Senior Azure Cloud Security Engineer – Zero Trust & IAM

Kainos Innovative Solutions; Mechanicsville (VA); Hybrid; USD 140,000 - 180,000; Full time

Job summary

VDOT is seeking a Senior Cloud Security Engineer to support its Azure cloud migration and secure cloud infrastructure. The role requires deep expertise in Azure security architecture, Zero Trust principles, IAM (Entra ID/Azure AD), and CI/CD security integration.

You will lead security initiatives, design secure cloud architectures, and implement security controls across enterprise environments. Hybrid work in Mechanicsville, VA with collaboration across engineering and risk teams.

Qualifications

• Strong experience in Microsoft Azure cloud security engineering for enterprise environments.
• Expertise in Azure security architecture, controls, and migration.
• Hands-on with Azure Policy, security configurations, and automation runbooks.
• Knowledge of Zero Trust, IAM, Entra ID, and least-privilege access.
• Experience with SIEM, vulnerability management, and incident response.

Responsibilities

• Identify cloud security vulnerabilities, assess risks, and drive remediation.
• Lead cloud security initiatives and provide senior technical guidance.
• Design and review secure cloud architectures for enterprise environments.
• Enforce security in CI/CD pipelines and deployment gates.
• Monitor security events with SIEM and coordinate incident response.
• Develop security documentation and architecture diagrams.
• Collaborate with Cloud, Network, DevOps, and Risk teams.

Skills

Azure cloud security engineering

Azure security architecture

Zero Trust architecture

IAM / Entra ID / Azure AD

CI/CD security integration

SIEM monitoring & incident response

Vulnerability management

Threat detection

Security governance & compliance

Tools

Azure Policy

Azure Automation Runbooks

Azure Security Center

CI/CD tooling

Job description

VDOT is seeking a Senior Cloud Security Engineer to support its Azure cloud migration and secure cloud infrastructure. The role requires deep expertise in Azure security architecture, Zero Trust principles, IAM (Entra ID/Azure AD), and CI/CD security integration.

You will lead security initiatives, design secure cloud architectures, and implement security controls across enterprise environments. Hybrid work in Mechanicsville, VA with collaboration across engineering and risk teams.