Job Description: Senior Cloud Security Engineer

Location: Mechanicsville, VA (Hybrid)

Job Summary

VDOT is seeking an experienced Senior Cloud Security Engineer to support its enterprise Azure cloud migration and secure cloud infrastructure. The ideal candidate will have extensive experience in Azure security architecture, Zero Trust principles, identity and access management, network security, vulnerability management, security monitoring, and incident response.

The candidate will provide technical leadership in designing, implementing, monitoring, and continuously improving enterprise cloud security controls while ensuring compliance with organizational security standards and frameworks, including SEC530 principles.

Key Responsibilities

• Identify cloud security vulnerabilities, assess business risks, prioritize remediation, and validate corrective actions.

• Lead cloud security initiatives and provide technical guidance to engineering teams.

• Design, implement, and review secure cloud architectures for complex enterprise environments.

• Enforce security requirements and implement security gates within CI/CD and deployment pipelines.

• Assess cloud solutions for security risks and recommend appropriate security controls and compensating measures.

• Develop and maintain Azure Policies to enforce enterprise security standards and compliance requirements.

• Create Azure Automation Runbooks to support security operations and incident response workflows.

• Monitor cloud security events using SIEM technologies and coordinate incident response activities with the Security Operations Center (SOC).

• Investigate, contain, and remediate cloud security incidents and emerging threats.

• Review firewall and Network Security Group (NSG) rules to ensure compliance with enterprise security standards.

• Conduct vulnerability assessments, security reviews, risk analysis, and remediation tracking.

• Prepare and maintain security documentation, architecture diagrams, network topologies, IP addressing schemes, and access control documentation.

• Support security audits, compliance assessments, and evidence collection.

• Communicate complex security risks and recommendations to technical teams, management, and non-technical stakeholders.

• Collaborate with Cloud Engineering, Network Engineering, DevOps, Security Operations, Enterprise Architecture, Infrastructure, and Risk Management teams.

Required Skills and Qualifications

• Strong experience in Microsoft Azure cloud security engineering and enterprise cloud environments.

• Expertise in Azure security architecture, security controls, and cloud migration.

• Hands-on experience with Azure Policy, Azure security configurations, and Azure Automation Runbooks.

• Strong understanding of Zero Trust architecture, identity and access management (IAM), Microsoft Entra ID (Azure AD), and least-privilege access.

• Experience with cloud network security, firewalls, Network Security Groups (NSGs), IP addressing, and network segmentation.

• Experience with SIEM tools, security event monitoring, threat detection, and incident response.

• Strong knowledge of vulnerability management, risk assessment, security remediation, and compliance frameworks.

• Experience integrating security controls into CI/CD pipelines and DevSecOps processes.

• Ability to develop security documentation, architecture diagrams, and compliance evidence.

• Excellent analytical, troubleshooting, communication, and stakeholder management skills.

• Ability to work independently and provide senior-level technical leadership.

Preferred Qualifications

• Experience supporting large-scale enterprise Azure migration initiatives.

• Familiarity with SEC530 principles and Zero Trust security practices.

• Experience working with enterprise SOC teams and security operations processes.

• Experience in government, public-sector, or highly regulated environments.