Cloud Security Engineer

Visionaire Partners; Tucker (GA); Hybrid; USD 120,000 - 170,000; Full time

Benefits offered by this job

401(k) match

Tuition reimbursement

Paid parental leave

Generous PTO

Job summary

Visionaire Partners, LLC. is seeking an Azure Security Engineer to architect, implement, and maintain defense-in-depth protections across a Microsoft Azure environment. The role emphasizes embedding automated guardrails into pipelines, hardening landing zones, and securing containerized workloads.

You will triage vulnerabilities, enforce governance baselines, and collaborate with engineering teams. The position offers a hybrid schedule in the greater Atlanta area, with US work authorization

Qualifications

• 4+ years of dedicated experience in cloud engineering, infrastructure defense, and information security.
• Experience securing Azure subscriptions, resource groups, and native security tooling.
• Proficiency in Infrastructure-as-Code (Terraform, Bicep, or ARM) and CI/CD security gating.
• Strong foundation in cloud networking and encryption.

Responsibilities

• Azure Architecture (30%): Enforce controls across compute, virtual networking, storage, Azure Policy, Defender for Cloud, and Key Vault.
• Pipeline Security & IaC (25%): Build guardrails and automated checks into CI/CD pipelines utilizing Terraform, Bicep, or ARM.
• Container Hardening (20%): Implement runtime protection, image verification, and access controls across Docker and AKS.
• Posture & Vulnerability Defense (15%): Triage, track, and remediate cloud misconfigurations using tools like Qualys; evaluate systems against OWASP guidelines.
• Governance (10%): Develop security baselines, documentation, and operational standards.

Skills

Cloud security

Azure security

CI/CD security gating

Infrastructure-as-Code

Container security

Tools

Terraform

Bicep

ARM

Job description

An established enterprise is seeking an Azure Security Engineer to architect, implement, and maintain defense-in-depth protections across its Microsoft Azure environment. In this role, you will embed automated guardrails into delivery pipelines, harden cloud landing zones, and protect containerized infrastructure.

What You’ll Do:

• Azure Architecture (30%): Enforce controls across compute, virtual networking, storage, Azure Policy, Defender for Cloud, and Key Vault.
• Pipeline Security & IaC (25%): Build guardrails and automated checks into CI/CD pipelines utilizing Terraform, Bicep, or ARM.
• Container Hardening (20%): Implement runtime protection, image verification, and access controls across Docker and AKS.
• Posture & Vulnerability Defense (15%): Triage, track, and remediate cloud misconfigurations using tools like Qualys; evaluate systems against OWASP guidelines.
• Governance (10%): Develop security baselines, documentation, and operational standards.

What You Bring:

• 4+ years of dedicated experience in cloud engineering, infrastructure defense, and information security. Strong hands-on engineering and configuration.
• Proven track record securing Azure subscriptions, resource groups, and native security tooling.
• Proficiency in Infrastructure-as-Code (Terraform, Bicep, or ARM) and CI/CD security gating.
• Solid foundation in cloud networking (VNet peering, NSGs, private endpoints), identity management, and encryption.
• Direct-hire preferred (contract-to-hire considered).
• Competitive base salary + performance bonus, 401(k) match, tuition reimbursement, paid parental leave, and generous PTO.
• Hybrid schedule (2 days remote/week) based in the greater Atlanta area.
• Must be US work-authorized (no sponsorship).