Senior Cloud Security Engineer: Azure & Zero Trust Lead

Mbi Llc; Mechanicsville (VA); On-site; USD 140,000 - 190,000; Full time

Job summary

VDOT seeks a Senior Cloud Security Engineer to lead security across enterprise Azure migrations and cloud environments. You will architect, implement, and secure cloud services in alignment with SEC530, Zero Trust, and compliance frameworks while guiding cross‑disciplinary teams.

You will monitor, respond to incidents, develop policies, and work with SOC and infrastructure teams to maintain secure, compliant cloud operations.

Qualifications

• Extensive enterprise cloud security experience across design, implementation, and operations.
• Strong hands-on expertise in cloud infrastructure and cloud engineering.
• Deep knowledge of IAM, RBAC, PAM and least-privilege access in regulated environments.
• Ability communicate complex security concepts to technical and executive audiences.

Responsibilities

• Identify and remediate cloud security vulnerabilities; track remediation and validate actions.
• Lead complex cloud security initiatives and guide engineers in secure cloud architecture.
• Enforce secure configurations and gates within deployment pipelines.
• Develop and enforce Azure policies for standardization and compliance.
• Monitor security events with SIEM and coordinate with SOC for incidents.
• Lead investigation and containment of cloud security incidents; coordinate cross-team response.
• Review network security rules and ensure alignment with standards.
• Produce architecture diagrams, IP schemes and access control documentation.
• Collaborate with governance and application teams on log management standards.
• Maintain knowledge of SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, Zero Trust.

Skills

Azure Security

Cloud Architecture

IAM / RBAC / PAM

Security Operations

Vulnerability Management

Incident Response

Zero Trust

Security Governance

Compliance (NIST/CIS)

Tools

Nessus

Tenable

Defender

Splunk

Microsoft Sentinel

CNAPP

CWPP

Azure Policy

Azure Automation

NSG / Azure Firewall

Azure Monitor / Application Gateway

Job description

VDOT seeks a Senior Cloud Security Engineer to lead security across enterprise Azure migrations and cloud environments. You will architect, implement, and secure cloud services in alignment with SEC530, Zero Trust, and compliance frameworks while guiding cross‑disciplinary teams.

You will monitor, respond to incidents, develop policies, and work with SOC and infrastructure teams to maintain secure, compliant cloud operations.