Azure Cloud and Security Engineer SCSCCISSP

Azure Cloud and Security Engineer

Hybrid schedule: 3 days in‑person initially, then 2 days in‑person each week following training.

W2 CTH role only.

The IT Cloud (Azure) and Security Engineer designs, implements, and secures cloud‑based infrastructure and applications within Microsoft Azure. The role supports IT development and security initiatives by managing cloud systems, enforcing security protocols, and producing high‑quality documentation, diagrams, and procedures that ensure operational clarity and compliance. Tasks include installing, monitoring, and directing proactive and reactive network defense measures to maintain system availability, integrity, and reliability.

The engineer also supports Disaster Recovery and Business Continuity programs, prioritizes and plans work activities, sets goals and objectives, uses time efficiently, and communicates activities and results appropriately.

• Microsoft Azure Architecture & Services
• Compute (VMs, App Services, Functions)
• Networking (VNets, NSGs, Azure Firewall, Express Route)
• Storage (Blob, File, Disk)
• Identity (Azure AD, Conditional Access, RBAC)
• Monitoring (Log Analytics, Azure Monitor, Sentinel)
• Cloud Security & Compliance
• Zero Trust principles, defense‑in‑depth, secure access patterns
• Azure‑native security tools (Defender for Cloud, Key Vault, Security Center)
• Regulatory frameworks (NIST 800‑53, CJIS, HIPAA, FedRAMP, CIS Benchmarks)
• Infrastructure as Code (IaC) & Automation
• Bicep, Terraform, ARM templates
• Git Hub Actions, Azure Dev Ops, Power Shell scripting
• ITIL & Change Management
• Incident, problem, and change management processes
• Documentation standards and lifecycle management
• Enterprise Documentation Practices
• Diagramming (Visio, Lucidchart)
• SOPs, runbooks, and flowcharts for repeatable processes

• Cloud Deployment & Optimization
• Design and deploy scalable, cost‑effective Azure solutions
• Monitor and tune performance, availability, and cost
• Security Engineering
• Configure and monitor security baselines, alerts, and threat detection
• Perform vulnerability assessments and remediation
• Technical Documentation
• Translate complex systems into clear, visual, and written documentation
• Maintain version‑controlled documentation repositories
• Customer Support & Troubleshooting
• Provide Tier 3 support for cloud and security incidents
• Communicate clearly with non‑technical stakeholders during escalations
• Collaboration & Cross‑Team Enablement
• Work with developers, compliance officers, and IT operations
• Lead knowledge‑sharing sessions and contribute to team wikis

• Diagnose and resolve complex cloud and security issues independently
• Design secure‑by‑default architectures that meet compliance mandates
• Document and communicate technical concepts to diverse audiences
• Balance proactive security hardening with agile development needs
• Adapt to evolving technologies and regulatory requirements

• Bachelor's degree in Computer Science, Information Systems, or related field
• 5+ years in IT infrastructure or cloud engineering roles
• Microsoft Certified:
  Azure Solutions Architect Expert
• Power Shell scripting proficiency

• Microsoft Certified:
  Cybersecurity Architect Expert or SC‑200/SC‑300
• CISSP certification
• CompTIA Security+ or equivalent
• Experience with security SEIM tools