Senior Cloud Security Engineer

Global Sumi Technologies Inc.,; Mechanicsville (VA); On-site; USD 140,000 - 180,000; Full time

Job summary

Global Sumi Technologies Inc. in Mechanicsville, VA seeks a Senior Cloud Security Engineer to lead cloud security across enterprise Azure migrations, aligning with SEC530, Zero Trust and compliance frameworks.

You will guide security architecture, IAM, network security, monitoring, vulnerability management, incident response, and cloud governance while collaborating with Cloud Engineering, Network Engineering and IT leadership.

Qualifications

• Senior-level cloud security experience with enterprise environments.
• Experience leading security architecture for Azure migrations and cloud services.
• Strong knowledge of SEC530 principles, Zero Trust and compliance frameworks.

Responsibilities

• Identify cloud security vulnerabilities, assess risk, prioritize remediation and track actions.
• Lead complex cloud security initiatives and provide technical direction to engineers.
• Influence architecture decisions to prevent insecure configurations reaching production.
• Explain complex security risks to non-technical stakeholders.
• Develop Azure policies and runbooks to support incident response workflows.
• Review cloud solution security risks and define security controls.
• Work with various teams to ensure secure, resilient and compliant cloud environments.

Skills

Cloud security engineering

Azure security

Security architecture

IAM (Identity and Access Management)

Network security

Security monitoring

Vulnerability management

Incident response

Cloud governance

Job description

Mechanicsville, VA Client is seeking an experienced Senior Cloud Security Engineer (Sr CSE) to implement and support the agency’s cloud and computing infrastructure. The Senior Cloud Security Engineer will serve as a subject matter expert supporting VDOT’s enterprise Azure migration, responsible for architecting, implementing, and securing cloud environments in alignment with SEC530 principles, Zero Trust, and enterprise compliance frameworks.

The Senior Cloud Security Engineer will be responsible for assisting in the design, implementation, securing, monitoring, and the continuous improvement of cloud infrastructure and services across the enterprise. The position provides senior-level technical leadership for cloud security architecture, identity and access management, network security, security monitoring, vulnerability management, incident response, and cloud governance.

The Senior Cloud Security Engineer works closely with Cloud Engineering, Network Engineering, Security Operations, Enterprise Architecture, Infrastructure, Application Development, DevOps, Risk Management, and IT leadership to ensure cloud environments are secure, resilient, compliant, and aligned with enterprise security standards.

Key Responsibilities

• Identify cloud security vulnerabilities, assess risk based on business impact, prioritize remediation, track remediation activities, and validate corrective actions
• Lead complex cloud security initiatives and provide technical directions to engineers. Also assist in the design of secure cloud architecture for complex enterprise environments
• Influence architecture and security decisions and prevent insecure configurations from reaching production and implement security gates within deployment pipelines.
• Explain complex security risks to non-technical stakeholders
• Assess cloud security risks and security gaps and recommend appropriate remediations. Create and maintain security documentation and evidence as well as support audits and assessments.
• Review proposed cloud solutions for security risk and define appropriate security and compensation controls.
• Will develop Azure policies to enforce standardization and compliance with enterprise requirements, as well as creating Azure Automation runbooks to support incident response workflows.
• Identifies and diagnoses system problems and threats by using system logs, line monitors, SIEM, diagnostic software, and test equipment.
• Lead investigation and containment of cloud security incidents.
• Review firewall and NSG rule requests and ensure compliance with security standards.
• Must have the ability to provide documentation, architecture topology diagrams, IP schemes and access controls when required.
• Must have the ability to work independently on assigned projects.