Sr. Cloud Security Engineer

Full Time Direct Hire Permanent Role

100% Onsite

No Sponsorship

No C2C

We are seeking a skilled and motivated Sr Cloud Security Engineer to join our growing cybersecurity team. In this role, you will be responsible for securing cloud infrastructure, applications, and data across our Azure cloud platform. You will collaborate with DevOps, Infrastructure, and Application teams to design, implement, and maintain security controls and best practices that protect the confidentiality, integrity, and availability of our cloud-based systems.

• Design and implement cloud security architecture for IaaS, PaaS, and SaaS our coud environment.
• Develop and enforce cloud security policies, standards, and procedures.
• Manage and enforce role-based access control (RBAC), least privilege, and just-in-time (JIT) access principles across our Azure environment.
• Conduct regular access reviews and audits to ensure proper access provisioning, deprovisioning, and compliance with internal policies.
• Monitor our Azure environment for security threats, vulnerabilities, and misconfigurations using SIEM and cloud-native tools.
• Evaluate and integrate security tools and technologies, such as CSPM, CWPP, and CIEM.
• Work with engineering and DevOps teams to embed security into CI/CD pipelines and Infrastructure-as-Code (IaC).
• Lead cloud security assessments, penetration testing, and threat modeling initiatives.
• Respond to and investigate cloud security incidents, ensuring proper containment and remediation.
• Support audits and compliance efforts related to cloud security.
• Stay up to date with emerging cloud threats, vulnerabilities, and best practices.
• Manage IAM processes and workflows to streamline user provisioning, deprovisioning, and access requests.
• Monitor network traffic for suspicious activity and security breaches; investigate and respond to security incidents in a timely manner.
• Configure and manage firewalls, intrusion detection/prevention systems (IDS/IPS), and other security devices to protect against unauthorized access and malicious activities.
• Provide technical support and guidance to internal stakeholders on network security-related issues and best practices.
• Participate in security incident response drills and exercises to ensure preparedness for potential security incidents.
• Continuously monitor and evaluate the effectiveness of network security controls; make recommendations for improvements as needed.
• Participate in security incident response drills and exercises to ensure preparedness for potential security incidents.

• Continuously monitor and evaluate the effectiveness of network security controls; make recommendations for improvements as needed.

• Bachelor's degree in Computer Science, Information Security, or a related field + 8 years of experience in a Network Security role.

• 6+ years of experience managing environments within a leading cloud platform such as Microsoft Azure
• 5+ years of experience in cybersecurity, with a focus on cloud security.
• Cloud security certifications (e.g., AWS Certified Security – Specialty, Azure Security Engineer strongly preferred.
• Experience with container security (e.g., Docker, Kubernetes, EKS, AKS, GKE).
• Knowledge of DevSecOps principles and secure SDLC practices.
• Experience working in regulated environments (e.g., financial, healthcare, government).
• One of the following Security certifications: Certified Information Systems Auditor (CISA), CompTIA Security+, Certified Ethical Hacker(CEH), Cisco Certified Network Associate (CCNA), Offensive Security Certified Professional (OSCP) Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM) required.
• Hands-on experience with identity and access management (IAM), RBAC, and access auditing in cloud environments.
• Proficient in scripting or automation tools (e.g., Python, Bash, Terraform, CloudFormation).
• Familiarity with cloud-native security controls and services.
• Strong understanding of network security, IAM, and encryption in the cloud.
• Experience with security frameworks and standards such as NIST, CIS Benchmarks, and Zero Trust.
• Proven experience in designing, implementing, and maintaining network solutions and infrastructure with a strong understanding of networking protocols, architectures, and technologies.
• Hands-on experience with network security tools and technologies, including firewalls, IDS/IPS, VPNs, SIEM, etc.
• Proficiency in configuring and managing network devices from vendors such as Cisco, Palo Alto Networks, Check Point, Fortinet, etc.
• Experience with network security protocols and standards, such as IPsec, SSL/TLS, DNSSEC, SNMP, etc.
• Excellent analytical and problem-solving skills, with the ability to assess complex security issues and develop effective solutions.

Strong communication and interpersonal skills, with the ability to collaborate effectively with cross-functional teams and communicate technical concepts to non-technical