Azure Security Engineer

Habitat For Humanity Of Durham; Durham (NC); On-site; USD 120,000 - 160,000; Full time

Job summary

Fidelity is seeking a Cloud Security Engineer to join the Cloud Platform and Security Team. The role focuses on implementing secure-by-default controls in Microsoft Azure, collaborating with platform, product, and security teams to enable secure cloud adoption while accelerating software delivery.

You will work on Azure IAM, RBAC, and least-privilege concepts, with experience in Terraform, CI/CD, and security tooling like Defender for Cloud and Sentinel.

Qualifications

• Bachelor's degree or higher in CS/IT/Cybersecurity or related field; 2+ years in cloud engineering or security.

Responsibilities

• Contribute to cloud security trends, assess risks, and identify opportunities for new technologies.
• Design, implement, and maintain Azure cloud infrastructure and security controls with stakeholders.
• Automate security, monitoring, and continuous improvement initiatives to strengthen posture.

Skills

Azure Cloud Security

IaC Terraform

CI/CD pipelines

DevOps practices

Security concepts

Threat monitoring

Vulnerability management

Communication skills

Team collaboration

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

Azure Defender for Cloud

Sentinel

Wiz

InsightCloudSec

Job description

Job Description:

Note: Fidelity will not provide immigration sponsorship for this position

The Role

Fidelity is currently seeking a Cloud Security Engineer to join the Cloud Platform and Security Team. It is a fast-paced, dynamic environment with interactions across many enterprise applications and cloud technologies, ensuring an optimal internal associate experience. The candidate will help implement and maintain secure-by-default cloud controls within Microsoft Azure, partnering with platform, product, and security teams to support secure cloud adoption while enabling efficient software delivery.

• Contribute to the team's understanding of evolving cloud security trends and help assess risks and opportunities associated with new technologies.
• Support the development and implementation of cloud security solutions that improve efficiency and accelerate delivery.
• Design, implement, and maintain Azure cloud infrastructure and security controls in partnership with technical and business stakeholders.
• Actively share insights, technical knowledge, industry practices, and security best practices across the organization.
• Assist in strengthening cloud security posture through automation, monitoring, and continuous improvement initiatives.

The Expertise and Skills You Bring

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field, with approximately 2+ years of experience in cloud engineering, cloud security, infrastructure engineering, or software development.
• Hands-on experience deploying, securing, and supporting workloads in Microsoft Azure.
• Working knowledge of Azure services, including identity, networking, storage, and security capabilities.
• Experience with Infrastructure as Code (IaC) using Terraform or similar automation tools.
• Understanding of Azure IAM, RBAC, and least-privilege access principles.
• Experience working with CI/CD pipelines and modern DevOps practices.
• Familiarity with cloud security concepts such as vulnerability management, monitoring, logging, and secure configuration.
• Exposure to cloud security tools such as Microsoft Defender for Cloud, Sentinel, Wiz, InsightCloudSec, or similar platforms.
• Strong problem-solving skills, curiosity, and a desire to learn new cloud technologies and security capabilities.
• Excellent communication and collaboration skills, with the ability to work effectively across technical teams.

The Cloud Security Engineering team at Fidelity designs, builds, and operates the security foundations that protect our multi-cloud and hybrid platforms, spanning Azure, OCI, and on-premises private cloud environments. We partner with application, platform, and infrastructure teams to embed security-by-design across identity, network, data, workload, and compliance domains. The team builds automation, guardrails, and reusable security services that enable developers to deliver secure solutions at enterprise scale.

Operating in a modern DevSecOps culture, we are actively adopting AI-assisted development practices to accelerate secure engineering, automate detection and response, and scale our impact across the enterprise. As a member of the team, you will gain hands-on experience solving real-world cloud security challenges, contribute to enterprise-scale security initiatives, and grow your career while helping safeguard the financial well-being of millions of customers.

Fidelity's Onsite Working Model
Fidelity is transitioning to a full-time onsite working model through a phased rollout across regions and roles. Currently, some roles and locations require 100% onsite presence, while others require less. Onsite expectations are likely to evolve as the rollout continues. This transition does not apply to fully remote roles.

Certifications:

Category:

Information Technology

Please be advised that Fidelity’s business is governed by the provisions of the Securities Exchange Act of 1934, the Investment Advisers Act of 1940, the Investment Company Act of 1940, ERISA, numerous state laws governing securities, investment and retirement-related financial activities and the rules and regulations of numerous self-regulatory organizations, including FINRA, among others. Those laws and regulations may restrict Fidelity from hiring and/or associating with individuals with certain Criminal Histories.