Senior Cloud Security Engineer

Quantum Technologies. LLC; Mechanicsville (VA); On-site; USD 89,000 - 126,000; Full time

Job summary

Quantum Technologies. LLC is seeking a Senior Cloud Security Engineer to lead the design, implementation, and security of Azure cloud environments in Mechanicsville, VA.

You will guide migration efforts, enforce Zero Trust principles, and ensure compliance with SEC530 and enterprise standards. The role requires strong Azure security architecture, IAM/RBAC, Defender for Cloud, policy automation, and threat management.

Qualifications

• Strong hands-on experience in Microsoft Azure Cloud Security.
• Proven ability to design and secure enterprise cloud environments.
• Deep understanding of IAM, RBAC, network security, and Zero Trust principles.
• Experience with SIEM tools, vulnerability remediation, and incident response.
• Experience implementing DevSecOps controls and cloud governance.

Responsibilities

• Design, implement, and secure enterprise Azure cloud infrastructure.
• Lead cloud security architecture and governance to meet standards.
• Identify cloud security vulnerabilities and implement remediation strategies.
• Implement Zero Trust security principles and governance controls.
• Configure and manage Azure Policies, Automation Runbooks, and security gates in CI/CD.

Skills

Azure Security Architecture

Azure IAM & RBAC

Microsoft Entra ID

Zero Trust

SIEM Operations

Incident Response

Vulnerability Management

DevSecOps Security

Cloud Governance

Terraform / ARM / Bicep

Azure Policy

Azure Monitor

Key Vault / Secrets

Security Center / Defender

Govt Cloud Experience

Tools

Terraform

ARM Templates

Bicep

Microsoft Sentinel

Azure Monitor

Log Analytics

Key Vault

Security Center

Job description

US Citizen, Green Card, H-1B, OPT-EAD, CPT, Other

Job Title: Senior Cloud Security Engineer
Location: Mechanicsville, VA
Duration: 12 Months + Extension
Bill Rate: $78/hour
Job Type: W-2, 1099, C2C
Client: To Be Discussed Later
Work Authorization: US-Citizen, H-1B, OPT-EAD, GC-EAD

Job Description

We are seeking an experienced Senior Cloud Security Engineer to lead the design, implementation, and security of enterprise-level Microsoft Azure cloud environments. The candidate will play a key role in supporting the organization's Azure cloud migration while ensuring infrastructure security aligns with Zero Trust principles, SEC530 requirements, and enterprise security and compliance standards.

The ideal candidate should have strong expertise in Azure Cloud Security, Security Architecture, Identity and Access Management (IAM), Network Security, Azure Policy, SIEM, Vulnerability Management, and Incident Response.

Design, implement, and maintain secure enterprise Azure cloud infrastructure.

Lead cloud security architecture and ensure compliance with enterprise security standards.

Identify cloud security vulnerabilities, assess risks, and implement remediation strategies.

Implement Zero Trust security principles and cloud governance controls.

Configure and manage Azure Policies, Azure Automation, and security runbooks.

Secure Azure cloud networks using Network Security Groups (NSGs), Azure Firewalls, and access controls.

Implement Identity and Access Management (IAM), RBAC, and Microsoft Entra ID security controls.

Monitor security events using SIEM tools and coordinate security incident response activities.

Implement security controls and automated security gates within CI/CD pipelines.

Conduct cloud security assessments, vulnerability scans, audits, and compliance reviews.

Support Azure migration initiatives by ensuring secure cloud architecture and infrastructure configurations.

Develop and maintain security documentation, architecture diagrams, IP addressing schemes, and access control standards.

Provide technical leadership and security guidance to cloud engineering and DevOps teams.

Required Technical Skills:

Azure Security Architecture and Infrastructure Security

Azure IAM, RBAC, and Microsoft Entra ID

Microsoft Defender for Cloud (Azure Security Center)

Azure Policy and Azure Automation Runbooks

Azure Network Security, NSGs, and Azure Firewall

Zero Trust Security Architecture

SIEM / SOC Operations and Security Monitoring

Incident Response and Threat Management

Vulnerability Management and Risk Assessment

DevSecOps and CI/CD Pipeline Security

Cloud Security Governance and Compliance

Security Auditing and Documentation

Preferred Skills:

Azure Landing Zones and Cloud Governance.

Infrastructure as Code (Terraform / ARM Templates / Bicep).

Microsoft Sentinel.

Key Vault and Secrets Management.

Azure Monitor and Log Analytics.

Security Compliance Frameworks such as NIST, CIS, and SOC 2.

Experience with government or public-sector cloud environments.

Required Qualifications:

Strong hands-on experience in Microsoft Azure Cloud Security.

Proven experience designing and securing enterprise cloud environments.

Deep understanding of IAM, RBAC, network security, and Zero Trust principles.

Experience with SIEM tools, vulnerability remediation, and incident response.

Experience implementing DevSecOps security controls and cloud governance.

Strong communication, documentation, and technical leadership skills.

Ability to work in a hybrid environment in Mechanicsville, VA.

We are an equal opportunity employer. All aspects of employment including the decision to hire, promote, discipline, or discharge, will be based on merit, competence, performance, and business needs. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, national origin, citizenship/ immigration status, veteran status, or any other status protected under federal, state, or local law.