Azure Cloud Security Engineer

New Millenium Consulting; Fort Washington (Montgomery County); Hybrid; USD 110,000 - 170,000; Full time

Job summary

New Millenium Consulting is seeking an Azure Cloud Security Engineer to lead cloud governance and security posture across Azure and Microsoft 365, ensuring regulatory alignment and ongoing risk reduction.

You will design, maintain, and enforce cloud policies and baselines, collaborate with cloud engineering, remediate posture findings, and report progress to leadership.

The role also includes mentoring GRC analysts and building dashboards to communicate governance metrics to senior stakeholders.

Qualifications

• Experience designing cloud governance and security for Azure and Microsoft 365.
• Proficient in Azure Policy, policy as code, and remediation strategies.
• Strong understanding of cloud security controls and compliance requirements.

Responsibilities

• Provide strategic vision and roadmap for cloud governance and compliance across Azure/Microsoft 365.
• Design and enhance cloud security policies, standards, and baselines with documented exceptions.
• Oversee risk assessments to inform leadership on cloud posture and emerging risks.
• Spearhead governance and security posture management for Azure and Microsoft 365.
• Remediate posture findings with cloud engineering and report progress to leadership.
• Collaborate with cross-functional teams to embed governance into policies and standards.
• Mentor GRC analysts supporting cloud governance and compliance activities.
• Develop dashboards and pipelines to measure cloud compliance and governance metrics.

Skills

Azure Policy

Policy as Code

Azure Engineering

Terraform

Tools

ARM

Terraform

Microsoft 365

Job description

Job Title: Azure Cloud Security Engineer

Job Type: Full-time

Job Location: Fort Washington, PA (Flexible 1-2 days onsite)

A leading healthcare is seeking an Azure Cloud Security Engineer to join the security team. The Azure GRC Expert will be accountable for spearheading the organization's cloud governance and security posture management across the Azure and Microsoft 365 environment, ensuring sustained compliance with the organization's cloud security benchmark and the continuous reduction of cloud-based risk

Ideally, the Azure Cloud Security Engineer will have experience with:

• Azure Policy & Policy as Code
• Azure Engineering - Intermediate knowledge (Resources, Best Practices, Infrastructure as Code, Architecture basics
• Azure Resource Remediation - Via policy changes or infrastructure modules like ARM or Terraform
• AI Architecture -Conceptual knowledge with how custom AI solutions should be built securely.

Azure Cloud Security Engineer owns the design and ongoing maintenance of cloud-relevant policies, standards, and configuration baselines, and partners with cloud engineering to enforce secure configurations, remediate posture findings, and validate corrective actions. Provides targeted oversight of cloud-focused risk assessments, advises on governance priorities, and reports on cloud compliance and posture progress to leadership, advancing the organization's overall information security and compliance posture.

ESSENTIAL FUNCTIONS

• Provide strategic vision and roadmap for cloud governance and compliance across the Azure and Microsoft 365 environment, aligning cloud GRC activities with organizational objectives and regulatory requirements.
• Design and continually enhance cloud-related information security policies, standards, and configuration baselines, including processes to manage and document exceptions.
• Provide oversight of targeted risk assessments that support cloud governance and compliance objectives, synthesizing findings to inform leadership on cloud security posture and emerging cloud-based risks.
• Spearhead cloud governance and security posture management across the Azure and Microsoft 365 environment, ensuring sustained compliance with the organization's cloud security benchmark and recommending control settings to restrict insecure configurations.
• Partner with cloud engineering to remediate posture findings, validate corrective actions, and report on remediation progress and overall cloud security posture to leadership.
• Collaborate with cross-functional teams, particularly cloud engineering, to integrate cloud governance, security, and compliance requirements into operational policies, processes, and platform standards.
• Mentor and coach GRC analysts supporting cloud governance and compliance activities, fostering operational excellence and professional growth.
• Develop dashboards and data pipelines to measure and communicate cloud compliance, posture progress, and related governance metrics to senior stakeholders