Senior Cloud Security Engineer

Skywalk Global; Mechanicsville (VA); Vor Ort; USD 120.000 - 180.000; Vollzeit

Zusammenfassung

Skywalk Global seeks a Sr Cloud Security Engineer for VDOT to architect, implement, and secure cloud environments aligned with SEC530, Zero Trust, and enterprise standards.

You will lead security design, governance, and incident response while coordinating with Cloud Engineering, IT leadership, and governance teams to ensure resilient, compliant cloud services across the enterprise.

Qualifikationen

• Cloud security expertise across Azure and on-premises environments.
• Strong hands-on experience with cloud infrastructure security.
• Experience with security governance, risk, and compliance frameworks.

Aufgaben

• Lead complex cloud security initiatives and provide technical direction.
• Influence security decisions and enforce secure configurations in pipelines.
• Develop Azure policies and runbooks for incident response workflows.
• Monitor security events with SIEM and coordinate with SOC.
• Maintain security docs, topology diagrams, IP schemas, access controls.

Kenntnisse

Cloud security

Security operations

Vulnerability management

Incident response

IAM

Zero Trust

NIST CSF

Azure policy

Ausbildung

Azure Security Engineer Associate

Security+

CISSP/CSSP desired

Tools

NSG

Azure Log Analytics

CNAPP/CWPP

SIEM (Splunk/Microsoft Sentinel)

Jobbeschreibung

VDOTisseekinganexperiencedSeniorCloudSecurityEngineer(SrCSE)toimplementandsupporttheagency’scloudandcomputinginfrastructure.The

SeniorCloudSecurityEngineerwillserveasasubjectmatterexpertsupportingVDOT’senterpriseAzuremigration,responsibleforarchitecting,

implementing,andsecuringcloudenvironmentsinalignmentwithSEC530principles,ZeroTrust,andenterprisecomplianceframeworks.

TheSeniorCloudSecurityEngineerwillberesponsibleforassistinginthedesign,implementation,securing,monitoring,andthecontinuousimprovementofVDOT’scloudinfrastructureandservicesacrosstheenterprise.Thepositionprovidessenior-leveltechnicalleadershipforcloudsecurityarchitecture,identityandaccessmanagement,networksecurity,securitymonitoring,vulnerabilitymanagement,incidentresponse,andcloudgovernance.

TheSeniorCloudSecurityEngineerworkscloselywithCloudEngineering,NetworkEngineering,SecurityOperations,EnterpriseArchitecture,Infrastructure,ApplicationDevelopment,DevOps,RiskManagement,andITleadershiptoensurecloudenvironmentsaresecure,resilient,compliant,andalignedwithenterprisesecuritystandards.

KeyResponsibilities:

• Leadcomplexcloudsecurityinitiativesandprovidetechnicaldirectionstoengineers.Alsoassistinthedesignofsecurecloudarchitectureforcomplexenterpriseenvironments
• Influencearchitectureandsecuritydecisionsandpreventinsecureconfigurationsfromreachingproductionandimplementsecuritygateswithindeploymentpipelines.
• Explaincomplexsecurityriskstonon-technicalstakeholders
• Assesscloudsecurityrisksandsecuritygapsandrecommendappropriateremediations.Createandmaintainsecuritydocumentationandevidenceaswellassupportauditsandassessments.
• WilldevelopAzurepoliciestoenforcestandardizationandcompliancewithenterpriserequirements,aswellascreatingAzureAutomationrunbookstosupportincidentresponseworkflows.
• MonitorsecurityeventsusingSIEMtechnologiesandworkwithVDOT’sSOCteamtocoordinateincidentresponseactivities.
• ReviewfirewallandNSGrulerequestsandensurecompliancewithsecuritystandards.
• Musthavetheabilitytoprovidedocumentation,architecturetopologydiagrams,IPschemesandaccesscontrolswhenrequired.
• Musthavetheabilitytoworkindependentlyonassignedprojects.

EnterpriseCloudExperienceRequired8Years

EnterpriseCloudSecurityExperienceRequired5Years

Candidatemustbehighlyexperiencedasacloudsecurityprofessionalwithstronghands-onexpertiseincloudinfrastructureandcloudengineeringRequired

Candidattemustbehighlyexperiencedincybersecurity,networking,identity,securityoperations,andhaveadeepcloudengineeringcompetencyRequired

Candidatemusthavein-depthexperiencemovingbetweenstrategicarchitectureandhands-onengineeringandidentifyingsecurityrisksRequired

Candidatemusthavein-depthexperiencedesigningpracticalsolutions,implementingcontrols,andworkingwithinfrastructureteamsRequired

Candidatemusthhavein-depthexperienceworkingwithapplicationteamstocontinuouslyimprovetheorganization'scloudsecuritypostureRequired

CandidatemusthaveexperiencesettingupNetworkSecurityGroups(NSGs),resourcemanagerandmanagementgroups,monitorandloganalytics,

Required

Required

Candidatemusthaveexperiencesin:Incidentresponse,Securityinvestigations,Loganalysis,Threatintelligence,Securitymonitoring,IOCanalysisRequired

CandidatemusthaveexperiencescoordinatingduringcyberincidentsRequired

Candidatemusthaveexperienceinvulnerabilitymanagement,remediationtracking,vulnerabilityscanningtools(e.g.Nessus,Tenable,DefenderRequired

Candidatemusthaveexperiencesecuringenterprisecloudenvironmentsandimplementingsecuritycontrolsinproductionenvironments

Required

CandidatemusthaveexperiencewiththeSIEMproducts(e.g.Splunk,MicrosoftSentinel,CNAPP),Required

Candidatemusthaveexperiencewithlogmanagement,securityanalytics,SOCintegration,Threatdetection,andThreathuntingRequired

Candidatemusthaveexperiencecollaboratingwiththesecuritygovernanceteamandapplicationleadstoimplemententerpriselogmanagementstandards.Required

Candidatemusthaveexperiencewith;SEC530,CISBenchmarks,NISTCSF,NIST800-53,ZeroTrustprinciplesRequired

Candidatemusthaveexperienceincloudvulnerabilitymanagement,remediationtracking,andriskassessmentandprioritizationRequired

Candidatemusthaveexperienceincloudriskassessmentandprioritization,attacksurfacemanagement,andCloudSecurityPostureManagement(VSPM)Required

CandidatemusthaveexperienceinCloudWorkloadProtection(CWPP)andCloud-NativeApplicationProtectionPlatform(CNAPP)Required

CandidatemusthaveexperiencedevelopingAzurePolicytoenforcestandardizationandcompliancewithenterpriserequirementsRequired

CandidatemusthaveexperiencecreatingAzureAutomationrunbookstosupportincidentresponseworkflows.Required

CandidatemusthaveexperiencewithIdentityandaccessmanagement(IAM),Role-basedAccesscontrol(RBAC),andPrivilegedAccessManagement(PAM)Required

CandidatemusthaveexperiencewithLeast-privilegeaccessandmulti-factorauthenticationRequired

Candidatemusthaveexperienceworkinginhighlyregulatedenvironmentswithlargegovernmentagenciesorsimilarregulatoryenvironments.Required

Candidatemusthaveabilitytocommunicatetechnicalissuestotechnical,non-techical,andexecutiveaudiences.Required

Candidatemusthaveabilitymentorjuniorengineers.Required

Required:AzureSecurityEngineerAssociate,Security+,CertifiedCloudSecurityProfessionalcertificationsRequired