VDOT Senior Cloud Security Engineer

Senior Azure Cloud Security Engineer

Location

Mechanicsville, VA

Experience

8+ Years Cloud / 5+ Years Cloud Security

Work Arrangement

Hybrid

Interview Process

Phone & In-Person

Pay Rate

$75.00 to $81.00

Position Overview

We are seeking an experienced Senior Azure Cloud Security Engineer to support a large-scale enterprise Azure cloud migration and security modernization initiative.

The ideal candidate will have strong hands-on expertise in Azure cloud security, infrastructure engineering, network security, SIEM, incident response, vulnerability management, and identity and access management (IAM). This position requires someone who can both design secure cloud architectures and implement security solutions in complex enterprise environments.

Key Responsibilities

• Design, implement, and secure enterprise Microsoft Azure cloud infrastructure.
• Configure and manage Azure Firewall, NSGs, WAF, Application Gateway, virtual networks, and network segmentation.
• Implement security monitoring and threat detection using Splunk, Microsoft Sentinel, Azure Monitor, and Log Analytics.
• Lead security investigations, incident response, threat hunting, and vulnerability remediation.
• Develop Azure Policies and Azure Automation runbooks to enforce compliance and automate security operations.
• Implement identity security controls, including IAM, RBAC, PAM, MFA, and Zero Trust.
• Support cloud security posture management using CSPM, CWPP, and CNAPP solutions.
• Collaborate with Cloud Engineering, DevOps, Infrastructure, and Security Operations teams.
• Conduct security risk assessments, support compliance audits, and provide technical leadership.

Required Qualifications

• 8+ years of enterprise cloud engineering or infrastructure experience.
• 5+ years of hands-on cloud security experience.
• Advanced experience securing Microsoft Azure enterprise environments.
• Strong knowledge of Azure Firewall, NSGs, WAF, Azure Monitor, Log Analytics, and virtual networking.
• Hands-on experience with Splunk, Microsoft Sentinel, SIEM monitoring, log analysis, and threat detection.
• Experience with incident response, threat hunting, security investigations, and vulnerability management.
• Experience with Tenable, Nessus, Microsoft Defender, CSPM, CWPP, or CNAPP.
• Experience developing Azure Policies and Azure Automation runbooks.
• Strong understanding of IAM, RBAC, PAM, Zero Trust, CIS Benchmarks, NIST CSF, NIST 800-53, and SEC530.
• Experience working in large-scale, highly regulated enterprise or government environments.
• Strong communication, problem-solving, and technical leadership skills.

Certifications

Required

Azure Security Engineer Associate, CompTIA Security+, CCSP

Preferred

Microsoft Azure AZ-305

Apply today if you are a hands-on Azure Cloud Security Engineer with strong enterprise infrastructure and cybersecurity experience.