Cloud Engineering Specialist

Summary

Join Hexagon US Federal as a Cloud Security Engineer and be a key player in managing and securing our Azure-based infrastructure. You will design, implement, and manage security controls, monitor and respond to security incidents, and conduct threat modeling and vulnerability assessments. This role requires expertise in Azure security services and relevant certifications. We offer a competitive compensation and benefits package, including health care plans, retirement benefits, paid time off, flexible work arrangements, and professional development opportunities. The ideal candidate is passionate about Azure cloud security and possesses strong problem-solving skills. This position requires a Secret security clearance or the ability to obtain one.

Requirements

• Azure Security Engineer Associate (AZ-500) or CompTIA CySA+
• Bachelor’s degree with 5+ years of applicable experience or 7+ years of applicable experience
• CompTIA Security+ certification or must be obtained with 6 months of hire date
• Experience deploying and utilizing Microsoft Defender for Cloud, Microsoft Sentinel, Microsoft Security Center
• Experience with configuring and running Tenable ACAS scans
• Must be able to work both independently and as part of a geographically dispersed team with little supervision and guidance
• Ability to make use of provided resources and seek guidance as needed
• Ability to communicate effectively, both orally and in writing
• A well organized, self-directed, detail and process-oriented individual
• Ability to investigate problems or malfunctions and find solutions or corrective actions
• Ability to work directly with customers to gather requirements and to resolve problems
• Ability to keep abreast of changing software technology
• Required Level of Security Clearance: - Secret (or ability to obtain)

Responsibilities

• Design, implement, and manage security controls for Azure-based infrastructure, applications, and data
• Monitor and respond to security incidents using Azure Sentinel, Log Analytics, and other monitoring tools
• Conduct threat modeling, vulnerability assessments, and penetration tests on Azure environments
• Investigate and mitigate security breaches or suspicious activities in Azure environments
• Implement Role-Based Access Control (RBAC), Conditional Access Policies, and Multi-Factor Authentication (MFA)
• Manage and secure privileged identities using tools like Azure AD Privileged Identity Management (PIM)
• Ensure Azure deployments comply with relevant security standards (e.g., FedRAMP High, NIST 800-53, DoD Cloud SRG, etc..)

Preferred Qualifications

• 3-5 years of experience deploying and administering security resources in an Azure Environment
• 2-3 years of experience designing Virtual Networking Solutions
• 2-3 years of experience designing and deploying IPSec based Site to Site Connectivity solutions
• Knowledge of different deployment strategies (cloud, on-premise, hybrid)
• Understanding of Azure Virtual Networking (ExpressRoute)
• Experience configuring Azure Log Analytics, Azure Monitor and Alerts, Azure Policies, Azure Backup, Azure Key Vaults, Azure Virtual Machines
• Experience with PowerShell / Azure CLI
• Experience with FedRAMP Authorization processes is a plus

Benefits

• Competitive health care plans with savings accounts
• Dental and vision plans
• 401k with 100% company match up to 6%, with immediate vesting on company match
• Life and disability insurance
• Learning Management System with robust offerings
• Tuition Reimbursement Program
• Flexible hybrid and remote working arrangements where possible
• 13 paid holidays per year
• Thrive Wellness Program
• DE&I and Veterans’ focused Employee Resources Groups with regular educational sessions and communications
• Leadership Development Program with multiple learning options