Cloud Security Engineer-Azure Migration

Cloud Security Engineer – Azure Migration
Position Summary
We are seeking an experienced Cloud Security Engineer to support a largescale data
center migration to Microsoft Azure for a healthcare payer organization. This role is
responsible for ensuring security controls are applied consistently across cloud
workloads, supporting identity and access management alignment, and validating
compliancerelevant configurations throughout the migration lifecycle.
The Cloud Security Engineer will work closely with platform, IAM, network, application,
and compliance teams to ensure Azure environments meet enterprise security
standards and healthcare regulatory requirements, including HIPAA and HITECH, while
enabling safe and efficient migration waves.

Key Responsibilities
Cloud Security Architecture & Standards
 Define and enforce Azure security standards and guardrails for migrated
workloads
 Ensure consistent application of security controls across subscriptions, resource
groups, and environments
 Align cloud security designs with enterprise architecture and Zero Trust principles
 Support secure landing zones and shared services architectures
Security Controls & Configuration Management
 Implement and validate Azure security controls including:
o Azure Policy and initiatives
o Network security controls (NSGs, firewalls, segmentation)
o Encryption at rest and in transit
o Logging, monitoring, and diagnostics configurations
 Validate that workloads meet baseline security and compliance requirements
before and after migration
Identity & Access Alignment
 Partner with IAM teams to ensure identity and access integration aligns with
enterprise standards

 Validate RBAC assignments, leastprivilege access, and role scoping
 Support MFA, Conditional Access, and privileged access management (PIM)
implementations
 Ensure secure authentication and authorization for cloud and hybrid workloads
Migration Wave Security Support
 Participate in wavebased migration planning and execution
 Perform premigration security readiness assessments
 Validate security configurations during cutover and postmigration stabilization
 Support rapid remediation of security findings during migration events
Compliance, Risk & Audit Support
 Ensure Azure configurations comply with HIPAA, HITECH, and internal security
policies
 Validate compliancerelevant configurations such as logging, access controls,
encryption, and retention
 Support security risk assessments, audit requests, and evidence collection
 Track remediation of security gaps identified during migration
Monitoring, Detection & Response
 Ensure security telemetry is properly integrated with enterprise monitoring and
SIEM platforms
 Validate alerting and incident detection for migrated workloads
 Support security incident response and rootcause analysis as needed
Documentation & Collaboration
 Document security standards, patterns, and validation checklists
 Maintain security architecture diagrams and runbooks
 Work closely with cloud platform, networking, IAM, application, and compliance
teams
 Provide guidance and knowledge transfer to operational security teams
postmigration

Required Qualifications
 5+ years of experience in information security or cloud security engineering
 Handson experience securing workloads in Microsoft Azure
 Strong knowledge of Azure security services (Azure Policy, Defender, RBAC,
logging)
 Experience supporting data center to Azure migration projects
 Solid understanding of identity and access management principles
 Experience working in healthcare

Preferred Qualifications
 Experience supporting health plan or payer organizations
 Familiarity with Azure landing zones and Cloud Adoption Framework (CAF)
 Experience validating compliance against HIPAA or similar regulatory
frameworks
 Knowledge of SIEM/SOC integration and security monitoring tools
 Azure security or architecture certifications

Soft Skills
 Strong analytical and riskbased decisionmaking skills
 Ability to balance security requirements with migration velocity
 Excellent communication and documentation skills
 Proven ability to collaborate across technical and governance teams