Sr. Security Architect​/Azure Cloud Security Engineer

Overview

Edgewater is currently seeking a hands‑on Senior Security Architect/Azure Cloud Security Engineer to support secure Azure development, application modernization, and cloud migration of our federal customer in the Washington DC area.
This is a hybrid position with a requirement to work onsite four to six days a month, subject to change
. The Azure Security Engineer should be hands‑on in all aspects of Azure security including implementing security controls and threat protection, managing identity and access management, defining organizational structure and policies, using Azure technologies to provide data protection, configuring network security defenses, collecting and analyzing Azure logs, managing incident responses, and an understanding of regulatory concerns.

Due to the contract and nature of the work, US Citizenship is required to obtain a Department of Energy security clearance.

• • Maintain and improve the security posture of the FERC Azure platform by identifying, and remediating vulnerabilities by using a variety of security tools.
  • Provide cyber security expertise in the analysis, assessment, development, and evaluation of security solutions and architectures to secure applications, operating systems, databases, and networks.
  • Implement and configure security controls and policies across the FERC IT infrastructure to manage access to data and monitor threats to ensure that data, apps, containers, and networks are protected.
  • Maintain native tools like Microsoft Defender for Identity, Microsoft Defender for Cloud, Microsoft Defender for IoT, Defender for O365 and Microsoft Sentinel.
  • Facilitate the secure migrations of on‑prem applications to the Azure cloud.
  • Implementing threat protection and responding to security incident escalations.
  • Automate security controls, data, and processes to provide better metrics and operational support.
  • Manage operations within a cloud solution environment such as operations tasks, using cloud native tools, like Log Analytics, Azure Monitor and Microsoft Sentinel.
  • Support cloud engineers to implement security best‑practices and enable secure development and release processes.
  • Ensure compliance.
  • Deliver/update task documentation, briefings, SOPs and post on CsIA wiki.
  • Facilitate collaboration between security administrators and development engineers to enhance communication and build effective division‑wide processes.
  • Identify areas of weakness and work with stakeholders to mitigate risks.

• • Bachelor’s degree in cyber security, information technology or related field or equivalent experience working in field.
  • 12 years of experience supporting IT with 3 years in Azure administration and security.
  • 3 years of experience working with Microsoft native tools like Microsoft Defender for Identity, Microsoft Defender for Cloud, Microsoft Defender for IoT, Defender for O365 and Microsoft Sentinel.
  • Good understanding of security concepts (Zero Trust Network, CASB, Cloud computing.
  • Technical skills with Linux and Windows operating systems and scripting languages like Power Shell, Python, .Net.
  • Soft skills set to successfully understand, challenge, and translate the business needs and communicate to the relevant parties with a structured and methodical approach to problem solving.
  • Good communicator with passion for the domains of Cyber Security.
  • Agile, Scrum, Dev Sec Ops  knowledge.
  • Must have CISSP or equivalent (Security+, CAP, CEH) or more advanced certifications to be considered and approved by the government.
  • Microsoft Azure security certifications (AZ-500, MS-500, or SC-200) strongly preferred.

• Preferred:

  • Strong understanding of Security tools such as Splunk, Tenable, Firepower, Web Inspect,
  • Strong understanding of networking, e.g., IP subnetting, Network Security Groups, routing, Azure Firewall, Express Route, load balancer, DNS.
  • Strong understanding of configuring security policies and securing applications and data.
  • Strong familiarity with cloud capabilities and products and services for Azure, e.g., Azure Active Directory, Privileged Identity Management, VMs, Container Registry, Azure Kubernetes Services (AKS), Data Services, and Key Vault.
  • Strong…