Security Engineer, Cloud (Azure)

TL;DR

Security Engineer, Cloud (Azure): Securing and improving Microsoft Azure environments through governance, landing zones, identity controls, monitoring, and compliance-aligned safeguards with an accent on cloud architecture, secure networking, and repeatable deployment standards. Focus on designing security guardrails, resolving posture gaps and excessive permissions, and supporting cloud detection, incident response, and audit validation.

Location: Remote in the United States

Company

hirify.global develops technology solutions and operates cloud-based environments requiring secure, scalable, and compliant infrastructure.

What you will do

• Design and maintain Azure security guardrails covering subscription governance, resource organization, RBAC, policies, and secure configuration baselines.
• Develop Azure landing zones with management group structures, policy enforcement, tagging strategies, and governance standards.
• Configure encryption, secrets management, logging, monitoring, alerting, secure administration, networking, segmentation, and workload hardening.
• Conduct cloud security posture reviews, identify misconfigurations and excessive permissions, and coordinate remediation.
• Support cloud security detection, incident investigations, response activities, and compliance control validation with Security Operations, GRC, architecture, and audit teams.
• Enable secure infrastructure-as-code and deployment practices through documentation, policy-as-code, automation, and repeatable security standards.

Requirements

• Minimum three years of hands-on cloud security, cloud infrastructure security, or related cybersecurity experience.
• Strong Microsoft Azure security architecture experience, including governance, RBAC, landing zones, management groups, policy controls, identity, encryption, secrets management, logging, and monitoring.
• Knowledge of cloud networking, segmentation, secure connectivity, workload hardening, cloud posture management, and detection engineering.
• Experience with cloud security assessments, posture reviews, remediation planning, architecture reviews, and compliance evidence collection.
• Working knowledge of infrastructure-as-code, policy-as-code, scripting, automation, and cloud operational tooling.
• Bachelor’s degree in computer science, information technology, cybersecurity, engineering, or a related field, or equivalent experience.

Nice to have

• Experience with Microsoft Defender for Cloud or equivalent cloud security posture management and workload protection tools.
• Exposure to AWS or Google Cloud Platform in multi-cloud governance or security programs.
• Cloud security certifications such as AZ-500, CISSP, or CCSK.
• Experience supporting audits, compliance reviews, landing zone implementations, or cloud architecture assessments.

Culture & Benefits

• Remote work arrangement within the United States.
• Cross-functional collaboration with platform, engineering, infrastructure, Security Operations, GRC, architecture, and audit teams.
• Work focused on building secure, scalable, and operationally sustainable cloud environments.
• Primarily desk-based computer work; occasional lifting of up to 15 pounds may be required.