The Senior Cloud Security Engineer will provide technical leadership across cloud security architecture, identity and access management, network security, security monitoring, vulnerability management, incident response, and cloud governance. This role requires close collaboration with Cloud Engineering, Network Engineering, Security Operations, Enterprise Architecture, Infrastructure, Application Development, DevOps, Risk Management, and IT leadership.
Identify cloud security vulnerabilities, assess risk based on business impact, prioritize remediation, track corrective actions, and validate remediation outcomes.
Lead complex cloud security initiatives and provide technical guidance to cloud and infrastructure engineers.
Design, implement, and review secure Azure cloud architectures for complex enterprise environments.
Influence architecture and security decisions to prevent insecure configurations from reaching production.
Implement security controls and security gates within CI/CD and deployment pipelines.
Communicate complex security risks, findings, and remediation recommendations to technical and non-technical stakeholders.
Assess cloud security risks and security gaps, recommend corrective actions, and define appropriate security and compensating controls.
Develop and maintain Azure security policies to enforce enterprise standards, configuration consistency, and regulatory compliance.
Create and maintain Azure Automation runbooks to support incident response and security operations workflows.
Monitor cloud security events using SIEM technologies and coordinate incident response activities with VDOT’s Security Operations Center (SOC).
Investigate and diagnose system issues and security threats using system logs, network monitoring tools, SIEM platforms, diagnostic software, and other technical tools.
Lead the investigation, containment, and remediation of cloud security incidents.
Review firewall and Network Security Group (NSG) rule requests to ensure compliance with enterprise security standards.
Prepare and maintain security documentation, architecture diagrams, network topology diagrams, IP addressing schemes, access control documentation, and audit evidence.
Support security audits, risk assessments, compliance reviews, and enterprise security assessments.
Work independently on assigned projects while coordinating with cross-functional technical teams.
Microsoft Azure cloud security and enterprise cloud migration
Cloud security architecture and secure configuration management
Zero Trust security principles and SEC530-aligned practices
Identity and Access Management (IAM)
Azure security policies and governance
Azure Automation and PowerShell runbooks
SIEM monitoring and security event analysis
Security Operations Center (SOC) coordination and incident response
Vulnerability assessment, risk analysis, and remediation
Azure networking, firewalls, and Network Security Groups (NSGs)
CI/CD pipeline security and deployment security gates
Security documentation, architecture diagrams, and audit evidence
Enterprise security controls and compliance frameworks
