Remote Azure Security Engineer: Government Cloud & IAM

Cyberjobs; Northern (KY); Remote; USD 136,000 - 153,000; Full time

Benefits offered by this job

Health coverage

Disability insurance

Vacation time off

12 federal holidays

Annual bonus

Parental leave

Wellness program

Virtual care

Sabbatical leave

401(k) match

Flexible work

Home office setup

Commuter benefits

Learning opportunities

Referral bonus

Job summary

Nava is seeking a Security Engineer to design and implement a secure Azure cloud environment for a large-scale government modernization effort. You will establish strong security foundations across IAM, monitoring, and policy enforcement in partnership with cloud architects and client stakeholders.

You will work on RBAC, Defender for Cloud, Azure Policy, Key Vault, and secure IaC/CI/CD practices to ensure compliant, resilient deployments.

Qualifications

• Experience with Azure cloud security, including Microsoft Entra ID and Defender for Cloud.
• Strong knowledge of Identity and Access Management (IAM), including RBAC and privileged access controls.
• Familiarity with security and compliance frameworks (e.g., HIPAA, state security standards, ATO processes).
• Experience implementing cloud security monitoring, logging, and incident detection.
• Knowledge of Azure Policy and governance guardrails for enforcing security standards.
• Experience with key management and secrets handling (e.g., Azure Key Vault).
• Understanding of secure network architecture and connectivity (including hybrid/on-prem integrations).
• Experience supporting Infrastructure-as-Code (IaC) and secure CI/CD pipeline practices.
• Ability to define and document security architecture, standards, and operational runbooks.
• Strong collaboration skills to work with engineers, architects, and stakeholders on security design and remediation.

Responsibilities

• Design and implement IAM models, including RBAC and privileged access controls.
• Configure and advise on security tools such as Microsoft Defender for Cloud.
• Define and enforce security policies and governance guardrails using Azure Policy.
• Set up centralized logging, monitoring, and threat detection capabilities.
• Design key management and secrets handling solutions (e.g., Azure Key Vault).
• Support compliance efforts, including HIPAA alignment and ATO preparation activities.
• Collaborate with teams to identify security risks and define remediation approaches.
• Contribute to secure cloud architecture decisions, including networking and access patterns.
• Support Infrastructure-as-Code (IaC) and CI/CD practices to ensure secure deployments.
• Create security documentation, runbooks, and provide guidance to enable client teams to operate securely.

Skills

Azure security

IAM RBAC

Defender for Cloud

Azure Policy

Azure Key Vault

HIPAA compliance

ATO preparations

Security monitoring

IaC CI/CD security

Security architecture

Tools

Azure Defender for Cloud

Microsoft Entra ID

Job description

Nava is seeking a Security Engineer to design and implement a secure Azure cloud environment for a large-scale government modernization effort. You will establish strong security foundations across IAM, monitoring, and policy enforcement in partnership with cloud architects and client stakeholders.

You will work on RBAC, Defender for Cloud, Azure Policy, Key Vault, and secure IaC/CI/CD practices to ensure compliant, resilient deployments.