Lead Engineer (Azure)

Aprio•Austin, TX

2d•Hybrid

About The Position

Aprio is a progressive, fast-growing firm looking for a Lead Engineer to join their dynamic team. At Aprio, we’re not just checking boxes—we’re securing the future. As a Microsoft Security Engineer, you’ll work with cutting-edge Microsoft tools, support high-impact compliance frameworks like FedRAMP and CMMC, and help shape the security posture of both public and private sector organizations. This position supports U.S. government and defense‑related clients. Certain engagements require personnel who are eligible to obtain a U.S. security clearance or who meet client‑defined access requirements for controlled environments. U.S. citizenship may be a requirement of obtaining a U.S. security clearance or meeting these access requirements. These requirements are only tied to this specific job posting. All Aprio employment decisions are made in accordance with applicable laws.

Requirements

Bachelor’s degree or equivalent experience.
7+ years of consulting experience, partnering with clients to deliver tailored solutions.
Strong communication and stakeholder management skills—comfortable leading client conversations.
3+ years of Hands-on design and implementation of Microsoft Azure security tools.
Deep understanding of core cybersecurity principles: zero trust, privileged access, APT threats, credential theft, and just-in-time administration.
At least 1 of the following certifications needed (active or obtained within 90 days of hire): AZ-500, AZ-305, SC-100, SC-200, SC-300, SC-401.
Active certifications are required for consideration.

Nice To Haves

Deep expertise in at least 3 of the following areas, with working knowledge of others: Identity & Access : Entra ID, Conditional Access, PIM, JIT; Threat Protection : Defender XDR suite, Sentinel, threat hunting; Data Protection : Purview, DLP, Sensitivity Labels, DSPM; Cloud Security : Azure Defender for Cloud, security posture management; Automation & Scripting : KQL, PowerShell, Microsoft Graph API.

Responsibilities

Support the client relationship from discovery through delivery—serve as the technical consultant.
Assist in workshops, architecture sessions, and demos to translate client needs into actionable solutions.
Develop security strategies aligned with frameworks like CMMC, NIST 800-171, and NIST 800-53.
Support in development of security policies and procedures.
Architect and implement Zero Trust strategies, XDR deployments, and threat modeling frameworks for mid-market and enterprise clients.
Ensure compliance while improving operational security—deliver measurable business value.
Develop standardized methodologies, playbooks, and procedures for technical delivery.

Benefits

Medical, Dental, and Vision Insurance on the first day of employment
Flexible Spending Account and Dependent Care Account
401k with Profit Sharing
9+ holidays and discretionary time off structure
Parental Leave – coverage for both primary and secondary caregivers
Tuition Assistance Program and CPA support program with cash incentive upon completion
Discretionary incentive compensation based on firm, group and individual performance
Incentive compensation related to origination of new client sales
Top rated wellness program
Flexible working environment including remote and hybrid options