Patient First is hiring a Security Engineer II (Hybrid Cloud) to help protect cloud operations and strengthen cloud-native security across Azure and Microsoft 365. This role blends hands-on security operations with design-time governance and incident response support, with a focus on building auditable, repeatable controls that reduce manual validation.
This position is based in Glen Allen, VA and offers a $125,000 - $150,000 annual salary range (depending on experience).
What you’ll be doing
- Implement and maintain Microsoft Defender for Cloud, Azure Policy, security baseline controls, and cloud posture recommendations.
- Configure and support RBAC, Conditional Access, privileged access, and identity governance models across Azure and Microsoft 365.
- Maintain centralized logging, alerting, and monitoring pipelines to support cloud workload investigations.
- Support security gates in deployment workflows, including policy validation, access review, and exception management.
- Provide security input during architecture reviews, workload intake, and production go-live readiness.
- Move security from after-the-fact review into design-time and pipeline-integrated governance.
- Standardize cloud security baselines and translate existing policies into Azure Policy and RBAC standards with operational control requirements.
- Improve auditability by aligning monitoring, logging, access review, and compliance reporting to cloud workloads.
- Support security operations including firewall management, IDS/IPS and EDR management, security monitoring, auditing, vulnerability management, and patch-related coordination.
- Investigate alerts, participate in incident response, and support threat hunting, log review, and risk analysis.
- Assist with security reviews for applications, systems, third-party vendors, and hybrid cloud implementations.
- Support compliance activities related to HIPAA, PCI, access control, vulnerability remediation, and audit evidence.
- Communicate security risks and remediation recommendations to technical teams and business stakeholders.
What you’ll bring
- Must be 18 years of age or older.
- High school diploma or equivalent.
- At least 3 years of experience in cybersecurity, security operations, cloud security, or hybrid infrastructure security roles.
- Experience with Azure security services, Microsoft Defender for Cloud, Sentinel or SIEM tools, identity, RBAC, and access control concepts.
- Understanding of vulnerability management, logging, alerting, incident response, and compliance evidence expectations.
- Working knowledge of hybrid environments including Windows/Linux systems, networking, firewalls, SaaS/PaaS/IaaS security, and Microsoft 365.
- Ability to communicate risk, remediation options, and control requirements clearly to technical and non-technical audiences.
- Experience in regulated or compliance-driven environments; healthcare experience preferred.
- Knowledge of NIST, HIPAA, PCI, CIS, COBIT, or similar security frameworks.
- Azure Security Engineer Associate, CISSP, or comparable security certification.
- Experience with SIEM/SOAR, DLP, EDR, vulnerability scanning, and cloud security posture management tools.
Tools and technologies
Microsoft Defender for Cloud, Azure Policy, RBAC, Conditional Access, Microsoft 365, Sentinel, SIEM tools, IDS/IPS, EDR, Windows, Linux, SaaS, PaaS, IaaS, NIST, HIPAA, PCI, CIS, COBIT, SIEM/SOAR, DLP, vulnerability scanning, cloud security posture management tools, Azure Security Engineer Associate, CISSP.
Benefits
- Health, Dental and Vision insurance for employees and dependents
- Disability, Life and Long Term care insurance
- Employee Assistance Program, Flexible Spending accounts, 401(k) Retirement Plan (with employer match)
- Paid Annual Leave, Volunteer Time Off Pay, Bereavement Leave, Emergency Leave Bank
- Overtime Pay, Holiday Pay, Double time compensation for all holidays worked
- Discounted medical treatment at any Patient First location for employees and immediate family
- Recruitment bonus
Salary Range: $125,000 - $150,000 annually, depending on experience.
