Manager - Cloud Security

3Cloud

About The Position

The Manager in Cloud Security leads a team of consultants, helping ensure team members are healthy, high-performing, and aligned with service line priorities. The role also serves as a hands-on technical lead, designing and delivering secure, scalable, and maintainable Azure systems that address business needs. The manager owns end-to-end project architecture, stays engaged with implementation, and helps teams meet goals for value, security, performance, reliability, and cost. Work focuses on identity and Zero Trust, threat protection, cloud security posture, data protection, and secure AI adoption across Microsoft Azure and Microsoft 365. The role leads solution design in a primary domain, guides engineers day to day, and mentors architects and technical leads. It translates business needs into technical plans, supports sound tradeoffs, and promotes predictable, high-quality delivery. The manager also serves as a billable security architect on client engagements and contributes to consulting delivery, team development, and business development.

Requirements

At least 6 years of experience delivering solutions in a primary domain such as application development, cloud platform engineering, DevOps, or data and analytics.
At least 3 years of experience in solution architecture and leading development or engineering teams.
Experience leading hybrid and remote teams while maintaining alignment, quality, and predictable delivery across time zones.
Expertise in at least one major public cloud platform; Azure is strongly preferred.
Deep understanding of core concepts, languages, frameworks, and design patterns in a primary domain, with the ability to build robust, maintainable systems.
Experience using AI-augmented development and integrating AI or machine learning capabilities through APIs, libraries, or cloud-based AI services.
Hands-on depth with Microsoft Entra ID, Microsoft Defender XDR and Defender for Cloud, Microsoft Sentinel, Microsoft Purview, and Azure Policy and governance controls.
Experience with third-party identity, SIEM, and firewall tools, such as Okta and its integration with Entra ID, OneLogin, Splunk, Palo Alto, and Fortinet.
Experience designing security automation and DevSecOps practices, including policy as code, Infrastructure as Code (Bicep or Terraform), and CI/CD guardrails.
Experience delivering security solutions in regulated environments and applying frameworks such as HIPAA/HITRUST, NIST, FedRAMP, PCI DSS, CJIS, ISO 27001, or SOC 2.
Experience working in Agile or Scrum environments, including backlog refinement and iteration planning.
Familiarity with key cloud services for the relevant domain, such as messaging, compute, data, security, networking, and integration.
Strong analytical and problem-solving skills, with clear written and verbal communication.
Demonstrated interest in continuous learning and adopting new cloud technologies.
Ability to work hands-on with implementation while designing and communicating complex cloud architectures.

Nice To Haves

Microsoft security certifications such as SC-100, SC-300, SC-200, SC-500, or SC-401; the retired AZ-500 certification is also accepted.
Industry certifications such as CISSP, CCSP, or CISM.
Experience in consulting or professional services.

Responsibilities

Maintain visibility into team members' delivery commitments, growth plans, and internal contributions.
Coach and develop team members through clear expectations, regular feedback, and development plans.
Build a culture of trust, inclusion, and collaboration; monitor team health, morale, and workload balance and address concerns with practice leadership.
Maintain regular one-to-one connections, provide feedback, and help team members remove blockers.
Oversee staffing and resource alignment, balancing utilization, development, client needs, and sustainable workloads.
Communicate practice priorities and organizational objectives to teams and represent teams in leadership forums.
Define interview standards and mentorship strategies; support performance reviews, promotion recommendations, and compensation input.
Own end-to-end architecture and scope for projects, leading teams to design and deliver Azure solutions that meet goals for value, security, scalability, reliability, performance, and cost.
Lead design and delivery of Microsoft security solutions, aligned with client compliance requirements.
Serve as technical lead and subject matter expert on engagements, keeping implementation aligned with architecture and standards.
Apply sound engineering practices, provide architectural guidance during implementation, and review designs and pull requests.
Use AI tools to accelerate code, tests, documentation, and related work, and share effective practices.
Lead discovery and requirements sessions, clarify scope, dependencies, and risks, and shape prioritized backlogs with clear acceptance criteria.
Serve as a billable security architect on client engagements and meet the utilization expectations set in the annual performance plan.
Explain technical topics clearly to technical and non-technical audiences and connect decisions to client goals.
Help teams deliver with stable velocity and low defect rates through clear architecture, interfaces, automation, and incremental delivery practices.
Align teams on shared outcomes, contracts, and integration points, tracking dependencies through delivery.
Support effective Agile practices, including incremental delivery, a clear Definition of Done, and data-informed course corrections.
Mentor engineers and technical leads through pairing, design reviews, and feedback; provide architectural oversight across teams or workstreams.
Participate in technical interviews, calibration discussions, and cross-project mentorship.
Identify business development opportunities and communicate them to the sales director.
Support security sales pursuits through scoping, estimates, solution positioning, client workshops, demos, and roadmap discussions.
Produce solution options, high-level designs, and estimates, documenting assumptions, dependencies, and risks and explaining business value and risk reduction.
Create and maintain reusable assets such as runbooks, workshops, starter repositories, and templates.
Champion modern frameworks, patterns, tools, and responsible AI-assisted practices; participate in enablement and knowledge-sharing efforts.