Azure Cloud Engineer – Cybersecurity

Defender for Cloud / Sentinel / CSPM / Zero Trust

About the Role

EdgeByte is seeking an Azure Cloud Engineer – Cybersecurity to design, implement, secure, and support Microsoft Azure and hybrid-cloud environments across commercial, regulated, and public-sector customers.

This role will focus on cloud security architecture, threat protection, vulnerability management, security monitoring, Zero Trust, data protection, and compliance. The engineer will work across cloud, identity, networking, infrastructure, application, and DevOps teams to implement secure, scalable, and production-ready solutions.

The position will support security capabilities including Microsoft Defender for Cloud, Microsoft Sentinel, Azure Policy, Key Vault, workload protection, security automation, incident investigation, and continuous monitoring while helping customers identify and remediate security risks across cloud environments.

Reponsibilities:

• Design and implement secure Microsoft Azure and hybrid-cloud architectures.
• Configure and manage Microsoft Defender for Cloud, Microsoft Sentinel, Azure Policy, Key Vault, and native Azure security controls.
• Implement cloud security posture management, workload protection, vulnerability management, and configuration compliance.
• Secure Azure compute, storage, networking, databases, applications, and cloud-native workloads.
• Develop and maintain SIEM/SOAR monitoring, threat detection, alerting, and incident-response capabilities.
• Implement Zero Trust, least privilege, segmentation, encryption, and defense-in-depth controls.
• Identify and remediate vulnerabilities, misconfigurations, excessive permissions, and cloud security risks.
• Support security hardening, incident investigation, continuous monitoring, and remediation activities.
• Develop KQL queries, analytics rules, detections, dashboards, and security automation where required.
• Automate security controls using Terraform, PowerShell, Azure CLI, APIs, or similar technologies.
• Develop security architecture diagrams, implementation plans, standards, runbooks, and technical documentation.
• Collaborate with cloud, networking, ICAM, DevOps, application, infrastructure, and cybersecurity teams.
• Support applicable customer security, regulatory, and compliance requirements.

Required Qualifications:

• CompTIA Security+
• Microsoft Certified: Azure Security Engineer Associate (AZ-500)
• 8+ years of enterprise IT, cloud, infrastructure, or cybersecurity experience.
• 4+ years of hands‑on Microsoft Azure or cloud security engineering experience.
• Strong knowledge of Microsoft Azure security architecture and native security services.
• Experience with Microsoft Defender for Cloud, Microsoft Sentinel, Azure Policy, and Key Vault.
• Experience securing Azure networking, compute, storage, databases, applications, and cloud-native workloads.
• Strong understanding of Zero Trust, least privilege, encryption, vulnerability management, segmentation, and defense-in-depth principles.
• Experience with SIEM, security logging, monitoring, threat detection, alerting, and incident investigation.
• Knowledge of RBAC, privileged access, Conditional Access, identity security, and access-control principles.
• Experience identifying and remediating cloud vulnerabilities, security misconfigurations, excessive permissions, and configuration drift.
• Experience with vulnerability scanning, security assessments, remediation tracking, and continuous monitoring.
• Experience with Terraform, PowerShell, Azure CLI, APIs, or similar security automation technologies.
• Ability to troubleshoot complex cloud security, identity, networking, and infrastructure issues.
• Strong technical documentation, troubleshooting, and communication skills.
• U.S. work authorization and ability to satisfy customer-specific access requirements.

Preferred Qualifications:

• Microsoft Certified: Cybersecurity Architect Expert (SC-100), CISSP, CCSP, or comparable cybersecurity certification.
• Advanced experience with Microsoft Sentinel, Defender XDR, Defender for Cloud, or other Microsoft security technologies.
• Experience with SIEM, SOAR, CSPM, CWPP, CNAPP, vulnerability-management, or endpoint-security platforms.
• Experience developing KQL queries, analytics rules, detection logic, automation playbooks, and security dashboards.
• Experience securing AKS/Kubernetes, containers, APIs, DevOps pipelines, and cloud-native applications.
• Experience with CrowdStrike, Tenable, Qualys, Splunk, Palo Alto, Fortinet, or similar enterprise security technologies.
• Experience with security architecture, incident response, threat detection, vulnerability remediation, and continuous monitoring.
• Experience implementing security controls through Terraform, Infrastructure as Code, CI/CD pipelines, or configuration-as-code practices.
• Knowledge of NIST 800-53, NIST CSF, CIS, Zero Trust, FedRAMP, CMMC, ISO 27001, SOC 2, or similar security frameworks.
• Experience supporting regulated, commercial, government, defense, financial, healthcare, or other security-sensitive environments.

POSITION DETAILS

Job ID

CLD-ENG-CYB001

Department

Cybersecurity & Risk

Job Family

Cybersecurity Engineering

Specialty

Defender for Cloud / Sentinel / CSPM / Zero Trust

Experience Level

Intermediate

Labor Category

T2

Position Status

Work Arrangement

Remote

Location

Any State

Salary Range

$75,000 - $150,000

Clearance

Ability to obtain and maintain customer-required security clearance

Supporting federal, state & local government,
small businesses, and commercial enterprises
with secure, scalable technology solutions.