Security Engineer II – Hybrid Cloud

Patient First is seeking a Security Engineer II to strengthen operational security and advance cloud-native security across Azure and Microsoft 365 . The position combines security operations responsibilities with design-time governance, incident response support, and compliance-focused reporting in a hybrid environment.

Role Location

Glen Allen, VA (hybrid)

Salary

USD 125,000 - 150,000 per year, depending on experience.

Responsibilities

• Implement and maintain Microsoft Defender for Cloud , Azure Policy , security baseline controls, and cloud posture recommendations.
• Configure and support RBAC , Conditional Access , privileged access, and identity governance models for Azure and Microsoft 365 .
• Maintain centralized logging , alerting , and monitoring pipelines for cloud workloads to support security investigations.
• Support security gates in deployment workflows, including policy validation , access review , and exception management .
• Provide security input during architecture reviews , workload intake, and production go-live readiness.
• Move security activities from after-the-fact validation into design-time and pipeline-integrated governance.
• Standardize cloud security baselines and reduce reliance on manual security validation.
• Translate existing security policies into Azure Policy , RBAC standards, and operational control requirements.
• Improve auditability by aligning monitoring, logging, access review, and compliance reporting with cloud workloads.
• Support security operations including firewall management , IDS/IPS , EDR , security monitoring, auditing, vulnerability management, and patch-related security coordination.
• Investigate alerts, participate in incident response , and support threat hunting, log review, and risk analysis.
• Assist with security reviews for applications, systems, third-party vendors, and hybrid cloud implementations.
• Support compliance activities related to HIPAA , PCI , access control, vulnerability remediation, and audit evidence.
• Communicate security risks and remediation recommendations to technical teams and business stakeholders.

Requirements

• Employee must be 18 years of age or older .
• High school diploma or equivalent.
• At least 3 years of experience in cybersecurity, security operations, cloud security, or hybrid infrastructure security roles.
• Experience with Azure security services , Microsoft Defender for Cloud , Sentinel or other SIEM tools, and identity concepts including RBAC and access control.
• Understanding of vulnerability management , logging , alerting , incident response , and expectations for compliance evidence .
• Working knowledge of hybrid environments including Windows /Linux systems, networking, firewalls, and SaaS/PaaS/IaaS security , plus Microsoft 365 .
• Ability to communicate risk, remediation options, and control requirements across technical and non-technical audiences.
• Experience in regulated or compliance-driven environments; healthcare experience preferred .
• Knowledge of NIST , HIPAA , PCI , CIS , COBIT , or similar security frameworks.
• Azure Security Engineer Associate , CISSP , or comparable security certification.
• Experience with SIEM/SOAR , DLP , EDR , vulnerability scanning, and cloud security posture management tools.

Technologies

• Microsoft Defender for Cloud
• Azure Policy
• RBAC
• Conditional Access
• Microsoft 365
• Sentinel
• SIEM tools
• IDS/IPS
• EDR
• Windows
• Linux
• SaaS, PaaS, IaaS
• NIST, HIPAA, PCI, CIS, COBIT
• SIEM/SOAR
• DLP
• Vulnerability scanning
• Cloud security posture management tools
• Azure Security Engineer Associate
• CISSP

Benefits

• Health, Dental and Vision insurance for employees and dependents
• Disability, Life and Long Term care insurance
• Employee Assistance Program, Flexible Spending accounts, 401(k) Retirement Plan (with employer match)
• Paid Annual Leave, Volunteer Time Off Pay, Bereavement Leave, Emergency Leave Bank
• Overtime Pay, Holiday Pay, Double time compensation for all holidays worked
• Discounted medical treatment at any Patient First location for employees and immediate family
• Recruitment bonus

Minimum Education

High school diploma or equivalent