Azure Cloud Security

Azure Cloud Security Engineer Jobs

2 jobs found

Today

Cloud Application Security Engineer

Elluminates Software Washington, DC

Washington, DC

Today

$134k - $185k/yr Full time Application Security Azure Azure Cloud Security

Apply Now

Job Description

Elluminates Software is seeking a Cloud Application Security Engineer to support an Application Vulnerability Assessment Program (AVAP). The role will operate and secure application security platforms and Kubernetes-based infrastructure in Azure AKS, while managing hardened container image workflows, automation, and security controls aligned to federal requirements.

Location and Work Schedule

Location: Washington, DC (Northwest D.C. Hybrid)
Hybrid schedule: 3 days on-site and 2 days hybrid (with Monday or Friday as the hybrid day)
Travel: Local
Type: Full-Time

Salary

USD 134,000 - 185,000 per year

Role Summary

The Cloud Application Security Engineer/System Administrator will design and maintain secure cloud infrastructure in Azure, administer AKS clusters, and manage container image lifecycle and updates. The position enforces security and compliance controls aligned to federal standards and supports AVAP customers by troubleshooting platform and pipeline issues to help minimize downtime. Responsibilities also include maintaining operational documentation and contributing to monitoring and metrics used for program-level reporting.

Key Responsibilities

Design, deploy, and maintain secure, scalable, resilient cloud infrastructure in Azure, including Azure Key Vault, Azure SQL Server, Azure SQL DB, Azure Kubernetes Service (AKS), and related services.
Operate and administer Kubernetes clusters (AKS), including node pools, networking, persistent volumes, ingress controllers, secrets management, access control, and namespaces.
Manage system administration for Windows and Linux environments.
Manage container image lifecycle and updates by pulling hardened images (e.g., Iron Bank), scanning for vulnerabilities, enforcing least-privilege configurations, and publishing to ACR.
Perform regular server administration tasks including patching, user provisioning, system monitoring, and backup/restoration.
Automate deployments using Azure DevOps or equivalent CI/CD pipelines with ARM/Bicep/Terraform and Helm.
Implement and enforce security and compliance controls aligned to NIST SP 800-53 and Zero Trust (including key vault integration, secret management, and TLS certificate rotation).
Develop and maintain operational runbooks, playbooks, SOPs, and system/network architecture diagrams for repeatable operations and continuous documentation.
Troubleshoot platform and pipeline issues across application, network, and infrastructure layers to minimize downtime for AVAP customers.
Contribute to monitoring and metrics collection (availability, scan throughput, failure rates, and license utilization) to support program-level reporting.

Required Qualifications

3+ years of relevant experience.
Demonstrated expertise with Azure (preferred) and familiarity with AWS and GCP.
Hands-on experience with Kubernetes administration (AKS), Helm, and containerization (Docker).
Experience with system administration for both Windows and Linux environments.
Experience with system administration for SQL servers/databases, including backup/restore and patching.
Experience with Infrastructure-as-Code (ARM/Bicep, Terraform, Helm) and CI/CD pipelines (Azure DevOps).
Demonstrated experience with Terraform, Bicep, and/or ARM for infrastructure automation and immutability.
Strong troubleshooting skills across networking, compute, and application layers.
Excellent technical writing and documentation skills.
Ability to work within government compliance frameworks including FedRAMP, NIST, FISMA, and Zero Trust.

Additional Skills (Plus)

Familiarity with application security tools (e.g., OpenText Fortify Software Security Center, License and Infrastructure Management, OWASP Dependency Track).
Understanding of SSO implementations using SAML/OIDC (including user/group management in Okta) and SCIM for automatic user provisioning.

Education

Bachelor’s degree in Computer Science, Information Technology, or related field, or equivalent hands-on experience.

Security Clearance

Clearance: Active Secret with the ability to obtain a Top Secret

Benefits

Medical, Dental & Vision options

Technologies

OpenText Fortify, OWASP Dependency-Track
Azure Kubernetes Service (AKS), Kubernetes
Azure, Azure Key Vault
Azure SQL Server, Azure SQL DB
Azure DevOps, ARM, Bicep, Terraform, Helm
Docker, ACR, Iron Bank
Infrastructure-as-Code, CI/CD
Windows, Linux
TLS cert rotation, NIST SP 800-53, Zero Trust
FedRAMP, FISMA, SAML, OIDC
Okta, SCIM

View full job page →

Today

Infrastructure Security Engineer

SpaceXSI Washington, DC

Washington, DC

Today

$100k - $258k/yr Full time Aws Cloud Security Azure Cloud Security Cloud Native Security

Apply Now

Job Description

SpaceXSI is seeking an Infrastructure Security Engineer to help secure cloud-native application ecosystems spanning multi-cloud and hybrid infrastructure. This role focuses on building reliable security foundations, automating controls, and ensuring that critical environments meet security and regulatory expectations from design through operations.

Working onsite in Washington, DC, you will design secure architectures across cloud platforms, harden infrastructure and containers, and integrate security into delivery pipelines. The position emphasizes infrastructure-as-code, security operations, and proactive ownership of end-to-end security projects.

Responsibilities

Design and implement secure cloud architectures across multiple cloud platforms, including AWS, GCP, and Azure
Build and secure mission-critical applications in hybrid cloud and on-premises environments
Develop and maintain Infrastructure as Code (IaC) templates with embedded security controls
Support regular security assessments and audits of cloud infrastructure and services
Implement and manage cloud security tools and services such as CSPM, CWPP, and CASB
Manage identities and roles across cloud and hybrid environments
Monitor and remediate infrastructure to comply with regulations and best practices including PCI, NIST CSF, GDPR, and HIPAA
Design and implement secure container standards and automation that support developer workflows
Maintain Kubernetes security aligned with current best practices
Collaborate with development teams to integrate security best practices into CI/CD pipelines
Secure and enhance CI/CD pipelines, including integration and maintenance of code scanning platforms
Monitor and respond to security events and incidents in cloud and hybrid environments
Maintain SIEM data pipelines needed for reliable alerting
Build, deploy, and maintain security operations infrastructure using Python, Terraform, and configuration management such as Puppet
Develop dashboards and alerts from security metrics
Develop and maintain cloud security policies, standards, and procedures
Own security projects end to end by identifying issues and implementing solutions
Stay current with emerging cloud security threats and mitigation strategies

Requirements

Bachelor’s degree in Computer Science, Cybersecurity, or a related field
3–5 years of experience in cloud security, infrastructure security, or related roles
Strong understanding of cloud security principles, compliance frameworks, and best practices
Proficiency in at least one cloud platform: AWS, GCP, or Azure, and its security services
Proven experience securing hybrid AWS/on-premises (or multi-cloud) environments, including IAM and overall security posture
Experience with Infrastructure as Code tools such as Terraform and CloudFormation
Familiarity with containerization technologies and related security implications
Knowledge of network security concepts and protocols
Experience with scripting languages such as Python and Bash for automation and tool development
Proactive mindset with strong ownership, critical thinking, and problem-solving skills
Located in the SF Bay Area or willing to relocate

Technologies

AWS, GCP, Azure
Infrastructure as Code (IaC), Terraform, CloudFormation
CSPM, CWPP, CASB
PCI, NIST CSF, GDPR, HIPAA
Kubernetes
CI/CD pipelines
SIEM
Python, Puppet, Bash
CloudWatch, Prometheus, Grafana, Wazuh
GitHub Actions, Karma

Compensation and Benefits

Compensation: $100,000 - $258,000 USD per year
Equity
Comprehensive medical, vision, and dental coverage
Access to a 401(k) retirement plan
Short and long-term disability insurance
Life insurance
Various other discounts and perks

Preferred Skills and Experience

Relevant security certifications such as CCSP, CSSK, or AWS Security Specialty
Deep expertise in Kubernetes and container security
Experience with multi-cloud environments and cloud-to-cloud security
Knowledge of CI/CD best practices and tools
Familiarity with regulatory compliance requirements including GDPR, HIPAA, PCI DSS, and NIST CSF
Strong proficiency with Python, Terraform, and configuration management such as Puppet
Hands-on experience building GitHub Actions and workflows
Experience with observability and security operations tooling such as Prometheus, Grafana, CloudWatch, Karma, and SIEM platforms such as Wazuh
Experience building custom cloud security tools or integrations
Interest in leveraging AI for cloud security monitoring and automation
Contributions to open-source cloud security projects
Experience with securing AI/ML workloads in cloud environments
Experience in banking, money transmission, P2P payments, or similarly regulated financial platforms

View full job page →

Azure Cloud Security Engineer Jobs

Cloud Application Security Engineer

Infrastructure Security Engineer

Get Azure Cloud Security Engineer Jobs alerts