Cloud Security Engineer - Azure, Kubernetes & Zero Trust

TherapyNotes.com; Philadelphia (Philadelphia County); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Competitive salary

Health insurance

Retirement plan

Profit sharing

Training budget

Onboarding program

Mentorship program

Open collaborative environment

Job summary

TherapyNotes LLC is seeking an experienced Cloud Security Engineer to secure our cloud infrastructure, containerized workloads, and IaC pipelines. You will contribute to vulnerability management, incident response, and identity security within a healthcare-regulated environment.

The role requires deep CSPM, Kubernetes security (AKS), and Zero Trust expertise, with a strong focus on Azure. Collaborate with a small security team in a fast-paced SaaS company.

Qualifications

• 5+ years of experience in cloud security engineering or related role.
• Deep hands-on experience securing cloud infrastructure and cloud-based applications (Azure preferred, AWS a plus).
• Hands-on network security experience and understanding of network architecture, segmentation, and firewall controls.
• Experience securing containerized workloads and Kubernetes environments (e.g., AKS).
• Experience with CSPM and remediating misconfigurations across cloud environments.
• Experience securing IaC orchestration platforms (Terraform, OpenTofu).
• Experience with Microsoft Entra ID including Conditional Access and JIT privileged access models.
• Experience with Zero Trust / SASE tooling (e.g., Cloudflare Zero Trust).
• Knowledge of NIST, ISO 27001, CIS and HITRUST/PCI DSS compliance.
• Experience with security assessments, vulnerability management, and incident response.

Responsibilities

• Manage and secure cloud infrastructure and cloud-based applications, with a focus on Azure.
• Secure containerized workloads and Kubernetes environments (e.g., AKS) — network policy and runtime protection.
• Own CSPM — identify and remediate misconfigurations across cloud environments.
• Secure IaC platforms — access control, secrets management, deployment workflows for Terraform/OpenTofu.
• Manage identities in Microsoft Entra ID with Conditional Access and JIT access models.
• Review network diagrams and security input on segmentation and data flows.

Skills

Cloud security engineering

Network security

Incident response

Zero Trust

CI/CD security

Education

Bachelor’s degree in information security or related field

Tools

Azure

AKS

Terraform

OpenTofu

Microsoft Entra ID

Cloudflare Zero Trust

Kubernetes

Job description

TherapyNotes LLC is seeking an experienced Cloud Security Engineer to secure our cloud infrastructure, containerized workloads, and IaC pipelines. You will contribute to vulnerability management, incident response, and identity security within a healthcare-regulated environment.

The role requires deep CSPM, Kubernetes security (AKS), and Zero Trust expertise, with a strong focus on Azure. Collaborate with a small security team in a fast-paced SaaS company.