Senior Azure Security Engineer

Job Family:

IT Cyber Security (Digital)

Travel Required:

Up to 25%

Clearance Required:

Ability to Obtain Public Trust

What You Will Do:

What does a successful Cloud Security Architect do?
In this role, you’ll lead the development of cyber-security architecture within an agile environment, ensuring that technology initiatives align with security frameworks to protect our key government client’s cloud environments. Your responsibilities include strategic planning, architecture design, and implementing robust security controls. As a trusted advisor, you’ll contribute to developing cloud risk management strategies and multi-year implementation programs to address our customer’s Cyber-Security, Cyber Defense, and Business needs. You will be a hands-on security engineer who knows how to runs vulnerability scans and work with DevOps to ensure remedies are implemented.  If you’re passionate about securing cloud infrastructures and making a meaningful impact, we encourage you to apply! 

What you will do as an Azure Government Cloud Security Architect: 
Cloud Security Architect: In this pivotal role, you’ll spearhead the development of cyber-security architecture within an agile environment. Your mission: to fortify our key government client’s cloud environments by seamlessly integrating technology initiatives with robust security frameworks. As a seasoned professional, you’ll be accountable for strategic planning, architecture design, and the implementation of rigorous security controls. Your expertise will guide the development of cloud risk management strategies and multi-year programs, addressing critical Cyber-Security, Cyber Defense, and Business imperatives. If you’re ready to make a lasting impact, join our team!
Design Azure Cloud Security Solutions:

• Lead architecture reviews for decision records.
• Cover IAM (Entra ID/Azure Active Directory), posture management, workload protection, SIEM/SOAR, and application testing.

 Architectural Runway and Collaboration:

• Create infosec requirements for infrastructure and app development.
• Collaborate with agile teams to meet security needs.

Continuous Monitoring and Compliance:

• Monitor cybersecurity policies, compliance artifacts, and systems authorization.
• Map security controls to compliance requirements.

Zero-Trust Implementation:

• Integrate Azure Zero-Trust Architecture into cloud solution design.

Risk Mitigation and Vulnerability Remediation:

• Coordinate risk reduction efforts for applications and infrastructure.

Hybrid Cloud Deployment:

• Deploy FedRAMP High hybrid cloud solutions, integrating on-premises components.

Threat Assessment and Incident Response:

• Assess vulnerabilities and provide incident support.

What You Will Need:

• Microsoft Azure Cloud experience (GovCloud preferred).
• Familiarity with Azure security tools/platforms (e.g., Azure AD, Sentinel, Defender, Monitor, Key Vault).
• Bachelor’s degree in a technology field (Master’s degree preferred).
• 5+ years of cyber-related experience in a commercial environment with Azure, focusing on technical information security and risk management.
• Identity Access and Management concepts (including multifactor authentication and SSO/Federation).
• Privileged Access Management.
• Vulnerability testing for Azure systems.
• Understanding of CI/CD pipelines and software scanning.
• Demonstrated expertise in Information Security and Risk Management across Windows and Linux.
• Familiarity with key domains: 
• Identity, Credential, and Access Management (ICAM).
• Authentication and Authorization (including SSO and Identity Federation).
• Zero-Trust Model.
• Defense-In-Depth.
• Governance and Compliance.
• Data Security.
• Operating System Security.
• Network Layer Protection.
• Continuous Diagnostics and Mitigation, Alerting, Audit Trail, and Incident Response.
• Cloud Core Platform (Compute, Storage, Networking).

What Would Be Nice To Have: 

• INFOSEC Certifications: CISSP, CCSP, CISM.
• Azure/AWS/Google Training and Certification.
• Microsoft Certifications/Exams (recommended): Sc-100 Cybersecurity Architect, Sc-300 Identity and Access Administration, AZ-500 Azure Security Engineer.
• Crowdstrike Falcon EDR for Azure.
• Managing/maintaining FISM.
• Candidate must be a lawful permanent resident (at least 3 consecutive years onshore) or US Citizen. 
• Candidate must be able to pass an extensive background check.
• Proficiency in Microsoft Azure services,