Azure Cloud Security Engineer II — Hybrid Role

Patient First; Richmond (VA); On-site; USD 125,000 - 150,000; Full time

Benefits offered by this job

Health, Dental and Vision insurance

Disability, Life and Long Term care

401(k) with employer match

Paid Annual Leave

Volunteer Time Off

Bereavement Leave

Holiday Pay

Discounted medical treatment

Recruitment bonus

Job summary

Patient First is seeking a skilled security engineer to implement and maintain cloud security controls across Azure and Microsoft 365. You will configure RBAC, policy, and identity governance while centralizing logs and alerts for security investigations.

You will drive security into design-time workflows, support governance, and align policies with industry frameworks. This full-time, on-site role offers competitive compensation in the Richmond, VA area.

Qualifications

• At least three years of experience in cybersecurity, security operations, cloud security, or hybrid infrastructure security roles.
• Experience with Azure security services and Defender for Cloud.
• Understanding of vulnerability management, logging, alerting, incident response, and compliance evidence expectations.
• Working knowledge of hybrid environments including Windows/Linux systems, networking, firewalls, SaaS/PaaS/IaaS security, and Microsoft 365.
• Knowledge of NIST, HIPAA, PCI, CIS, COBIT, or similar security frameworks.
• Azure Security Engineer Associate, CISSP, or comparable security certification.

Responsibilities

• Implementing and maintaining Defender for Cloud, Azure Policy, security baselines, and cloud posture recommendations.
• Configuring RBAC, Conditional Access, privileged access, and identity governance models for Azure and Microsoft 365.
• Maintaining centralized logging, alerting, and monitoring pipelines for cloud workloads and security investigations.
• Supporting security gates in deployment workflows, including policy validation and access review.
• Providing security input during architecture reviews, workload intake, and go-live readiness.
• Translating security policies into Azure Policy, RBAC standards, and operation requirements.
• Improving auditability by aligning monitoring, logging, access review, and compliance reporting to cloud workloads.
• Supporting security operations including firewall management, IDS/IPS/EDR management, security monitoring, and vulnerability management.
• Investigating alerts, participating in incident response, and supporting threat hunting and risk analysis.
• Assisting with security reviews for applications, systems, and third-party vendors.

Skills

Azure security services

RBAC & access control

SIEM / SOAR

Cloud security posture management

Vulnerability management

Incident response

Healthcare security knowledge

Effective risk communication

Education

High school diploma or equivalent

Tools

Microsoft Defender for Cloud

Sentinel

SIEM tools

EDR

Job description

Patient First is seeking a skilled security engineer to implement and maintain cloud security controls across Azure and Microsoft 365. You will configure RBAC, policy, and identity governance while centralizing logs and alerts for security investigations.

You will drive security into design-time workflows, support governance, and align policies with industry frameworks. This full-time, on-site role offers competitive compensation in the Richmond, VA area.