DevOps Security Engineer

CNX•Omaha, NE

1d•$92,250 - $125,000•Onsite

About The Position

We are seeking a Cloud Security & Infrastructure Engineer to strengthen our Azure environment by monitoring and remediating security alerts, applying fixes across cloud and hybrid systems, and ensuring compliance with industry standards. The role involves securing complex networking components (VNETs, VPNs, ExpressRoute, Load Balancers, WAFs) as well as core services (VMs, App Services, PaaS databases), while collaborating with DevOps and infrastructure teams to maintain a resilient and compliant cloud platform

Requirements

Strong Azure background: Hands-on experience with core Azure services (VMs, App Services, PaaS Databases, Storage) and automation using CLI, PowerShell, or IaC.
Azure networking expertise: In-depth knowledge of Virtual Networks, Subnets, VPNs, ExpressRoute, Application Gateway, Azure Firewall, and WAF for securing complex environments.
Security-focused mindset: Experience remediating issues flagged by Defender for Cloud and applying best practices in identity, encryption, and compliance (CIS/NIST).
Independent and proactive: Self-starter able to prioritize, take ownership, and drive security improvements end-to-end.
Collaborative communicator: Strong teamwork and communication skills to partner with DevOps, infrastructure, and application teams.

Responsibilities

Create and manage secure Azure cloud infrastructure, including Virtual Networks, Monitor and respond to security alerts from Defender for Cloud and equivalent tools, ensuring timely remediation of vulnerabilities and misconfigurations.
Investigate and apply security fixes on Linux systems, Azure App Services, VMs, PaaS databases, and core networking components.
Implement and maintain security controls including NSGs, Azure Firewall, DDoS Protection, and Web Application Firewalls (Front Door, Application Gateway). Create, secure, and manage Azure Virtual Networks, Subnets, VPNs (Site-to-Site, with external carriers), ExpressRoute, and Virtual WAN, ensuring scalability, high availability, and hybrid connectivity with on-premises environments.
Collaborate with DevOps and infrastructure teams to strengthen identity management, encryption, monitoring, and vulnerability assessment practices.
Ensure compliance with industry regulations, maintaining secure and auditable infrastructure operations.