Security Engineer II – Hybrid Cloud

Patient First is hiring a Security Engineer II (Hybrid Cloud) to help protect cloud operations and strengthen cloud-native security across Azure and Microsoft 365. This role blends hands-on security operations with design-time governance and incident response support, with a focus on building auditable, repeatable controls that reduce manual validation.

This position is based in Glen Allen, VA and offers a $125,000 - $150,000 annual salary range (depending on experience).

What you’ll be doing

• Implement and maintain Microsoft Defender for Cloud, Azure Policy, security baseline controls, and cloud posture recommendations.
• Configure and support RBAC, Conditional Access, privileged access, and identity governance models across Azure and Microsoft 365.
• Maintain centralized logging, alerting, and monitoring pipelines to support cloud workload investigations.
• Support security gates in deployment workflows, including policy validation, access review, and exception management.
• Provide security input during architecture reviews, workload intake, and production go-live readiness.
• Move security from after-the-fact review into design-time and pipeline-integrated governance.
• Standardize cloud security baselines and translate existing policies into Azure Policy and RBAC standards with operational control requirements.
• Improve auditability by aligning monitoring, logging, access review, and compliance reporting to cloud workloads.
• Support security operations including firewall management, IDS/IPS and EDR management, security monitoring, auditing, vulnerability management, and patch-related coordination.
• Investigate alerts, participate in incident response, and support threat hunting, log review, and risk analysis.
• Assist with security reviews for applications, systems, third-party vendors, and hybrid cloud implementations.
• Support compliance activities related to HIPAA, PCI, access control, vulnerability remediation, and audit evidence.
• Communicate security risks and remediation recommendations to technical teams and business stakeholders.

What you’ll bring

• Must be 18 years of age or older.
• High school diploma or equivalent.
• At least 3 years of experience in cybersecurity, security operations, cloud security, or hybrid infrastructure security roles.
• Experience with Azure security services, Microsoft Defender for Cloud, Sentinel or SIEM tools, identity, RBAC, and access control concepts.
• Understanding of vulnerability management, logging, alerting, incident response, and compliance evidence expectations.
• Working knowledge of hybrid environments including Windows/Linux systems, networking, firewalls, SaaS/PaaS/IaaS security, and Microsoft 365.
• Ability to communicate risk, remediation options, and control requirements clearly to technical and non-technical audiences.
• Experience in regulated or compliance-driven environments; healthcare experience preferred.
• Knowledge of NIST, HIPAA, PCI, CIS, COBIT, or similar security frameworks.
• Azure Security Engineer Associate, CISSP, or comparable security certification.
• Experience with SIEM/SOAR, DLP, EDR, vulnerability scanning, and cloud security posture management tools.

Tools and technologies

Microsoft Defender for Cloud, Azure Policy, RBAC, Conditional Access, Microsoft 365, Sentinel, SIEM tools, IDS/IPS, EDR, Windows, Linux, SaaS, PaaS, IaaS, NIST, HIPAA, PCI, CIS, COBIT, SIEM/SOAR, DLP, vulnerability scanning, cloud security posture management tools, Azure Security Engineer Associate, CISSP.

Benefits

• Health, Dental and Vision insurance for employees and dependents
• Disability, Life and Long Term care insurance
• Employee Assistance Program, Flexible Spending accounts, 401(k) Retirement Plan (with employer match)
• Paid Annual Leave, Volunteer Time Off Pay, Bereavement Leave, Emergency Leave Bank
• Overtime Pay, Holiday Pay, Double time compensation for all holidays worked
• Discounted medical treatment at any Patient First location for employees and immediate family
• Recruitment bonus

Salary Range: $125,000 - $150,000 annually, depending on experience.