Remote Cloud Security Engineer – Microsoft 365 & Azure

Chevo; Washington (District of Columbia); On-site; USD 145,000 - 170,000; Full time

Job summary

Chevo is seeking a Microsoft Cloud Security Engineer to serve as Key Personnel on a federal FireNet contract. The role focuses on hands-on security engineering for the FireNet tenant, enforcing zero-trust controls, and integrating Defender, Sentinel, Purview, and Entra ID across the Microsoft 365/Azure stack.

The position is remote with periodic on-site client engagement. The engineer will lead threat hunting, vulnerability management, and incident response, while coordinating with government

Qualifications

• Hands-on engineering of enterprise Microsoft 365 and Azure security environments.
• Deep proficiency with Entra ID/Azure Active Directory, Conditional Access, MFA, and zero-trust principles.
• Experience with Defender for Cloud, Defender for Endpoint, Defender for Office 365, and Sentinel analytics.
• Familiarity with Purview data governance in a government-related setting (ATO/DOI/NIST).
• Federal eligibility and ability to serve in on-call capacity during national preparedness seasons.
• Microsoft certifications such as SC-100, SC-200, SC-300 or AZ-500 are desirable.

Responsibilities

• Engineer and continuously improve the FireNet security posture for Microsoft 365 and Azure.
• Configure Entra ID Conditional Access, MFA, and PIM for zero-trust access across privileged roles.
• Manage guest/external identity lifecycles with entitlement management and access reviews.
• Oversee Secure Score improvements and remediation within required timelines.
• Build and maintain Defender and Sentinel rules, playbooks, and KQL workbooks.
• Support Purview DLP and sensitivity labeling, ensure logging pipelines meet DOl/FISMA needs.
• Conduct threat hunting, vulnerability management, and security assessments.
• Provide on-call coverage for Priority 1 incidents with rapid response targets.
• Lead incident response activities and coordinate with stakeholders.
• Prepare CAB packets and contribute to monthly security posture reports.
• Review security architectures for new Azure/M365 initiatives ensuring Zero Trust alignment.
• Develop security automation using PowerShell, Graph API, Azure CLI, or Logic Apps.

Skills

Zero-trust architecture

Entra ID

MFA

PIM

Security incident response

Threat hunting

KQL

Education

Bachelor’s degree in Computer Science / Information Security / Information Technology

Tools

Microsoft Defender for Cloud

Microsoft Defender for Endpoint

Microsoft Defender for Office 365

Microsoft Sentinel

Microsoft Purview

Entra ID / Azure AD

Conditional Access

MFA

PIM

PowerShell

Microsoft Graph API

Azure CLI

Logic Apps

Azure Portal

KQL

Job description

Chevo is seeking a Microsoft Cloud Security Engineer to serve as Key Personnel on a federal FireNet contract. The role focuses on hands-on security engineering for the FireNet tenant, enforcing zero-trust controls, and integrating Defender, Sentinel, Purview, and Entra ID across the Microsoft 365/Azure stack.

The position is remote with periodic on-site client engagement. The engineer will lead threat hunting, vulnerability management, and incident response, while coordinating with government