Customer Onboarding Engineer (Security & Compliance)

Quzara LLC; United States; On-site; USD 100,000 - 130,000; Full time

Job summary

A cybersecurity solutions provider in the United States is seeking a Customer Onboarding Engineer to ensure secure integration of customers into their platform. This hands-on role requires expertise in DevSecOps, CI/CD management, and compliance with federal regulations. Ideal candidates will have 3–5 years of experience in security engineering with strong capabilities in tools like Azure DevOps, Kubernetes, and Microsoft Sentinel. Join a team committed to innovation and excellence in cybersecurity.

Qualifications

• 3–5+ years of experience in managing CI/CD pipelines.
• Hands-on experience with Docker and Kubernetes.
• Strong familiarity with compliance frameworks such as FedRAMP.

Responsibilities

• Manage the Detections as Code (DaC) lifecycle using KQL.
• Harden and maintain Azure DevOps pipelines.
• Administer and secure the Azure Container Registry.

Skills

DevSecOps experience

CI/CD pipeline management

Containerization (Docker, Kubernetes)

Security tooling integration

Compliance frameworks knowledge

Education

Microsoft Certified: Azure Security Engineer Associate (AZ-500)

Additional certifications (SC-200, CKS)

Tools

Microsoft Defender XDR

Microsoft Sentinel

Azure DevOps

Azure Kubernetes Service (AKS)

Job description

The Customer Onboarding Engineer (MDR & Compliance) plays a critical role in bridging Business Operations and Security Operations to ensure secure, compliant, and frictionless integration of customers into the Quzara Cybertorch™ MDR platform. This position is responsible for the technical configuration and deployment of logging, threat detection, and automation capabilities for customers operating in regulated federal environments, including civilian and DoD agencies.

The ideal candidate has a background in security engineering and SOC technologies and can operate independently in configuring Microsoft Defender XDR, Sentinel, and compliance platforms like Microsoft Purview. This is a hands‑on engineering role with direct customer‑facing responsibilities during onboarding.

Responsibilities

• Manage the Detections as Code (DaC) lifecycle for threat detection logic using KQL or Sigma formats, implementing version control (Git) and automated deployment pipelines.
• Harden and maintain Azure DevOps (ADO) pipelines, agents, and related CI/CD workflows for both software and detection releases in high‑compliance environments.
• Administer and secure the Azure Container Registry (ACR), ensuring containers are scanned, patched, and aligned to STIG compliance prior to production deployment.
• Implement Shift Left security techniques by integrating SAST, DAST, and compliance scans directly into build pipelines to identify vulnerabilities early.
• Partner with the Threat Intelligence and SOC teams to automate deployment of detection content, hunting queries, and analytics into Microsoft Sentinel and related tools.
• Build and maintain secure CI/CD templates, YAML pipelines, and secrets management for infrastructure, detection logic, and application components.
• Provide audit evidence and documentation to support FedRAMP, FISMA, and CMMC continuous monitoring efforts.
• Stay current with container, cloud, and CI/CD security innovations and implement them in real‑time across production systems.

REQUIREMENTS

• Prior experience in a DevSecOps or Security Engineering role is required (Candidates must have both DevOps experience and security background)
• 3–5+ years managing CI/CD pipelines within cloud‑native environments (Azure DevOps strongly preferred).
• Hands‑on experience deploying and managing containerized workloads (Docker, Kubernetes) in a secure and scalable way
• Advanced knowledge of Azure DevOps, Azure Kubernetes Service (AKS), Azure Container Registry, and Microsoft Sentinel/KQL.
• Demonstrated experience integrating security tooling into DevOps pipelines (SAST/DAST, policy‑as‑code, IaC validation, etc.).
• Strong familiarity with compliance frameworks such as FedRAMP, CMMC, or FISMA, and their technical enforcement in the SDLC.

Preferred Certifications

• Microsoft Certified: Azure Security Engineer Associate (AZ-500))
• Additional certifications such as SC-200 (Security Operations Analyst) or Kubernetes Security Specialist (CKS) are a plus.

Quzara LLC is an Equal Employment/Affirmative Action employer. We do not discriminate in hiring based on sex, gender identity, sexual orientation, race, color, religious creed, national origin, physical or mental disability, protected Veteran status, or any other characteristic protected by federal, state, or local law.

Join Our Cyber Team!

Working for Quzara means being part of a team driven by innovation and dedication where we rise together. Apply Today.