Azure Security Engineer

Visionaire Partners; Tucker (GA); Hybrid; USD 110,000 - 165,000; Full time

Benefits offered by this job

Performance bonus

401(k) match

Tuition reimbursement

Paid parental leave

Generous PTO

Hybrid schedule (2 days remote/week)

Job summary

Visionaire Partners, LLC is seeking an Azure Security Engineer to architect, implement, and maintain defense-in-depth protections across its Microsoft Azure environment. You will embed automated guardrails into delivery pipelines, harden cloud landing zones, and protect containerized infrastructure.

Responsibilities include enforcing Azure controls, integrating security into CI/CD, container hardening, vulnerability defense, and governance groundwork.

Qualifications

• 4+ years of cloud engineering, infrastructure defense, and information security.
• Proven track record securing Azure subscriptions, resource groups, and native security tooling.
• Proficiency in Infrastructure-as-Code (Terraform, Bicep, or ARM) and CI/CD security gating.
• Hands-on container defense with Docker and Kubernetes/AKS.
• Strong foundation in cloud networking, identity management, and encryption.

Responsibilities

• Architect and enforce Azure controls across compute, networking, storage, Policy, Defender, and Key Vault.
• Build guardrails and automated checks into CI/CD pipelines using IaC tools.
• Harden containers with runtime protection, image verification, and access controls.
• Triage, track, and remediate misconfigurations per OWASP guidelines.
• Develop security baselines, documentation, and operational standards.

Skills

Cloud security

Azure security

CI/CD security

Security governance

Threat defense

Tools

Terraform

Bicep

ARM

Azure Policy

Defender for Cloud

Key Vault

Qualys

Docker

Kubernetes

AKS

Job description

An established enterprise is seeking an Azure Security Engineer to architect, implement, and maintain defense-in-depth protections across its Microsoft Azure environment. In this role, you will embed automated guardrails into delivery pipelines, harden cloud landing zones, and protect containerized infrastructure.

What You'll Do

• Azure Architecture (30%): Enforce controls across compute, virtual networking, storage, Azure Policy, Defender for Cloud, and Key Vault.
• Pipeline Security & IaC (25%): Build guardrails and automated checks into CI/CD pipelines utilizing Terraform, Bicep, or ARM.
• Container Hardening (20%): Implement runtime protection, image verification, and access controls across Docker and AKS.
• Posture & Vulnerability Defense (15%): Triage, track, and remediate cloud misconfigurations using tools like Qualys; evaluate systems against OWASP guidelines.
• Governance (10%): Develop security baselines, documentation, and operational standards.

What You Bring

• 4+ years of dedicated experience in cloud engineering, infrastructure defense, and information security. Strong hands-on engineering and configuration.
• Proven track record securing Azure subscriptions, resource groups, and native security tooling.
• Proficiency in Infrastructure-as-Code (Terraform, Bicep, or ARM) and CI/CD security gating.
• Hands-on container defense experience (Docker, Kubernetes/AKS).
• Solid foundation in cloud networking (VNet peering, NSGs, private endpoints), identity management, and encryption.

Perks & Details

• Direct-hire preferred (contract-to-hire considered).
• Competitive base salary + performance bonus, 401(k) match, tuition reimbursement, paid parental leave, and generous PTO.
• Hybrid schedule (2 days remote/week) based in the greater Atlanta area.
• Must be US work-authorized (no sponsorship).

#AzureSecurity #DevSecOps #CloudJobs