Senior Cloud Security Engineer

MACHINE LEARNING TECHNOLOGIES LLC; Mechanicsville (VA); Hybrid; USD 89,000 - 126,000; Full time

Job summary

Machine Learning Technologies LLC in Mechanicsville, VA is seeking a Senior Cloud Security Engineer to lead the design, implementation, and security of enterprise Azure environments. The role focuses on Zero Trust, SEC530-aligned security, IAM/RBAC, and secure CI/CD integration while guiding migration efforts and governance.

Ideal candidates will have hands-on Azure security architecture experience, incident response, vulnerability management, and strong documentation and leadership skills to

Qualifications

• Experience securing enterprise Azure environments.
• Strong IAM/RBAC and Zero Trust knowledge.
• Hands-on Azure security architecture and governance experiences.

Responsibilities

• Design, implement, and maintain secure Azure cloud infrastructure.
• Lead cloud security architecture and ensure compliance with enterprise standards.
• Identify vulnerabilities, assess risks, and implement remediation strategies.
• Implement Zero Trust and governance controls in cloud environments.
• Configure Azure Policies, Automations, and security runbooks.
• Secure networks with NSGs and Azure Firewall.
• Manage IAM and Entra ID security controls.
• Monitor security events using SIEM tools and coordinate incident response.

Skills

Microsoft Azure Cloud Security

Azure Security Architecture

Azure IAM RBAC Entra ID

Microsoft Defender for Cloud

Azure Policy

Zero Trust Security Architecture

SIEM SOC Operations

Incident Response

Vulnerability Management

DevSecOps

Cloud Security Governance

Security Auditing

Tools

Terraform

ARM Templates

Bicep

Microsoft Sentinel

Azure Monitor

Key Vault

Job description

Job Title: Senior Cloud Security Engineer

Location: Mechanicsville, VA

Duration: 12 Months + Extension

Bill Rate: $78/hour

Job Type: W-2, 1099, C2C

Client: To Be Discussed Later

Work Authorization: US-Citizen, H-1B, OPT-EAD, GC-EAD

Job ID: J53958

Domain Exposure: Healthcare

Job Description

We are seeking an experienced Senior Cloud Security Engineer to lead the design, implementation, and security of enterprise-level Microsoft Azure cloud environments. The candidate will play a key role in supporting the organization's Azure cloud migration while ensuring infrastructure security aligns with Zero Trust principles, SEC530 requirements, and enterprise security and compliance standards. The ideal candidate should have strong expertise in Azure Cloud Security, Security Architecture, Identity and Access Management (IAM), Network Security, Azure Policy, SIEM, Vulnerability Management, and Incident Response.

Roles & Responsibilities

• Design, implement, and maintain secure enterprise Azure cloud infrastructure.
• Lead cloud security architecture and ensure compliance with enterprise security standards.
• Identify cloud security vulnerabilities, assess risks, and implement remediation strategies.
• Implement Zero Trust security principles and cloud governance controls.
• Configure and manage Azure Policies, Azure Automation, and security runbooks.
• Secure Azure cloud networks using Network Security Groups (NSGs), Azure Firewalls, and access controls.
• Implement Identity and Access Management (IAM), RBAC, and Microsoft Entra ID security controls.
• Monitor security events using SIEM tools and coordinate security incident response activities.
• Implement security controls and automated security gates within CI/CD pipelines.
• Conduct cloud security assessments, vulnerability scans, audits, and compliance reviews.
• Support Azure migration initiatives by ensuring secure cloud architecture and infrastructure configurations.
• Develop and maintain security documentation, architecture diagrams, IP addressing schemes, and access control standards.
• Provide technical leadership and security guidance to cloud engineering and DevOps teams.

Required Technical Skills

• Microsoft Azure Cloud Security
• Azure Security Architecture and Infrastructure Security
• Azure IAM, RBAC, and Microsoft Entra ID
• Microsoft Defender for Cloud (Azure Security Center)
• Azure Policy and Azure Automation Runbooks
• Azure Network Security, NSGs, and Azure Firewall
• Zero Trust Security Architecture
• SIEM / SOC Operations and Security Monitoring
• Incident Response and Threat Management
• Vulnerability Management and Risk Assessment
• DevSecOps and CI/CD Pipeline Security
• Cloud Security Governance and Compliance
• Security Auditing and Documentation

Preferred Skills

• Azure Landing Zones and Cloud Governance.
• Infrastructure as Code (Terraform / ARM Templates / Bicep).
• Microsoft Sentinel.
• Microsoft Defender XDR.
• Key Vault and Secrets Management.
• Azure Monitor and Log Analytics.
• Security Compliance Frameworks such as NIST, CIS, and SOC 2.
• Experience with government or public-sector cloud environments.

Required Qualifications

• Strong hands-on experience in Microsoft Azure Cloud Security.
• Proven experience designing and securing enterprise cloud environments.
• Deep understanding of IAM, RBAC, network security, and Zero Trust principles.
• Experience with SIEM tools, vulnerability remediation, and incident response.
• Experience implementing DevSecOps security controls and cloud governance.
• Strong communication, documentation, and technical leadership skills.
• Ability to work in a hybrid environment in Mechanicsville, VA.

Equal Opportunity Employer

We are an equal opportunity employer. All aspects of employment including the decision to hire, promote, discipline, or discharge, will be based on merit, competence, performance, and business needs. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, national origin, citizenship/ immigration status, veteran status, or any other status protected under federal, state, or local law.