Senior Azure Security Engineer

About Abel Solutions Abel Solutions is the digital trust and technology arm of Applied Technical Services, LLC. Abel Solutions delivers cybersecurity, compliance, business process automation, and Microsoft‑based digital solutions that help organizations protect data and operate securely in highly regulated environments.

Applied Technical Services, LLC (ATS) is a leading provider of critical testing, inspection, certification, and compliance services. The Company serves clients across a diverse set of large and stable end markets including manufacturing, power generation, aerospace, medical, and defense. ATS was founded in 1967 and is headquartered in Marietta, GA. Today the Company employs nearly 2,100 team members in over 95 locations across the United States.

Together, Abel Solutions and ATS advance a shared mission to create a safe and reliable world through precise technical and professional services.

The Opportunity The Senior Azure Security Engineer (Architect) is a member of the Abel Solutions team, an ATS subsidiary, and is responsible for the design, deployment, security, and operation of mission critical Azure Government and Microsoft 365 GCC High environments in support of clients handling CUI and aligning to CMMC and NIST 800-171. The role blends deep technical security expertise with consulting delivery, guiding clients from requirements discovery through architecture, implementation, operational readiness, and transition into managed compliance.

This position requires strong ownership, communication, documentation discipline, and the ability to lead architecture decisions in regulated cloud environments.

What You'll DoLead end to end Azure Government and GCC High engagements from discovery through production handoff

Facilitate workshops covering compliance scope, CUI boundaries, security posture, and target architecture

Design and implement secure cloud environments using Zero Trust and defense in depth concepts

Build and harden Azure Government landing zones, networks, identity, compute, AVD, and operational controls

Execute architecture decisions across identity, network security, workloads, endpoint security, monitoring, and data protection

Implement Conditional Access, MFA, PIM, RBAC, and secure privileged administration patterns

Configure Azure Firewall, NSGs, private endpoints, routing, DNS, and segmentation

Build secure baselines, reusable templates, reference architectures, and automation components

Implement monitoring, log analytics, Sentinel detections, incident workflows, and operational readiness

Support secure collaboration, DLP, retention, and other M365 GCC High security capabilities when applicable

Provide ongoing managed compliance support including configuration monitoring, patching, vulnerability management, alert handling, and incident response

Participate in on call rotation for after hours incident handling

Perform backup validation, DR planning, periodic testing, and quarterly security reviews

Prepare compliance evidence and documentation aligned with CMMC and NIST 800-171 requirements

Maintain diagrams, SOPs, runbooks, operational documentation, and client ready reporting artifacts

Stay current on Azure Government and GCC High capabilities and contribute to internal standards and service improvements

Support internal initiatives, knowledge sharing, and collaboration across practices

Build strong client relationships and maintain clear communication with leadership and technical teams

Required

Experience and Skills:

7 plus years in infrastructure or security engineering with hands on Azure experience3 plus years designing and deploying secure Azure environments in production2 plus years operating security controls such as SIEM, endpoint protection, vulnerability management, and incident response

At least one full GCC High or Azure Government implementation from design through go live Azure architecture, networking, and security hardening proficiency

Experience with Azure Policy, RBAC, management groups, and resource organization

Strong knowledge of private networking patterns including Private Link, private endpoints, DNS, and firewalling

Experience with Terraform, Bicep, ARM, and automation pipelines

Power

Shell or CLI scripting capability

Entra  features including Conditional Access, MFA, and PIMFamiliarity with Microsoft Defender for Endpoint, baseline hardening, and endpoint security concepts

Experience with Microsoft Sentinel including log ingestion, analytics rules, and workflow design

Monitoring, alerting, incident response support, and operational runbook driven processes

Experience with ITSM platforms such as Service Now, Connect Wise, or Jira Service Management Strong analytical, communication, and consulting skills with ability to translate compliance requirements into technical patterns

Ability to manage multiple priorities and collaborate across teams in a fast paced environment

Ability to work independently with minimal supervision

Additional requirements:

Bachelor’s degree in Computer…