Security Engineer, Cloud
Posted 2hrs ago
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Cloud Security Engineer securing Azure governance, identity, networking, monitoring, and compliance controls. Supporting landing zones, IaC guardrails, posture reviews, and cloud incident response for a U.S. organization.
Responsibilities:
- Design, implement, and maintain cloud security guardrails across Microsoft Azure environments, including subscription governance, resource organization, RBAC, and secure configuration baselines
- Develop and support Azure landing zone architectures, management group hierarchies, policy enforcement, governance standards, tagging strategies, and security controls
- Configure and maintain encryption, secrets management, logging, monitoring, alerting, and secure remote administration capabilities
- Collaborate with platform, engineering, and infrastructure teams on architecture reviews, secure cloud networking, and hardening initiatives
- Perform cloud security posture reviews to identify misconfigurations, excessive permissions, security gaps, and compliance drift
- Support investigation, detection, and remediation of cloud security incidents with Security Operations and infrastructure teams
- Maintain technical documentation and evidence demonstrating security control implementation, monitoring, and compliance alignment
- Establish repeatable security guardrails and standards for secure infrastructure-as-code and deployment practices
- Recommend secure connectivity, segmentation, workload hardening, and monitoring improvements
- Coordinate with Security Operations, GRC, architecture teams, and auditors on control validation and compliance reviews
- Enable engineering and delivery teams to adopt secure cloud development and deployment practices
Requirements:
- Strong knowledge of Microsoft Azure cloud security architecture, subscription governance, resource organization, and RBAC
- Experience designing and implementing Azure landing zones, management group structures, governance frameworks, and policy-based security controls
- Expertise in cloud identity and access management, privileged access controls, policy enforcement, secrets management, encryption, logging, and monitoring
- Strong understanding of cloud networking, segmentation, workload hardening, and secure connectivity principles
- Experience conducting cloud security assessments, posture reviews, and remediation planning
- Ability to build and support cloud detection capabilities and coordinate security investigations and response activities
- Working knowledge of infrastructure-as-code and policy-as-code concepts and secure deployment methodologies
- Proficiency in scripting, automation, and cloud operational tooling
- Ability to document technical architectures and communicate security requirements to technical and non-technical stakeholders
- Experience mapping cloud security controls to audit, compliance, and evidence requirements
- Knowledge of centralized logging, security monitoring, and detection engineering in cloud environments
- Minimum three years of hands-on cloud security, cloud infrastructure security, or related cybersecurity experience
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or related field, or equivalent combination of education and relevant professional experience
- Experience implementing Microsoft Azure security controls, governance frameworks, and cloud architecture best practices
- Experience with cloud security assessments, control reviews, remediation planning, and security posture management
- Experience with infrastructure-as-code, cloud automation, and cloud architecture concepts
- Preferred: experience supporting audit, compliance, and evidence collection; familiarity with Microsoft Defender for Cloud or equivalent tools; AWS/GCP exposure; cloud architecture reviews or landing zone implementations; relevant certifications such as AZ-500, CISSP, or CCSK
- Must be able to sit for prolonged periods and work at a computer
- Must be able to lift up to 15 pounds at times
















