Cloud Architect

Santcore Technologies; Washington (District of Columbia); Remote; USD 123,000 - 142,000; Full time

Job summary

A leading company in IT Services seeks a Sr. Cloud & Network Security Engineer to enhance security across cloud environments. The role involves hands-on security configuration reviews, technical assessments, and collaboration with engineering teams to improve cloud security posture. Ideal candidates will have extensive experience in Azure and Office 365 security.

Qualifications

• 6+ years of experience in cloud security, particularly in Azure and Office 365 environments.
• Hands-on experience with security architecture reviews for cloud-native applications.

Responsibilities

• Perform hands-on security configuration reviews of Azure resources.
• Conduct technical assessments of Azure Kubernetes Service (AKS) clusters.
• Deliver detailed technical risk reports with remediation guidance.

Skills

Analytical

Problem-Solving

Collaboration

Education

Bachelor’s Degree in Information Security

Advanced Degree in Information Security

Tools

Azure

Office 365

IAM

AKS

NIST IoT security framework

Job description

Direct message the job poster from Santcore Technologies

Director Business Development at Santcore Technologies

Job: Sr. Cloud & Network Security Engineer

Location: Washington, DC (Remote)

Working Model:

• Remote with in-person requirements once a quarter (Tuesdays, Wednesdays, Thursdays for 3 days).
• Travel expenses are not reimbursed.

Preference:

• Local candidates preferred (East Coast only due to travel requirements).
• On-site Requirement: More on-site presence in the first few months, then transitioning to remote with quarterly on-site travel.

Work Authorization: Any

Rate: $75/hr (C2C)

Job Title: Sr. Cloud & Network Security Engineer

Job Summary:

We are seeking an experienced and hands-on Cloud Security Engineer to perform security configuration reviews and technical assessments across our cloud environments, specifically in Azure, Office 365, IAM, AKS, network security, and IoT security. This role requires a technical expert who is capable of performing in-depth security configuration reviews, conducting technical assessments, and implementing security improvements for cloud-native applications and hybrid environments. The ideal candidate will have hands-on experience in security configuration, security architecture, and vulnerability assessments, and should not just be focused on GRC or compliance.

Key Responsibilities:

Azure Security Configuration Reviews:

• Perform hands-on security configuration reviews of Azure resources, including Azure Firewall, Network Security Groups (NSGs), Azure Key Vault, Storage Accounts, and Defender for Cloud security recommendations.
• Review and implement security best practices for Azure cloud configurations and ensure compliance with security benchmarks.
• Conduct technical assessments of Azure Kubernetes Service (AKS) clusters, evaluating workload isolation, RBAC misconfigurations, network policies, and alignment with CIS benchmarks.

Office 365 Security Hardening:

• Review and harden Office 365 security settings, including Data Loss Prevention (DLP) policies, Advanced Threat Protection (ATP) configurations, Secure Score recommendations, and conditional access policies.

Identity and Access Management (IAM) Configuration:

• Evaluate IAM configurations across Azure AD and Entra ID, identifying and addressing excessive permissions, legacy authentication risks, and role misalignments.

Security Architecture Reviews:

• Participate in security architecture reviews for cloud-native applications, assessing ingress/egress flows, encryption practices, identity management, and resource isolation.

Network Security Assessments:

• Perform network security assessments across hybrid environments, including reviewing network segmentation, firewall rules, VPN configurations, and cloud perimeter defenses.

IoT Security Review:

• Review IoT security posture, evaluating authentication methods, firmware validation, and secured communication channels in alignment with the NIST IoT security framework.

Risk Reporting and Remediation Guidance:

• Deliver detailed technical risk reports, providing remediation guidance for misconfigured services, insecure APIs, and identity-based attack surfaces.

Configuration Scans and Security Improvements:

• Use tools like Azure Policy, Defender for Cloud, and Prisma Cloud to perform configuration scans and integrate findings into actionable security improvements.

Collaboration and Support:

• Collaborate closely with cloud engineering teams to validate remediation efforts, test hardened configurations, and support change deployment cycles to continuously improve cloud security posture.

Key Qualifications:

• Hands-on Experience: Proven experience in performing security configuration reviews, cloud security assessments, and IAM configuration evaluations.
• Technical Expertise: Strong hands-on expertise with Azure, Office 365, AKS, IAM, network security, and cloud-native application security.
• Certifications: CISM or CISSP (preferred), along with relevant cloud security certifications (e.g., CCSP, Microsoft Certified: Azure Solutions Architect Expert, etc.).
• Security Frameworks: Familiarity with security frameworks such as CIS, NIST, SOC 2, ISO 27001, and GDPR.
• Analytical Skills: Strong analytical and problem-solving skills to evaluate complex security configurations and provide actionable remediation steps.
• Collaboration Skills: Ability to work closely with engineering teams to implement security improvements and ensure secure cloud deployments.

Desired Experience:

• 6+ years of experience in cloud security, particularly in Azure and Office 365 environments.
• Hands-on experience with security architecture reviews for cloud-native applications.
• Experience in hybrid environment security, including network segmentation and firewall rule reviews.
• Experience with IoT security and implementing NIST IoT security framework standards.

Education

Graduation Year: 2015 or earlier

• Bachelor’s Degree in Information Security, Computer Science, Engineering, Mathematics, Business, or related field plus a minimum of 12 years of relevant experience in regulated industries as an IT security architect or Cloud & Network Security Engineer.
• OR
• Advanced Degree in Information Security, Computer Science, Engineering, Mathematics,

Business, or related field with a minimum of 6 years of relevant experience in the same role.

Certifications

• Minimum Required: CISSP or CISM·
• Preferred Certifications:
• CCSP
• MicrosoftCertified: Cybersecurity Architect Expert
• Microsoft Certified: Azure Solutions Architect Expert

Seniority level

• Seniority level

  Mid-Senior level

Employment type

• Employment type

  Contract

Job function

• Job function

  Information Technology

• Industries

  IT Services and IT Consulting

Referrals increase your chances of interviewing at Santcore Technologies by 2x

Sign in to set job alerts for “Cloud Architect” roles.

Washington, DC $123,640.00-$141,265.00 1 week ago

Washington, DC $150,000.00-$185,000.00 4 months ago

Baltimore, MD $167,032.32-$226,686.72 1 month ago

Baltimore, MD $167,032.32-$226,686.72 1 month ago

Arlington, VA $167,032.32-$226,686.72 1 month ago

Tysons Corner, VA $167,032.32-$226,686.72 1 month ago

Arlington, VA $167,032.32-$226,686.72 1 month ago

Baltimore, MD $214,755.84-$310,202.88 1 month ago

Arlington, VA $214,755.84-$310,202.88 1 month ago

Cloud Architect and DevOps Intern Apprentice

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.