Azure Cloud Security Engineer: CSPM, Kubernetes & Zero Trust

TherapyNotes.com; Pennsylvania; On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Health, dental, vision, life, and STD

401(k) with company contributions

Profit sharing

Mentorship program

Extensive onboarding

Job summary

TherapyNotes LLC is seeking an experienced Cloud Security Engineer to secure our Azure-based cloud infrastructure, containerized workloads, and IaC pipelines in a healthcare-regulated environment. The role emphasizes CSPM, container security, and Zero Trust with involvement in incident response and governance.

You will own security for cloud infrastructures, collaborate with IT/SRE and development teams, and help advance identity management, network security, and secure SDLC practices within a

Qualifications

• Bachelor’s degree in information security, CS, or related field preferred; equivalent experience considered.
• 5+ years of cloud security engineering or related role.
• Deep hands-on experience securing cloud infrastructure and cloud-based applications (Azure preferred).
• Hands-on network security experience with segmentation and firewall controls.
• Experience securing containerized workloads and Kubernetes environments (AKS).
• Experience with CSPM and remediating misconfigurations across clouds.
• Experience securing IaC orchestration platforms (Terraform/OpenTofu).
• Experience with Microsoft Entra ID—CA, Entitlement Management, and JIT privileged access.
• Experience with Zero Trust / SASE tooling (Cloudflare Zero Trust, WAF, Gateway).
• Knowledge of CIS/NIST/ISO 27001 and HITRUST/PCI DSS compliance.

Responsibilities

• Manage and secure cloud infrastructure and cloud-based applications, with a focus on Azure.
• Secure containerized workloads and Kubernetes environments (AKS) — network policy, workload identity, runtime protection, container image scanning.
• Own CSPM — identify and remediate misconfigurations across cloud environments.
• Secure IaC orchestration platforms — access control, secrets management, deployment approvals for Terraform/OpenTofu.
• Manage identities in Microsoft Entra ID with Conditional Access and JIT privileged access models.
• Review network diagrams and security input on segmentation and data flows with IT/SRE teams.
• Administer Zero Trust network access and edge security tooling for corporate and cloud resources.
• Oversee SIEM, DLP, E/XDR, vulnerability management and incident response activities.
• Monitor alerts, respond to incidents, participate in on-call rotation.
• Develop queries, scripts, integrations to improve cloud security operations.
• Collaborate with development to embed security in SDLC/CI-CD pipelines.
• Conduct periodic cloud config/access reviews for compliance.
• Support audits and governance, risk management, and compliance efforts.

Skills

Cloud security engineering

Kubernetes security

CSPM

IaC security (Terraform/OpenTofu)

Entra ID / CA / JIT

Zero Trust / SASE

HIPAA/HITRUST familiarity

Security certifications (CISSP/SSCP/S+

Azure/AWS security

Incident response / threat analysis

Education

Bachelor's degree in information security or related field

Tools

AKS

Terraform/OpenTofu

GitOps tooling (Argo/Flux)

Job description

TherapyNotes LLC is seeking an experienced Cloud Security Engineer to secure our Azure-based cloud infrastructure, containerized workloads, and IaC pipelines in a healthcare-regulated environment. The role emphasizes CSPM, container security, and Zero Trust with involvement in incident response and governance.

You will own security for cloud infrastructures, collaborate with IT/SRE and development teams, and help advance identity management, network security, and secure SDLC practices within a