Senior Security Engineer (Azure)

Role overview A consultancy focused on government technology modernization is hiring a Senior Security Engineer to harden a large-scale Azure environment for a public-sector client. The role centers on building secure identity, monitoring, and policy foundations that align with federal and state compliance requirements. The engineer will work alongside cloud architects, platform engineers, and client stakeholders to embed security into architecture, infrastructure, and delivery pipelines.

Responsibilities - Design and implement identity and access management models, including role-based access control and privileged access controls across the Azure tenant. - Configure and advise on cloud security tooling such as Microsoft Defender for Cloud, and define Azure Policy guardrails that enforce governance standards. - Build centralized logging, monitoring, and threat-detection capabilities that surface risks early and support incident response. - Architect key management and secrets-handling solutions using services like Azure Key Vault. - Contribute to secure cloud architecture decisions spanning networking, hybrid connectivity, and access patterns. - Support compliance efforts, including HIPAA alignment and Authority to Operate preparation activities. - Embed security into Infrastructure-as-Code and CI/CD pipelines so deployments remain safe by default. - Produce security documentation, standards, and operational runbooks that enable client teams to operate the environment confidently.

Requirements - Hands-on experience with Azure cloud security, including Microsoft Entra ID and Defender for Cloud. - Strong knowledge of identity and access management, including RBAC and privileged access controls. - Familiarity with compliance frameworks such as HIPAA, state security standards, and ATO processes. - Experience implementing cloud security monitoring, logging, and incident detection at scale. - Practical use of Azure Policy and governance guardrails to enforce organizational security standards. - Experience with key management, secrets handling, and secure network architecture, including hybrid or on-premises integration patterns. - Comfort supporting Infrastructure-as-Code and secure CI/CD pipeline practices. - Ability to document security architecture, standards, and operational runbooks clearly for diverse audiences. - Strong collaboration skills for partnering with engineers, architects, and stakeholders on security design and remediation.

Nice to have - Experience preparing evidence packages for federal or state ATO reviews. - Background consulting on or directly delivering government technology modernization programs.

Benefits and work setup - Fully remote within the contiguous United States, with eligibility limited to specific listed states. - Comprehensive medical, dental, and vision coverage plus disability, life, and accident insurance. - Home office setup support, including a company laptop and assistance, plus a monthly utility reimbursement. - Learning and development budget covering LinkedIn Learning, courses, certifications, and tuition. - Pre-tax commuter benefits for in-office travel when applicable, and a referral bonus program. - Collaborative, remote-friendly culture. Legal authorization to work in the United States is required, and the role may be subject to a government background check or security clearance depending on the contract.