Cloud Engineer

The Judge Group; United States; On-site; USD 120,000 - 180,000; Full time

Job summary

The Judge Group is seeking an Azure Cloud Security Engineer to design, implement, and manage Microsoft Sentinel and Azure security solutions for a government client. You will detect, investigate, and respond to cyber threats while ensuring compliance with security requirements.

Responsibilities include building SIEM/SOAR, ingesting data sources, tuning KQL queries, and automating responses with Logic Apps. Focus on Zero Trust, governance, and incident response with the SOC.

Qualifications

• Bachelor’s degree in a related field and 5+ years in cybersecurity.
• 5+ years hands-on Microsoft Sentinel administration and engineering.
• Strong experience with Microsoft Sentinel, Azure Log Analytics, KQL, Logic Apps, Defender Suite.

Responsibilities

• Design, implement, and maintain Microsoft Sentinel SIEM/SOAR solutions.
• Ingest security data sources into Azure Log Analytics and manage data feeds.
• Develop and tune KQL queries, analytics rules, alerts, and dashboards.
• Build automated response playbooks with Azure Logic Apps.
• Conduct threat hunting, incident investigation, and SOC collaboration.
• Align Azure security controls with Zero Trust principles and governance.
• Assess vulnerabilities and support remediation; assist with FedRAMP/FISMA readiness.

Skills

Microsoft Sentinel

Azure Log Analytics

KQL (Kusto)

Microsoft Defender Suite

Zero Trust

PAM

Azure Security Services

CI/CD security

Education

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field

Tools

Azure Log Analytics

KQL

Azure Logic Apps

Defender Suite

PAM

Zero Trust architecture knowledge

Job description

Job Title: Azure Cloud Security Engineer

Duration: Contract 12+ Months

Job Description:

Seeking an experienced Azure Cloud Sentinel Engineer to support a key government client. This role is responsible for designing, implementing, and managing Microsoft Sentinel and Azure security solutions to detect, investigate, and respond to cyber threats while ensuring compliance with government security requirements.

Key Responsibilities:

• Design, implement, and maintain Microsoft Sentinel SIEM/SOAR solutions.
• Ingest and manage security data sources into Azure Log Analytics (Syslog, CEF, APIs, Threat Intelligence feeds).
• Develop and tune KQL queries, analytics rules, alerts, and dashboards.
• Build automated response playbooks using Azure Logic Apps and Microsoft Copilot for Security.
• Perform threat hunting, incident investigation, and response activities with SOC teams.
• Implement and manage Azure security controls aligned with Zero Trust principles.
• Assess vulnerabilities, analyze attacker TTPs, and support remediation efforts.
• Support cloud security governance, compliance, and audit activities, including FedRAMP and FISMA requirements.
• Provide security architecture guidance and contribute to cloud security strategy initiatives.

Required Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field.
• 5+ years of cybersecurity experience, including 5+ years of hands‑on Microsoft Sentinel administration and engineering.
• Strong experience with:
• Microsoft Sentinel, Azure Log Analytics, Kusto Query Language (KQL), Azure Logic Apps, Microsoft Defender Suite, Azure Security and Identity Services, Privileged Access Management (PAM), CI/CD security and application security scanning, Experience configuring and securing enterprise Azure environments.
• Knowledge of Zero Trust architecture and cloud security best-practices.

Preferred Qualifications

• Experience supporting FISMA, FedRAMP, and NIST compliance frameworks.
• Relevant certifications such as:
• CISSP, CCSP, Microsoft Azure Security Engineer Associate, Microsoft Cybersecurity Architect Expert,
• Experience collaborating with government clients, auditors, and executive stakeholders.
• Additional Technical Expertise
• Microsoft Defender XDR: Defender for Endpoint, Office 365, Identity, and Cloud Apps; Data Protection: Microsoft Purview, MIP, DLP, Key Vault
• Identity & Access Management: Entra ID (Azure AD), PIM, Conditional Access, Azure Lighthouse, Zero Trust
• Cloud Security: Azure Security Services, M365 Security, Multi-Cloud IAM