Cloud Security Engineer – Azure Migration
Position Summary
We are seeking an experienced Cloud Security Engineer to support a largescale data
center migration to Microsoft Azure for a healthcare payer organization. This role is
responsible for ensuring security controls are applied consistently across cloud
workloads, supporting identity and access management alignment, and validating
compliancerelevant configurations throughout the migration lifecycle.
The Cloud Security Engineer will work closely with platform, IAM, network, application,
and compliance teams to ensure Azure environments meet enterprise security
standards and healthcare regulatory requirements, including HIPAA and HITECH, while
enabling safe and efficient migration waves.
Key Responsibilities
Cloud Security Architecture & Standards
Define and enforce Azure security standards and guardrails for migrated
workloads
Ensure consistent application of security controls across subscriptions, resource
groups, and environments
Align cloud security designs with enterprise architecture and Zero Trust principles
Support secure landing zones and shared services architectures
Security Controls & Configuration Management
Implement and validate Azure security controls including:
o Azure Policy and initiatives
o Network security controls (NSGs, firewalls, segmentation)
o Encryption at rest and in transit
o Logging, monitoring, and diagnostics configurations
Validate that workloads meet baseline security and compliance requirements
before and after migration
Identity & Access Alignment
Partner with IAM teams to ensure identity and access integration aligns with
enterprise standards
Validate RBAC assignments, leastprivilege access, and role scoping
Support MFA, Conditional Access, and privileged access management (PIM)
implementations
Ensure secure authentication and authorization for cloud and hybrid workloads
Migration Wave Security Support
Participate in wavebased migration planning and execution
Perform premigration security readiness assessments
Validate security configurations during cutover and postmigration stabilization
Support rapid remediation of security findings during migration events
Compliance, Risk & Audit Support
Ensure Azure configurations comply with HIPAA, HITECH, and internal security
policies
Validate compliancerelevant configurations such as logging, access controls,
encryption, and retention
Support security risk assessments, audit requests, and evidence collection
Track remediation of security gaps identified during migration
Monitoring, Detection & Response
Ensure security telemetry is properly integrated with enterprise monitoring and
SIEM platforms
Validate alerting and incident detection for migrated workloads
Support security incident response and rootcause analysis as needed
Documentation & Collaboration
Document security standards, patterns, and validation checklists
Maintain security architecture diagrams and runbooks
Work closely with cloud platform, networking, IAM, application, and compliance
teams
Provide guidance and knowledge transfer to operational security teams
postmigration
Required Qualifications
5+ years of experience in information security or cloud security engineering
Handson experience securing workloads in Microsoft Azure
Strong knowledge of Azure security services (Azure Policy, Defender, RBAC,
logging)
Experience supporting data center to Azure migration projects
Solid understanding of identity and access management principles
Experience working in healthcare
Preferred Qualifications
Experience supporting health plan or payer organizations
Familiarity with Azure landing zones and Cloud Adoption Framework (CAF)
Experience validating compliance against HIPAA or similar regulatory
frameworks
Knowledge of SIEM/SOC integration and security monitoring tools
Azure security or architecture certifications
Soft Skills
Strong analytical and riskbased decisionmaking skills
Ability to balance security requirements with migration velocity
Excellent communication and documentation skills
Proven ability to collaborate across technical and governance teams
