Azure Cloud Security Engineer

LIGHTFEATHER IO LLC • Washington, DC

12h • $120,000 - $130,000 • Hybrid

About The Position

LightFeather is seeking an Azure Cloud Security Engineer to help secure an enterprise Azure platform for a federal customer. The role is part of a cloud security team that protects a shared Azure environment and advises the application teams building on it. The engineer will recommend secure architectures, review configurations, enforce tenant-wide security controls, and support secure deployment and operation of workloads and services.

The position is hybrid, with on-site work four days per week in the Washington, DC metro area. U.S. citizenship is required due to federal contract requirements, as is an active Secret clearance and the ability to obtain Top Secret clearance. The position is full-time, with an annual salary of $120,000–$130,000 based on experience.

Requirements

• Active Secret clearance and the ability to obtain Top Secret clearance.
• At least 3 years of hands-on experience securing Microsoft Azure environments.
• Strong Azure infrastructure security fundamentals.
• Hands-on experience with Conditional Access, Azure Policy, and Defender for Cloud.
• Solid understanding of Zero Trust concepts, including least privilege, shared responsibility, mutual authentication (mTLS), and the differences between tenancy, access, and continuous authentication.
• Excellent written and verbal communication skills, including direct, frequent customer interaction over Microsoft Teams and other collaboration tools.
• Adaptability and willingness to learn new technologies and take on new responsibilities.
• U.S. citizenship, required due to federal contract requirements and the need to obtain and maintain a Secret-level security clearance.

Nice To Haves

• Microsoft certifications such as AZ-500 (strongly preferred), AZ-104, SC-300, SC-900, or SC-200.
• Experience with Azure CLI and Microsoft Graph PowerShell.
• Experience with Terraform and Python.
• Working knowledge of NIST SP 800-53.
• Experience securing Azure Databricks or other data platforms.
• Exposure to AI model governance and security.
• Familiarity with SOC operations and logging requirements.

Responsibilities

• Advise customer teams on secure architecture, service usage, access design, and workload deployment best practices.
• Review customer service configurations and proposed changes, and provide clear recommendations and reference guidance.
• Explain landing zone templates and shared-responsibility boundaries after customers take over their environments.
• Secure workloads and services deployed by the team.
• Design and maintain tenant-wide governance controls, including Conditional Access, Azure Policy, and Microsoft Defender for Cloud regulatory compliance.
• Evaluate and apply new Microsoft security features and Zero Trust capabilities as the platform grows.
• Extend Zero Trust principles to emerging services such as Azure Databricks and AI workloads, including least privilege, mutual authentication, default-deny access, and tenant isolation.
• Support security operations by advising on logging architecture, including audit, diagnostic, and traceable logs, and reporting requirements.
• Automate security and management tasks with scripting.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed