VDOT Senior Cloud Security Engineer

Senior Azure Cloud Security Engineer

Location: Mechanicsville VA
Experience: 8 Years Cloud / 5 Years Cloud Security
Work Arrangement: Hybrid
Interview Process: Phone & In-Person
Pay Rate: $75.00 to $81.00

Position Overview

We are seeking an experienced Senior Azure Cloud Security Engineer to support a large-scale enterprise Azure cloud migration and security modernization initiative.

The ideal candidate will have strong hands-on expertise in Azure cloud security infrastructure engineering network security SIEM incident response vulnerability management and identity and access management (IAM) . This position requires someone who can both design secure cloud architectures and implement security solutions in complex enterprise environments.

Key Responsibilities

• Design implement and secure enterprise Microsoft Azure cloud infrastructure.

• Configure and manage Azure Firewall NSGs WAF Application Gateway virtual networks and network segmentation .

• Implement security monitoring and threat detection using Splunk Microsoft Sentinel Azure Monitor and Log Analytics .

• Lead security investigations incident response threat hunting and vulnerability remediation.

• Develop Azure Policies and Azure Automation runbooks to enforce compliance and automate security operations.

• Implement identity security controls including IAM RBAC PAM MFA and Zero Trust .

• Support cloud security posture management using CSPM CWPP and CNAPP solutions.

• Collaborate with Cloud Engineering DevOps Infrastructure and Security Operations teams.

• Conduct security risk assessments support compliance audits and provide technical leadership.

Required Qualifications

• 8 years of enterprise cloud engineering or infrastructure experience.

• 5 years of hands-on cloud security experience.

• Advanced experience securing Microsoft Azure enterprise environments .

• Strong knowledge of Azure Firewall NSGs WAF Azure Monitor Log Analytics and virtual networking .

• Hands-on experience with Splunk Microsoft Sentinel SIEM monitoring log analysis and threat detection .

• Experience with incident response threat hunting security investigations and vulnerability management .

• Experience with Tenable Nessus Microsoft Defender CSPM CWPP or CNAPP .

• Experience developing Azure Policies and Azure Automation runbooks .

• Strong understanding of IAM RBAC PAM Zero Trust CIS Benchmarks NIST CSF NIST 800-53 and SEC530 .

• Experience working in large-scale highly regulated enterprise or government environments.

• Strong communication problem-solving and technical leadership skills.

Certifications

Required: Azure Security Engineer Associate CompTIA Security CCSP
Preferred: Microsoft Azure AZ-305

Required Experience:

Senior IC