385&tx=KJ3939FFF&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54

## About the Role

* Active Secret clearance and the ability to obtain Top Secret.
 * 3+ years of hands-on experience securing Microsoft Azure environments.
 * Strong Azure infrastructure security fundamentals.
 * Hands-on experience with Conditional Access, Azure Policy, and Defender for Cloud.
 * Solid grasp of Zero Trust concepts: least privilege, shared responsibility, mutual authentication (mTLS), and the differences between tenancy, access, and continuous authentication.
 * Excellent written and verbal communication, including direct, frequent work with customers over Microsoft Teams and other collaboration tools.
 * Adaptability and a drive to pick up new technologies and responsibilities., * Microsoft certifications: AZ-500 (strongly preferred), AZ-104, SC-300, SC-900, or SC-200
 * Azure CLI and Microsoft Graph PowerShell.
 * Terraform and Python.
 * Working knowledge of NIST SP 800-53.
 * Experience securing Azure Databricks or other data platforms.
 * Exposure to AI model governance and security.
 * Familiarity with SOC operations and logging requirements.

## Description

* Advise customer teams on secure architecture, service usage, access design, and workload deployment best practices.
 * Review customer service configurations and proposed changes, and give clear recommendations and reference guidance.
 * Explain landing zone templates and where shared responsibility falls once customers take over their environments.
 * Secure the workloads and services the team deploys.
 * Design and maintain tenant-wide governance controls, including Conditional Access, Azure Policy, and Microsoft Defender for Cloud regulatory compliance.
 * Evaluate and apply new Microsoft security features and Zero Trust capabilities as the platform grows.
 * Extend Zero Trust principles to emerging services such as Azure Databricks and AI workloads. That includes least privilege, mutual authentication, default-deny access, and tenant isolation.
 * Support security operations with guidance on logging architecture, including audit, diagnostic, and traceable logs, and on reporting requirements.
 * Automate security and management tasks with scripting.