Hybrid Cloud Security Engineer II – Azure Defender & Policy

Patient First; United States; On-site; USD 125,000 - 150,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

401(k) match

Paid time off

Job summary

Patient First is seeking a Security Engineer II to support operational security duties while strengthening cloud-native security across Azure and Microsoft 365 environments.

This role combines security operations, vulnerability management, monitoring, auditing, firewall/EDR/SIEM support, and compliance reporting with future-state responsibilities for Azure Policy, Defender for Cloud, RBAC, Conditional Access, centralized logging, incident response, and cloud governance enforcement.

Qualifications

• Minimum three years in cybersecurity, security operations, cloud security, or hybrid infrastructure roles.
• Experience with Azure security services and Defender for Cloud is required.
• Ability to communicate risk and remediation options to both technical and non-technical audiences.

Responsibilities

• Implement and maintain Defender for Cloud, Azure Policy, security baseline controls, and cloud posture recommendations.
• Configure RBAC and Conditional Access, manage privileged access, and enforce identity governance for Azure and Microsoft 365.
• Maintain centralized logging, alerting, and monitoring pipelines for cloud workloads and investigations.
• Support security gates in deployment workflows, including policy validation and access reviews.
• Contribute to security design reviews, workload intake, and production go-live readiness.
• Standardize cloud security baselines and reduce manual validation needs.

Skills

Azure security services

Defender for Cloud

RBAC/CA/IAM

Threat detection

Cloud governance

SIEM

Education

High school diploma or equivalent

Azure Security Engineer Associate or CISSP or comparable security certification

Tools

Azure Sentinel

EDR tools

SIEM tools

Job description

Patient First is seeking a Security Engineer II to support operational security duties while strengthening cloud-native security across Azure and Microsoft 365 environments.

This role combines security operations, vulnerability management, monitoring, auditing, firewall/EDR/SIEM support, and compliance reporting with future-state responsibilities for Azure Policy, Defender for Cloud, RBAC, Conditional Access, centralized logging, incident response, and cloud governance enforcement.