Job Title: Senior Cloud Security Engineer
Location: Mechanicsville, VA 23116 (Hybrid 2-3 days onsite)
Status: Full-time, Contract
Yakshna Solutions, Inc., (YSI) is a CMMI Level 3 assessed, ISO 9001, 20000:1, 27001 certified, woman-owned small business enterprises, headquartered in Herndon, VA, USA. YSI provides professional IT solutions and services to business corporations and government organizations. YSI is committed to serving business communities as a leading IT vendor providing innovative, quality, and cost-effective IT business solutions and services.
We offer a competitive benefits package that includes the following: 401(k), health, dental, and vision insurance, life insurance, short-term and long-term disability insurance, paid time off, training, and professional development assistance.
YSI is seeking a Senior Cloud Security Engineer (CSE) to support VDOT s cloud and computing infrastructure, with a focus on its enterprise Azure migration. This role will provide technical leadership in designing, implementing, and securing cloud environments aligned with SEC530 principles, Zero Trust, and enterprise compliance frameworks.
The CSE will oversee cloud security architecture, identity and access management, network security, security monitoring, vulnerability management, incident response, and cloud governance while collaborating with engineering, security, infrastructure, DevOps, and IT leadership teams to ensure secure, resilient, and compliant cloud operations.
Key Responsibilities
- Identify cloud security vulnerabilities, assess risk based on business impact, prioritize remediation, track remediation activities, and validate corrective actions
- Lead complex cloud security initiatives and provide technical directions to engineers. Also assist in the design of secure cloud architecture for complex enterprise environments
- Influence architecture and security decisions and prevent insecure configurations from reaching production and implement security gates within deployment pipelines.
- Explain complex security risks to non-technical stakeholders
- Assess cloud security risks and security gaps and recommend appropriate remediations. Create and maintain security documentation and evidence as well as support audits and assessments.
- Review proposed cloud solutions for security risk and define appropriate security and compensation controls.
- Will develop Azure policies to enforce standardization and compliance with enterprise requirements, as well as creating Azure Automation runbooks to support incident response workflows.
- Monitor security events using SIEM technologies and work with VDOT s SOC team to coordinate incident response activities.
- Identifies and diagnoses system problems and threats by using system logs, line monitors, SIEM, diagnostic software, and test equipment.
- Lead investigation and containment of cloud security incidents.
- Review firewall and NSG rule requests and ensure compliance with security standards.
- Must have the ability to provide documentation, architecture topology diagrams, IP schemes and access controls when required.
- Must have the ability to work independently on assigned projects.
Required Skills & Experience
- Enterprise Cloud Experience: Minimum of 8 years of enterprise cloud experience and 5 years of enterprise cloud security experience, with strong hands-on expertise in Azure cloud infrastructure, cloud engineering, security architecture, and production environments.
- Azure Cloud Security and Networking: Extensive experience configuring and securing Azure services, including Network Security Groups (NSGs), Azure Firewall, WAF, Application Gateways, virtual networks, network segmentation, Azure Monitor, Log Analytics, management groups, and Azure Policy.
- Cybersecurity and Incident Response: Strong experience in security operations, incident response, security investigations, log analysis, threat intelligence, IOC analysis, threat detection, threat hunting, vulnerability scanning, remediation tracking, risk assessment, and attack surface management.
- Security Monitoring and Compliance: Hands-on experience with SIEM and cloud security tools, including Splunk, Microsoft Sentinel, CNAPP, CWPP, and cloud security posture management solutions. Experience with Splunk Query Language, log parsing and validation, enterprise log management, and SOC integration. Knowledge of SEC530, CIS Benchmarks, NIST CSF, NIST SP 800-53, and Zero Trust principles.
- Identity, Access Management, and Automation: Expertise in IAM, RBAC, PAM, least-privilege access, and MFA, along with experience developing Azure Automation runbooks for incident response and implementing security controls to enforce enterprise standards and compliance requirements.
- Leadership and Communication: Experience collaborating with cloud infrastructure, application, and security governance teams in highly regulated or government environments. Ability to translate technical risks for technical and executive audiences, mentor junior engineers, and bridge strategic security architecture with hands-on engineering. Required certifications: Azure Security Engineer Associate, CompTIA Security+, and Certified Cloud Security Professional (CCSP). AZ-305 is preferred.
