Cloud Security Architect

DescriptionVDOT is seeking an experienced Senior Cloud Security Engineer (Sr CSE) to implement and support the agencys cloud and computing infrastructure. The Senior Cloud Security Engineer will serve as a subject matter expert supporting VDOTs enterprise Azure migration, responsible for architecting, implementing, and securing cloud environments in alignment with SEC
530 principles, Zero Trust, and enterprise compliance frameworks.

The Senior Cloud Security Engineer will be responsible for assisting in the design, implementation, securing, monitoring, and the continuous improvement of VDOTs cloud infrastructure and services across the enterprise. The position provides Senior-level technical leadership for cloud security architecture, identity and access management, network security, security monitoring, vulnerability management, incident response, and cloud governance.

The Senior Cloud Security Engineer works closely with Cloud Engineering, Network Engineering, Security Operations, Enterprise Architecture, Infrastructure, Application Development, Dev Ops, Risk Management, and IT leadership to ensure cloud environments are secure, resilient, compliant, and aligned with enterprise security standards.

Key Responsibilities:

Identify cloud security vulnerabilities, assess risk based on business impact, prioritize remediation, track remediation activities, and validate corrective actions Lead complex cloud security initiatives and provide technical directions to engineers. Also assist in the design of secure cloud architecture for complex enterprise environments Influence architecture and security decisions and prevent insecure configurations from reaching production and implement security gates within deployment pipelines.

Explain complex security risks to non-technical stakeholders Assess cloud security risks and security gaps and recommend appropriate remediations. Create and maintain security documentation and evidence as well as support audits and assessments. Review proposed cloud solutions for security risk and define appropriate security and compensation controls. Will develop Azure policies to enforce standardization and compliance with enterprise requirements, as well as creating Azure Automation runbooks to support incident response workflows.

Monitor security events using SIEM technologies and work with VDOTs SOC team to coordinate incident response activities. Identifies and diagnoses system problems and threats by using system logs, line monitors, SIEM, diagnostic software, and test equipment. Lead investigation and containment of cloud security incidents. Review firewall and NSG rule requests and ensure compliance with security standards. Must have the ability to provide documentation, architecture topology diagrams, IP schemes and access controls when required.

Must have the ability to work independently on assigned projects.

Skills Azure security architecture, WAF, Azure Firewall, Azure Networking, microsoft sentinel

Top Skills Details Azure security architecture,WAF,Azure Firewall,Azure Networking Job Type & Location This is a Contract position based out of Richmond, VA.Pay and Benefits The pay range for this position is $60.00 - $90.00/hr individual compensation offered for this position within this range will depend on many factors, including qualifications, skills, relevant experience, job knowledge, geographic location, internal equity, and other pertinent job-related factors.

Eligibility requirements apply to some benefits and may depend on your job
classification and length of employment. Benefits are subject to change and may be
subject to specific elections, plan, or program terms. If eligible, the benefits
available for this temporary role may include the following:

Medical, dental & vision
Critical Illness, Accident, and Hospital
401(k) Retirement Plan Pre-tax and Roth post-tax contributions available
Life Insurance (Voluntary Life & AD&D for the employee and dependents)
Short and long-term disability
Health Spending Account (HSA)
Transportation benefits
Employee Assistance Program
Time Off/Leave (PTO, Vacation or Sick Leave)
Job Type & Location This is a Contract position based out of Richmond, VA.Final date to receive applications

This position is anticipated to close on Oct 23, 2026.Workplace Type This is a hybrid position in Richmond,VA.About TEKsystems

We're partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a team of…