Senior Cloud Security Engineer- Hybrid- Mechanicsville, VA

Seeking a Senior Cloud Security Engineer to secure and support enterprise Azure infrastructure and migration. The role focuses on cloud security architecture, Zero Trust, compliance, vulnerability management, identity and access management, security monitoring, and incident response.

Key Responsibilities:

• Design, implement, and secure enterprise Azure cloud environments.

• Identify cloud vulnerabilities, assess risks, prioritize remediation, and validate fixes.

• Configure Azure Firewall, WAF, NSGs, Application Gateways, VNets, and network segmentation.

• Implement Azure Policies, security controls, RBAC, MFA, and least-privilege access.

• Monitor security events using SIEM tools, including Microsoft Sentinel and Splunk.

• Lead cloud security investigations, incident response, threat hunting, and remediation tracking.

• Implement security gates in deployment pipelines and collaborate with engineering, DevOps, SOC, and governance teams.

• Maintain security documentation, architecture diagrams, compliance evidence, and audit readiness.

• Provide technical leadership and mentor junior engineers.

Required Qualifications:

• 8+ years of enterprise cloud experience, including 5+ years in cloud security.

• Strong hands-on Azure cloud engineering and security experience.

• Experience with IAM, RBAC, PAM, Azure Policy, Automation Runbooks, and cloud networking.

• Knowledge of SIEM, Splunk Query Language, Microsoft Sentinel, vulnerability scanning, CNAPP, CWPP, and cloud security posture management.

• Experience with incident response, log analysis, threat intelligence, and vulnerability remediation.

• Knowledge of SEC530, Zero Trust, CIS Benchmarks, NIST CSF, and NIST 800-53.

• Experience in highly regulated or government environments.

• Strong communication, problem-solving, and technical leadership skills.

Required Certifications:

• Microsoft Azure Security Engineer Associate

• CompTIA Security+

• Certified Cloud Security Professional (CCSP)

Preferred:

• Microsoft Azure Infrastructure Solutions certification (AZ-305).