Secret Cloud Security Engineer (Azure)

Insight Global; Fairfax (VA); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Insight Global is seeking a Microsoft Azure based Cloud Security Engineer to design, implement, configure, and maintain cybersecurity controls across enterprise systems and cloud environments in a hybrid Fairfax, VA setting.

The ideal candidate will work with SOC analysts and engineers to strengthen the organization’s security posture, require hands-on Azure security tool experience, and hold an active DoD Secret clearance with Security+ or higher.

Qualifications

• Bachelor's degree in a related field with 5+ years in cybersecurity engineering or related roles.
• Active DoD Secret clearance is required.
• Active DoD 8140 IAT Level II Security+ or higher.

Responsibilities

• Implement, configure, maintain, and support Azure-based security tools and controls across enterprise systems.
• Apply secure configurations and hardening standards to servers, endpoints, and cloud services.
• Collaborate with SOC analysts, system administrators, and engineers to improve security posture.

Skills

Azure security

Security tools

Incident response

Vulnerability management

Logging & monitoring

Education

Bachelor's degree

Tools

SIEM

EDR

Firewalls

IDS/IPS

Vulnerability scanners

Job description

Job Description

Insight Global is seeking a Microsoft Azure based Cloud Security Engineer to support the design, implementation, configuration, and maintenance of cybersecurity technologies, controls, and secure infrastructure capabilities across enterprise systems and security operations environments. This role will help ensure that systems, applications, networks, endpoints, and cloud environments are protected, monitored, hardened, and aligned with organizational security requirements.

The ideal candidate has hands-on experience implementing and supporting security tools, troubleshooting technical security issues, applying secure configuration standards, and collaborating with SOC analysts, system administrators, network engineers, control assessors, and program stakeholders to improve the organization's security posture.

Key Responsibilities:

Security Engineering & Implementation

Implement, configure, maintain, and support cybersecurity technologies, tools, platforms, and technical security controls. Assist with engineering secure solutions for enterprise systems, networks, endpoints, cloud environments, applications, and operational support platforms. Support security architecture decisions by providing implementation input, technical feasibility analysis, and operational considerations. Apply security engineering practices across the system lifecycle, including planning, deployment, configuration, testing, operations, and sustainment.

System Hardening & Secure Configuration

Apply secure configuration baselines, hardening standards, and technical control requirements to servers, endpoints, network devices, applications, and Azure cloud services. Review system configurations, permissions, authentication settings, logging settings, encryption settings, and access controls for alignment with security requirements. Support implementation of vulnerability remediation, configuration changes, patching activities, and risk reduction measures in coordination with system owners. Validate that security controls are operating as intended and support remediation when control gaps or technical weaknesses are identified.

Security Tool Support & Integration

Support deployment, tuning, and sustainment of tools such as SIEM, EDR, vulnerability scanners, firewalls, IDS/IPS, email security, identity security, logging, and monitoring platforms. Integrate security tools with enterprise systems, data sources, ticketing systems, dashboards, identity platforms, and incident response workflows. Troubleshoot tool performance, connectivity, data collection, alerting, agent health, policy enforcement, and integration issues. Coordinate with SOC analysts, engineers, threat hunters, and system administrators to ensure security tooling supports monitoring, investigation, and response requirements.

Vulnerability, Risk & Remediation Support

Analyze vulnerability scan results, configuration findings, security alerts, and control weaknesses to support prioritization and remediation planning. Work with technical teams to identify root causes, validate remediation options, and confirm closure of vulnerabilities or security findings. Support risk treatment activities by documenting technical constraints, compensating controls, residual risk, and remediation status. Assist control assessors and assessment leads by providing technical evidence, configuration details, screenshots, logs, and implementation explanations.

Incident Response & Operational Support

Provide technical engineering support during security incidents, investigations, containment activities, eradication efforts, and recovery actions. Assist with log collection, tool validation, endpoint or network containment actions, access changes, system isolation, and forensic preservation activities as directed. Develop and maintain scripts, queries, automation, and repeatable procedures to improve security operations and engineering response efficiency. Participate in after-action reviews and support implementation of technical improvements based on incident lessons learned.

Documentation, Standards & Continuous Improvement

Develop and maintain technical documentation, configuration standards, diagrams, implementation guides, runbooks, and operational procedures. Support change management, configuration management, asset documentation, and security engineering governance processes. Recommend improvements to security tools, engineering processes, baselines, automation, monitoring coverage, and technical control implementation. Stay current with emerging threats, security technologies, hardening guidance, and engineering best practices relevant to enterprise security environments. Other duties, as assigned.

Skills and Requirements

Active DoD Secret security clearance. Bachelor’s degree with 5+ years of experience in cybersecurity engineering, security operations, systems administration, network administration, cloud security, or related technical security roles. Active DoD 8140 IAT Level II Security+ (or higher). Ability to work in a hybrid capacity in Fairfax, VA (up to 3 days in office). Ability to travel <20% throughout the lifespan of the Program to CONUS / OCONUS customer sites and government installations. Hands‑on experience: Implementing, configuring, or supporting Microsoft Azure-Based security tools, technical controls, secure configurations, and enterprise security technologies. With Windows, Linux, networking, identity and access management, endpoint security, logging, vulnerability management, and common security architectures. Experience applying security requirements, hardening standards, vulnerability remediation guidance, and configuration baselines across Azure Cloud environments. Ability to troubleshoot technical security issues involving systems, networks, applications, integrations, agents, logs, policies, and monitoring tools. Familiarity with cybersecurity frameworks, standards, and best practices such as NIST, CIS Controls, DISA STIGs, ISO 27001, or organizational security baselines. Strong problem‑solving and decision‑making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate solution. Certifications such as Security+, CySA+, GSEC, GCIA, GCIH, SSCP, CISSP, CCNA, AWS, Azure, or equivalent technical or security credentials. Experience with the following: Supporting SOC, incident response, vulnerability management, compliance, or security engineering programs in enterprise or mission‑critical environments. SIEM, EDR, firewalls, IDS/IPS, vulnerability scanners, cloud security tools, identity platforms, scripting, APIs, or automation tools. Regulated or compliance‑driven environments such as government, defense, finance, healthcare, critical infrastructure, or large enterprise programs. Supporting technical evidence collection for assessments, audits, authorization activities, or remediation tracking. Deep understanding of Azure Cloud and related security services, logging, monitoring, and identity controls.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [e-mail].