Azure Security Engineer

Visionaire Partners, LLC.; Atlanta (GA); Hybrid; USD 120,000 - 170,000; Full time

Job summary

Visionaire Partners, LLC. is seeking an Azure Security Engineer to design and implement defense-in-depth protections across the Microsoft Azure environment.

You will embed automated guardrails into delivery pipelines, harden cloud landing zones, and protect containerized infrastructure in a hybrid work setting in the greater Atlanta area. The role emphasizes Azure architecture, IaC security, container hardening, and ongoing posture management using Defender for Cloud and other tools.

Qualifications

• 4+ years of cloud engineering experience in security-focused roles.
• Proven track record securing Azure subscriptions, resource groups, and native tooling.
• Proficiency in Infrastructure-as-Code (Terraform, Bicep, or ARM) and CI/CD security gating.

Responsibilities

• Architect Azure defense-in-depth across compute, networking, storage, and policy.
• Embed guardrails into CI/CD pipelines and IaC checks.
• Harden landing zones and secure containerized workloads (Docker/AKS).
• Triage and remediate misconfigurations; align with OWASP guidelines.
• Develop security baselines, standards, and governance documentation.

Skills

Cloud engineering

Infrastructure security

CI/CD security

Networking fundamentals

Identity management

Tools

Terraform

Bicep

ARM Templates

Azure Defender for Cloud

Azure Key Vault

Job description

An established enterprise is seeking an Azure Security Engineer to architect, implement, and maintain defense-in-depth protections across its Microsoft Azure environment. In this role, you will embed automated guardrails into delivery pipelines, harden cloud landing zones, and protect containerized infrastructure.

What You’ll Do:

• Azure Architecture (30%): Enforce controls across compute, virtual networking, storage, Azure Policy, Defender for Cloud, and Key Vault.
• Pipeline Security & IaC (25%): Build guardrails and automated checks into CI/CD pipelines utilizing Terraform, Bicep, or ARM.
• Container Hardening (20%): Implement runtime protection, image verification, and access controls across Docker and AKS.
• Posture & Vulnerability Defense (15%): Triage, track, and remediate cloud misconfigurations using tools like Qualys; evaluate systems against OWASP guidelines.
• Governance (10%): Develop security baselines, documentation, and operational standards.

What You Bring:

• 4+ years of dedicated experience in cloud engineering, infrastructure defense, and information security. Strong hands-on engineering and configuration.
• Proven track record securing Azure subscriptions, resource groups, and native security tooling.
• Proficiency in Infrastructure-as-Code (Terraform, Bicep, or ARM) and CI/CD security gating.
• Solid foundation in cloud networking (VNet peering, NSGs, private endpoints), identity management, and encryption.
• Direct-hire preferred (contract-to-hire considered).
• Competitive base salary + performance bonus, 401(k) match, tuition reimbursement, paid parental leave, and generous PTO.
• Hybrid schedule (2 days remote/week) based in the greater Atlanta area.
• Must be US work-authorized (no sponsorship).

#LI-Hybrid #AzureSecurity #DevSecOps #CloudJobs