Azure Security Engineer for Government Cloud Modernization

Nava; United States; Remote; USD 110,000 - 160,000; Full time

Job summary

Nava is seeking a Security Engineer to design and implement a secure Azure cloud environment for a large-scale government modernization effort. You will focus on identity and access management, monitoring, and policy enforcement across the tenant, partnering with cloud architects and client stakeholders.

The ideal candidate has hands-on experience with Azure security tools (Defender for Cloud, Entra ID), IAM best practices, and compliance frameworks such as HIPAA and ATO processes, to help our

Qualifications

• Experience with Azure cloud security, including Microsoft Entra ID and Defender for Cloud.
• Strong knowledge of Identity and Access Management (IAM), including RBAC and privileged access controls.
• Familiarity with security and compliance frameworks (e.g., HIPAA, state security standards, ATO processes).

Responsibilities

• Design and implement identity and access management (IAM) models, including RBAC and privileged access controls.
• Configure and advise on security tools such as Microsoft Defender for Cloud.
• Define and enforce security policies and governance guardrails using Azure Policy.
• Set up centralized logging, monitoring, and threat detection capabilities.
• Design key management and secrets handling solutions (e.g., Azure Key Vault).
• Support compliance efforts, including HIPAA alignment and ATO preparation activities.
• Collaborate with teams to identify security risks and define remediation approaches.
• Contribute to secure cloud architecture decisions, including networking and access patterns.
• Support Infrastructure-as-Code (IaC) and CI/CD practices to ensure secure deployments.
• Create security documentation, runbooks, and provide guidance to enable client teams to operate securely

Skills

Azure security

IAM RBAC

Defender for Cloud

HIPAA compliance

ATO processes

Tools

Azure Policy

Azure Key Vault

Job description

Nava is seeking a Security Engineer to design and implement a secure Azure cloud environment for a large-scale government modernization effort. You will focus on identity and access management, monitoring, and policy enforcement across the tenant, partnering with cloud architects and client stakeholders.

The ideal candidate has hands-on experience with Azure security tools (Defender for Cloud, Entra ID), IAM best practices, and compliance frameworks such as HIPAA and ATO processes, to help our