Azure Security Consultant

Aprio•Rockville, MD

23h•$105,000 - $160,000•Hybrid

About The Position

Work with a nationally ranked CPA and advisory firm that is passionate for what's next. Aprio has 30 U.S. office locations, one in the Philippines and more than 2,100 team members that speak 60+ languages across the globe. By bringing together proven expertise, deep understanding, and strategic foresight for fast-growing industries, Aprio ensures clients are prepared for wherever life or business may take them. Discover a top-rated culture, vast growth opportunities and your next big career move with Aprio. Join Aprio's Risk Advisory & Assurance team and you will help clients maximize their opportunities. Aprio is a progressive, fast-growing firm looking for a Azure Security Engineer to join their dynamic team. Ready to do more with your Microsoft security expertise? Join Aprio and help organizations across industries navigate complex cybersecurity and compliance landscapes with confidence. At Aprio, weâre not just checking boxesâweâre securing the future. As a Microsoft Security Engineer, youâll work with cutting-edge Microsoft tools, support high-impact compliance frameworks like FedRAMP and CMMC, and help shape the security posture of both public and private sector organizations. This position supports U.S. government and defenseârelated clients. Certain engagements require personnel who are eligible to obtain a U.S. security clearance or who meet clientâdefined access requirements for controlled environments. U.S. citizenship may be a requirement of obtaining a U.S. security clearance or meeting these access requirements. These requirements are only tied to this specific job posting. All Aprio employment decisions are made in accordance with applicable laws.

Requirements

Bachelorâs degree or equivalent experience.
7+ years of consulting experience, partnering with clients to deliver tailored solutions.
Strong communication and stakeholder management skillsâcomfortable leading client conversations.
3+ years of Hands-on design and implementation of Microsoft Azure security tools.
Deep understanding of core cybersecurity principles: zero trust, privileged access, APT threats, credential theft, and just-in-time administration.
At least 1 of the following certifications needed (active or obtained within 90 days of hire): AZ-500
AZ-305
SC-100
SC-200
SC-300
SC-401
Note: Active certifications are required for consideration

Responsibilities

Support the client relationship from discovery through deliveryâserve as the technical consultant.
Assist in workshops, architecture sessions, and demos to translate client needs into actionable solutions.
Deep expertise in at least 3 of the following areas, with working knowledge of others: Identity & Access: Entra ID, Conditional Access, PIM, JIT
Threat Protection: Defender XDR suite, Sentinel, threat hunting
Data Protection: Purview, DLP, Sensitivity Labels, DSPM
Cloud Security: Azure Defender for Cloud, security posture management
Automation & Scripting: KQL, PowerShell, Microsoft Graph API
Develop security strategies aligned with frameworks like CMMC, NIST 800-171, and NIST 800-53.
Support in development of security policies and procedures.
Architect and implement Zero Trust strategies, XDR deployments, and threat modeling frameworks for mid-market and enterprise clients.
Ensure compliance while improving operational securityâdeliver measurable business value.
Develop standardized methodologies, playbooks, and procedures for technical delivery.

Benefits

Medical, Dental, and Vision Insurance on the first day of employment
Flexible Spending Account and Dependent Care Account
401k with Profit Sharing
9+ holidays and discretionary time off structure
Parental Leave â coverage for both primary and secondary caregivers
Tuition Assistance Program and CPA support program with cash incentive upon completion
Discretionary incentive compensation based on firm, group and individual performance
Incentive compensation related to origination of new client sales
Top rated wellness program
Flexible working environment including remote and hybrid options