Cloud Security Engineer: Azure, Kubernetes & Zero Trust

TherapyNotes, LLC; Philadelphia (Philadelphia County); On-site; USD 110,000 - 130,000; Full time

Benefits offered by this job

Competitive salary

Health insurance

Retirement plan

Profit sharing

Training budget

Collaborative environment

Onboarding program

Mentorship program

Job summary

TherapyNotes, LLC in the United States is seeking an experienced Cloud Security Engineer to secure our cloud infrastructure, container workloads, and CI/CD pipelines in a HIPAA-regulated SaaS environment. You will lead CSPM, Zero Trust, and IAM initiatives across Azure and Kubernetes (AKS), work with IT and SRE teams, and help deter threats with incident response and vulnerability management.

Join a collaborative security team and influence security across product engineering, QA, and operations

Qualifications

• Bachelor's degree in information security, computer science, or related field; equivalent experience considered.
• 5+ years in cloud security engineering or related role.
• Deep hands-on experience securing cloud infrastructure and cloud-based applications (Azure preferred; AWS a plus).
• Experience with CSPM and remediating misconfigurations.
• Experience securing IaC orchestration platforms (Terraform, OpenTofu) and access control.
• Experience with Microsoft Entra ID and Conditional Access.
• Experience with Zero Trust / SASE tooling.
• Knowledge of security frameworks (NIST, ISO 27001, CIS) and compliance frameworks (HITRUST, PCI DSS).
• Security assessments, vulnerability management, incident response.
• OS familiarity Windows/Linux and endpoint security.
• Industry certifications (CISSP, SSCP, Security+) or cloud certs preferred.

Responsibilities

• Manage and secure cloud infrastructure, focusing on Azure.
• Secure containerized workloads and Kubernetes (AKS) — network policy, runtime protection, image scanning.
• Mature CSPM and remediate misconfigurations across environments.
• Manage IaC platforms (Terraform/OpenTofu) — access control, secrets management, deployments.
• Manage identities in Entra ID via Conditional Access and JIT privileged access.
• Review network diagrams and advise on segmentation and data flows.
• Administer Zero Trust network access and edge security tooling.
• Lead security solutions across the org: SIEM, DLP, XDR, vulnerability management.
• Monitor security alerts and participate in incident response on-call.
• Conduct threat analysis, vulnerability assessments, and risk evaluations; report to leadership.
• Develop queries, scripts, integrations to improve security operations.
• Collaborate with development teams to integrate security into SDLC and CI/CD.
• Conduct periodic cloud configuration and access reviews for compliance.
• Participate in audits and GRC efforts.

Skills

Azure

Kubernetes

Cloud security

Terraform

OpenTofu

CSPM

Zero Trust

Entra ID

Network security

Security incident response

Education

Bachelor's degree in information security or CS

Tools

Argo

FluxCD

Terraform

OpenTofu

Job description

TherapyNotes, LLC in the United States is seeking an experienced Cloud Security Engineer to secure our cloud infrastructure, container workloads, and CI/CD pipelines in a HIPAA-regulated SaaS environment. You will lead CSPM, Zero Trust, and IAM initiatives across Azure and Kubernetes (AKS), work with IT and SRE teams, and help deter threats with incident response and vulnerability management.

Join a collaborative security team and influence security across product engineering, QA, and operations