Azure Cloud Security Engineer

**Cloud Security Engineer (Azure)**
**Overview**
We are seeking a
hands-on Cloud Security Engineer (Azure)
to support the implementation and operationalization of security controls within a regulated Azure Public Cloud environment.
This role is focused on
technical execution
, not just compliance. You will be responsible for translating
NIST SP 800-53 and RMF requirements
into real-world Azure configurations, ensuring secure, compliant, and audit-ready cloud deployments aligned with ATO and continuous monitoring standards.
**Key Responsibilities**

• Implement and operationalize NIST SP 800-53 controls in Azure Public Cloud
• Translate security and RMF requirements into Azure-native configurations, guardrails, and engineering tasks
• Assess Azure environments to identify security gaps and drive remediation efforts
• Implement and manage:

• Microsoft Entra ID (RBAC, PIM, Conditional Access, identity governance)
• Azure Policy and governance initiatives
• Network security controls (NSGs, Azure Firewall, Private Endpoints, segmentation)
• Encryption & key management (Key Vault, CMK, TLS)
• Logging, monitoring, and SIEM integrations

• Configure and leverage Microsoft security tools:

• Microsoft Defender for Cloud
• Defender for Endpoint, Identity, Office 365, and Cloud Apps
• Microsoft Sentinel

• Develop automation and infrastructure-as-code solutions (Terraform, ARM/Bicep)
• Break down work into tasks and track progress using Agile/Jira workflows
• Partner with Cloud Engineering, DevOps, IAM, and Cyber teams to ensure secure deployments
• Support:

• Control gap assessments and remediation
• SSP documentation, evidence collection, and POA&M tracking
• Audit readiness, ATO processes, and continuous monitoring

**Required Qualifications**

• 5–7+ years of experience in cloud/security engineering
• Strong hands-on experience with Microsoft Azure security
• Deep understanding of NIST SP 800-53 and RMF frameworks
• Experience supporting regulated cloud environments (FedRAMP High/Moderate or similar)
• Proven ability to implement—not just design—security controls in Azure
• Experience with:

• Microsoft Defender suite
• Azure Policy and governance
• Cloud logging and monitoring
• IAM and network security fundamentals

**Preferred Qualifications**

• Azure Security Engineer Associate (AZ-500) or similar
• Certifications such as CISSP, CCSP, or CAP
• Experience with Terraform, ARM, or Bicep for automation
• Familiarity with Zero Trust architecture in Microsoft environments
• Exposure to tools like Wiz

**What We’re Looking For**

• A hands-on engineer who can execute security implementations end-to-end
• Ability to translate security requirements into actionable engineering work
• Comfortable working in an Agile, ticket-driven environment
• Strong collaboration across security, cloud, and IAM teams