Security Engineer, Cloud

This is a fully remote position, open to applicants in United States.

📋 Description

• Design, implement, and uphold cloud security guardrails within Microsoft Azure environments, encompassing subscription governance, resource organization, RBAC, and secure configuration baselines.

• Develop and enhance Azure landing zone architectures, management group hierarchies, policy enforcement, governance standards, tagging strategies, and security controls.

• Configure and sustain capabilities for encryption, secrets management, logging, monitoring, alerting, and secure remote administration.

• Collaborate with platform, engineering, and infrastructure teams on architecture evaluations, secure cloud networking, and hardening initiatives.

• Conduct cloud security posture assessments to detect misconfigurations, excessive permissions, security vulnerabilities, and compliance deviations.

• Assist in the investigation, detection, and resolution of cloud security incidents alongside Security Operations and infrastructure teams.

• Maintain technical documentation and evidence illustrating the implementation of security controls, monitoring, and compliance alignment.

• Establish repeatable security guardrails and standards for secure infrastructure-as-code and deployment practices.

• Recommend enhancements for secure connectivity, segmentation, workload hardening, and monitoring.

• Coordinate with Security Operations, GRC, architecture teams, and auditors for control validation and compliance evaluations.

• Empower engineering and delivery teams to embrace secure cloud development and deployment methodologies.

⛳️ Requirements

• In-depth knowledge of Microsoft Azure cloud security architecture, subscription governance, resource organization, and RBAC.

• Experience in designing and executing Azure landing zones, management group structures, governance frameworks, and policy-driven security controls.

• Proficiency in cloud identity and access management, privileged access controls, policy enforcement, secrets management, encryption, logging, and monitoring.

• Strong comprehension of cloud networking, segmentation, workload hardening, and secure connectivity principles.

• Experience in performing cloud security assessments, posture evaluations, and remediation planning.

• Capability to build and support cloud detection mechanisms and coordinate security investigations and response activities.

• Familiarity with infrastructure-as-code and policy-as-code concepts along with secure deployment methodologies.

• Proficient in scripting, automation, and cloud operational tools.

• Ability to document technical architectures and convey security requirements to both technical and non-technical audiences.

• Experience in mapping cloud security controls to audit, compliance, and evidence requirements.

• Knowledge of centralized logging, security monitoring, and detection engineering within cloud environments.

• At least three years of practical experience in cloud security, cloud infrastructure security, or a related cybersecurity role.

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field, or an equivalent combination of education and relevant professional experience.

• Experience in implementing Microsoft Azure security controls, governance frameworks, and best practices in cloud architecture.

• Experience with cloud security assessments, control reviews, remediation planning, and security posture management.

• Experience with infrastructure-as-code, cloud automation, and cloud architecture concepts.

• Preferred: experience assisting with audits, compliance, and evidence collection; familiarity with Microsoft Defender for Cloud or similar tools; exposure to AWS/GCP; involvement in cloud architecture reviews or landing zone implementations; relevant certifications such as AZ-500, CISSP, or CCSK.

• Must be able to sit for extended periods and work at a computer.

• Must be capable of lifting up to 15 pounds occasionally.

🏝️ Benefits

• Comprehensive health benefits package.

• Opportunities for professional development and growth.

• Flexible work environment.

• Collaborative team culture.

• Access to cutting-edge technology and tools.