Cloud Security Engineer II — Azure Defender, Policy & IAM

Patient First; Glen Allen (VA); On-site; USD 130,000 - 150,000; Full time

Benefits offered by this job

Health, Dental and Vision insurance

Disability, Life and Long Term care

401(k) Retirement Plan (employer match

Paid Annual Leave

Job summary

Patient First is seeking a Security Engineer II to support operational security responsibilities while strengthening cloud-native security across Azure and Microsoft 365 environments.

This role combines current security operations, vulnerability management, monitoring, auditing, firewall/EDR/SIEM support, and compliance reporting with future-state responsibilities for Azure Policy, Defender for Cloud, RBAC, Conditional Access, centralized logging, incident response, and cloud governance

Qualifications

• Experience with Azure security services and Defender for Cloud.
• Experience with SIEM/SOAR, DLP, EDR, and cloud security posture management.

Responsibilities

• Implement Defender for Cloud, Azure Policy, security baseline controls, and cloud posture recommendations.
• Configure RBAC, Conditional Access, privileged access, and identity governance in Azure and Microsoft 365.
• Maintain centralized logging, alerting, and monitoring pipelines for cloud workloads and security investigations.
• Support security gates in deployment workflows including policy validation, access reviews, and exception management.
• Provide security input during architecture reviews, workload intake, and production go-live readiness.
• Move security from after-the-fact review into design-time and pipeline-integrated governance.
• Standardize cloud security baselines and reduce manual validation dependencies.
• Translate security policies into Azure Policy, RBAC standards, and operational control requirements.
• Improve auditability by aligning monitoring, logging, access review, and compliance reporting to cloud workloads.
• Support security operations including firewall management, IDS/EDR management, and vulnerability management.

Skills

Azure security services

Microsoft Defender for Cloud

SIEM tools

RBAC and access control concepts

Conditional Access

Cloud governance enforcement

Incident response

Vulnerability management

Monitoring and auditing

Education

Azure Security Engineer Associate

CISSP or comparable security certification

Tools

Sentinel

Microsoft Defender for Cloud

IDS/IPS/EDR tools

PaaS/IaaS security tooling

Job description

Patient First is seeking a Security Engineer II to support operational security responsibilities while strengthening cloud-native security across Azure and Microsoft 365 environments.

This role combines current security operations, vulnerability management, monitoring, auditing, firewall/EDR/SIEM support, and compliance reporting with future-state responsibilities for Azure Policy, Defender for Cloud, RBAC, Conditional Access, centralized logging, incident response, and cloud governance