Senior Cloud Security Engineer

Kainos Innovative Solutions; Mechanicsville (VA); Hybrid; USD 140.000 - 180.000; Vollzeit

Zusammenfassung

VDOT is seeking a Senior Cloud Security Engineer to support its Azure cloud migration and secure cloud infrastructure. The role requires deep expertise in Azure security architecture, Zero Trust principles, IAM (Entra ID/Azure AD), and CI/CD security integration.

You will lead security initiatives, design secure cloud architectures, and implement security controls across enterprise environments. Hybrid work in Mechanicsville, VA with collaboration across engineering and risk teams.

Qualifikationen

• Strong experience in Microsoft Azure cloud security engineering for enterprise environments.
• Expertise in Azure security architecture, controls, and migration.
• Hands-on with Azure Policy, security configurations, and automation runbooks.
• Knowledge of Zero Trust, IAM, Entra ID, and least-privilege access.
• Experience with SIEM, vulnerability management, and incident response.

Aufgaben

• Identify cloud security vulnerabilities, assess risks, and drive remediation.
• Lead cloud security initiatives and provide senior technical guidance.
• Design and review secure cloud architectures for enterprise environments.
• Enforce security in CI/CD pipelines and deployment gates.
• Monitor security events with SIEM and coordinate incident response.
• Develop security documentation and architecture diagrams.
• Collaborate with Cloud, Network, DevOps, and Risk teams.

Kenntnisse

Azure cloud security engineering

Azure security architecture

Zero Trust architecture

IAM / Entra ID / Azure AD

CI/CD security integration

SIEM monitoring & incident response

Vulnerability management

Threat detection

Security governance & compliance

Tools

Azure Policy

Azure Automation Runbooks

Azure Security Center

CI/CD tooling

Jobbeschreibung

Job Description: Senior Cloud Security Engineer

Location: Mechanicsville, VA (Hybrid)

Job Summary

VDOT is seeking an experienced Senior Cloud Security Engineer to support its enterprise Azure cloud migration and secure cloud infrastructure. The ideal candidate will have extensive experience in Azure security architecture, Zero Trust principles, identity and access management, network security, vulnerability management, security monitoring, and incident response.

The candidate will provide technical leadership in designing, implementing, monitoring, and continuously improving enterprise cloud security controls while ensuring compliance with organizational security standards and frameworks, including SEC530 principles.

Key Responsibilities

• Identify cloud security vulnerabilities, assess business risks, prioritize remediation, and validate corrective actions.
• Lead cloud security initiatives and provide technical guidance to engineering teams.
• Design, implement, and review secure cloud architectures for complex enterprise environments.
• Enforce security requirements and implement security gates within CI/CD and deployment pipelines.
• Assess cloud solutions for security risks and recommend appropriate security controls and compensating measures.
• Develop and maintain Azure Policies to enforce enterprise security standards and compliance requirements.
• Create Azure Automation Runbooks to support security operations and incident response workflows.
• Monitor cloud security events using SIEM technologies and coordinate incident response activities with the Security Operations Center (SOC).
• Investigate, contain, and remediate cloud security incidents and emerging threats.
• Review firewall and Network Security Group (NSG) rules to ensure compliance with enterprise security standards.
• Conduct vulnerability assessments, security reviews, risk analysis, and remediation tracking.
• Prepare and maintain security documentation, architecture diagrams, network topologies, IP addressing schemes, and access control documentation.
• Support security audits, compliance assessments, and evidence collection.
• Communicate complex security risks and recommendations to technical teams, management, and non-technical stakeholders.
• Collaborate with Cloud Engineering, Network Engineering, DevOps, Security Operations, Enterprise Architecture, Infrastructure, and Risk Management teams.

Required Skills And Qualifications

• Strong experience in Microsoft Azure cloud security engineering and enterprise cloud environments.
• Expertise in Azure security architecture, security controls, and cloud migration.
• Hands-on experience with Azure Policy, Azure security configurations, and Azure Automation Runbooks.
• Strong understanding of Zero Trust architecture, identity and access management (IAM), Microsoft Entra ID (Azure AD), and least-privilege access.
• Experience with cloud network security, firewalls, Network Security Groups (NSGs), IP addressing, and network segmentation.
• Experience with SIEM tools, security event monitoring, threat detection, and incident response.
• Strong knowledge of vulnerability management, risk assessment, security remediation, and compliance frameworks.
• Experience integrating security controls into CI/CD pipelines and DevSecOps processes.
• Ability to develop security documentation, architecture diagrams, and compliance evidence.
• Excellent analytical, troubleshooting, communication, and stakeholder management skills.
• Ability to work independently and provide senior-level technical leadership.

Preferred Qualifications

• Experience supporting large-scale enterprise Azure migration initiatives.
• Familiarity with SEC530 principles and Zero Trust security practices.
• Experience working with enterprise SOC teams and security operations processes.
• Experience in government, public-sector, or highly regulated environments.