Senior Cloud Security Engineer

Job Summary

We are seeking an experienced Senior Cloud Security Engineer (Sr. CSE) to support enterprise cloud infrastructure and Azure migration initiatives. The ideal candidate will serve as a subject matter expert in cloud security architecture, implementation, monitoring, and governance, ensuring cloud environments align with SEC530 principles, Zero Trust architecture, and enterprise security and compliance frameworks.

The Senior Cloud Security Engineer will provide technical leadership across cloud security architecture, identity and access management, network security, security monitoring, vulnerability management, incident response, and cloud governance. This role requires close collaboration with Cloud Engineering, Network Engineering, Security Operations, Enterprise Architecture, Infrastructure, Application Development, DevOps, Risk Management, and IT leadership.

Key Responsibilities

• Identify cloud security vulnerabilities, assess risk based on business impact, prioritize remediation, track corrective actions, and validate remediation outcomes.

• Lead complex cloud security initiatives and provide technical guidance to cloud and infrastructure engineers.

• Design, implement, and review secure Azure cloud architectures for complex enterprise environments.

• Influence architecture and security decisions to prevent insecure configurations from reaching production.

• Implement security controls and security gates within CI/CD and deployment pipelines.

• Communicate complex security risks, findings, and remediation recommendations to technical and non-technical stakeholders.

• Assess cloud security risks and security gaps, recommend corrective actions, and define appropriate security and compensating controls.

• Develop and maintain Azure security policies to enforce enterprise standards, configuration consistency, and regulatory compliance.

• Create and maintain Azure Automation runbooks to support incident response and security operations workflows.

• Monitor cloud security events using SIEM technologies and coordinate incident response activities with VDOT’s Security Operations Center (SOC).

• Investigate and diagnose system issues and security threats using system logs, network monitoring tools, SIEM platforms, diagnostic software, and other technical tools.

• Lead the investigation, containment, and remediation of cloud security incidents.

• Review firewall and Network Security Group (NSG) rule requests to ensure compliance with enterprise security standards.

• Prepare and maintain security documentation, architecture diagrams, network topology diagrams, IP addressing schemes, access control documentation, and audit evidence.

• Support security audits, risk assessments, compliance reviews, and enterprise security assessments.

• Work independently on assigned projects while coordinating with cross-functional technical teams.

Key Technical Skills

• Microsoft Azure cloud security and enterprise cloud migration

• Cloud security architecture and secure configuration management

• Zero Trust security principles and SEC530-aligned practices

• Identity and Access Management (IAM)

• Azure security policies and governance

• Azure Automation and PowerShell runbooks

• SIEM monitoring and security event analysis

• Security Operations Center (SOC) coordination and incident response

• Vulnerability assessment, risk analysis, and remediation

• Azure networking, firewalls, and Network Security Groups (NSGs)

• CI/CD pipeline security and deployment security gates

• Security documentation, architecture diagrams, and audit evidence

• Enterprise security controls and compliance frameworks