Senior Cloud Security Engineer || Mechanicsville, Virginia

Location: Mechanicsville, VA 23116 - Hybrid 3 days


Client is seeking an experienced Senior Cloud Security Engineer (Sr CSE) to implement and support the agency's cloud and computing infrastructure. The Senior Cloud Security Engineer will serve as a subject matter expert supporting Client's enterprise Azure migration, responsible for architecting, implementing, and securing cloud environments in alignment with SEC530 principles, Zero Trust, and enterprise compliance frameworks.

The Senior Cloud Security Engineer will be responsible for assisting in the design, implementation, securing, monitoring, and the continuous improvement of Client's cloud infrastructure and services across the enterprise. The position provides senior-level technical leadership for cloud security architecture, identity and access management, network security, security monitoring, vulnerability management, incident response, and cloud governance.

The Senior Cloud Security Engineer works closely with Cloud Engineering, Network Engineering, Security Operations, Enterprise Architecture, Infrastructure, Application Development, DevOps, Risk Management, and IT leadership to ensure cloud environments are secure, resilient, compliant, and aligned with enterprise security standards.

Key Responsibilities:

Identify cloud security vulnerabilities, assess risk based on business impact, prioritize remediation, track remediation activities, and validate corrective actions

Lead complex cloud security initiatives and provide technical directions to engineers. Also assist in the design of secure cloud architecture for complex enterprise environments

Influence architecture and security decisions and prevent insecure configurations from reaching production and implement security gates within deployment pipelines.

Explain complex security risks to non-technical stakeholders

Assess cloud security risks and security gaps and recommend appropriate remediations. Create and maintain security documentation and evidence as well as support audits and assessments.

Review proposed cloud solutions for security risk and define appropriate security and compensation controls.

Will develop Azure policies to enforce standardization and compliance with enterprise requirements, as well as creating Azure Automation runbooks to support incident response workflows.

Monitor security events using SIEM technologies and work with Client's SOC team to coordinate incident response activities.

Identifies and diagnoses system problems and threats by using system logs, line monitors, SIEM, diagnostic software, and test equipment.

Lead investigation and containment of cloud security incidents.

Review firewall and NSG rule requests and ensure compliance with security standards.

Must have the ability to provide documentation, architecture topology diagrams, IP schemes and access controls when required.

Must have the ability to work independently on assigned projects.

• Enterprise Cloud Experience: 8 years required.
• Enterprise Cloud Security Experience: 5 years required.
• Cloud Security & Engineering: Extensive hands-on experience in cloud security, cloud infrastructure, cloud engineering, cybersecurity, networking, identity, and security operations.
• Security Architecture & Risk Management: Ability to move between strategic architecture and hands-on engineering, identify security risks, design practical solutions, implement controls, and collaborate with infrastructure and application teams.
• Azure Security & Networking: Experience configuring Network Security Groups (NSGs), Resource Manager, management groups, Azure Firewall, Azure WAF, Azure Monitor, Application Gateways, virtual networks, network segmentation, and Log Analytics.
• Incident Response & Threat Analysis: Experience in incident response, security investigations, log analysis, threat intelligence, security monitoring, Indicators of Compromise (IOC) analysis, and coordinating cyber incident response.
• Vulnerability Management: Experience with vulnerability scanning tools such as Nessus, Tenable, and Microsoft Defender; remediation tracking, risk assessment, prioritization, and attack surface management.
• Enterprise Cloud Security: Experience securing enterprise cloud environments and implementing security controls in production.
• SIEM & Security Operations: Experience with Splunk, Microsoft Sentinel, and CNAPP; log management, security analytics, SOC integration, threat detection, and threat hunting.
• Splunk Engineering: Hands-on experience validating indexer parsers and using Splunk Query Language for monitoring and data analysis.
• Enterprise Logging Standards: Collaboration with security governance teams and application leads to implement enterprise log management standards.
• Security Frameworks & Compliance: Experience with SEC530, CIS Benchmarks, NIST Cybersecurity Framework (CSF), NIST SP 800-53, and Zero Trust principles.
• Cloud Security Posture & Workload Protection: Experience with Cloud Security Posture Management (CSPM), Cloud Workload Protection (CWPP), Cloud-Native Application Protection Platforms (CNAPP), and cloud vulnerability management.
• Azure Policy & Automation: Experience developing Azure Policies to enforce standardization and compliance, and creating Azure Automation runbooks to support incident response workflows.
• Identity & Access Management: Experience with IAM, Role-Based Access Control (RBAC), Privileged Access Management (PAM), least-privilege access, and multi-factor authentication (MFA).
• Regulated Environments: Experience working in highly regulated environments, including large government agencies or comparable organizations.
• Communication & Leadership: Ability to explain technical issues to technical teams, nontechnical stakeholders, and executives, as well as mentor junior engineers.
• Required Certifications: Azure Security Engineer Associate, CompTIA Security+, and Certified Cloud Security Professional (CCSP).
• Preferred Certifications: CCSP and Designing Microsoft Azure Infrastructure (AZ-305).

Warm Wishes!
Ravi Kumar || Sr. Technical Recruiter
St. Augustine, FL 32092
Email: ||