Senior Security Engineer (Azure Security)

Nava PBC

1d•Remote

About The Position

Nava is a consultancy and public benefit corporation working to make government services simple and effective. Since 2015, federal, state, and local agencies have trusted Nava to help solve highly scrutinized technology modernization challenges. As a client services company, we guide agencies constrained by legacy systems to a future with sharp user experiences built on secure, reliable, fault-tolerant cloud infrastructure. We bill for our time, offering our expertise and problem-solving approach to help our government partners enhance their digital products and services. People are at the heart of our work, from members of the public who rely on benefit programs to government agency staff. Through human-centered design and modern engineering best practices, we help our government partners understand user needs and deliver on their missions more effectively. This focus gives everyone at Nava the opportunity to do work that is meaningful, impactful, and deeply connected to public good. We are seeking a Senior Security Engineer to support the design and implementation of a secure Azure cloud environment for a large-scale government modernization effort. This role will focus on establishing strong security and compliance foundations, including identity and access management, monitoring, and policy enforcement across the tenant. The Security Engineer will partner closely with cloud architects, engineers, and client stakeholders to define and implement security best practices aligned with federal and state requirements.

Requirements

Experience with Azure cloud security, including Microsoft Entra ID and Defender for Cloud
Strong knowledge of Identity and Access Management (IAM), including RBAC and privileged access controls
Familiarity with security and compliance frameworks (e.g., HIPAA, state security standards, ATO processes)
Experience implementing cloud security monitoring, logging, and incident detection
Knowledge of Azure Policy and governance guardrails for enforcing security standards
Experience with key management and secrets handling (e.g., Azure Key Vault)
Understanding of secure network architecture and connectivity (including hybrid/on-prem integrations)
Experience supporting Infrastructure-as-Code (IaC) and secure CI/CD pipeline practices
Ability to define and document security architecture, standards, and operational runbooks
Strong collaboration skills to work with engineers, architects, and stakeholders on security design and remediation

Responsibilities

Design and implement identity and access management (IAM) models, including RBAC and privileged access controls
Configure and advise on security tools such as Microsoft Defender for Cloud
Define and enforce security policies and governance guardrails using Azure Policy
Set up and guide centralized logging, monitoring, and threat detection capabilities
Design key management and secrets handling solutions (e.g., Azure Key Vault)
Support compliance efforts, including HIPAA alignment and ATO preparation activities
Collaborate with teams to identify security risks and define remediation approaches
Contribute to secure cloud architecture decisions, including networking and access patterns
Support Infrastructure-as-Code (IaC) and CI/CD practices to ensure secure deployments
Create security documentation, runbooks, and provide guidance to enable client teams to operate securely

Benefits

Health coverage — comprehensive medical, dental, and vision plans to support your overall health needs
Insurance coverage — Nava provides disability, life, and accidental death insurance at no cost
Time off — vacation, holidays (including Juneteenth), and floating holidays to rest and recharge
Company holidays — enjoy 12 paid federal holidays each year on top of your regular PTO
Annual bonus — when Nava meets its goals, eligible employees receive a performance-based annual bonus
Parental leave — paid time off for new parents, plus weekly meals delivered to your home
Wellness program — full platform offering physical, mental, & emotional health resources & support tools
Virtual care — see doctors online with no copay through UnitedHealthcare’s virtual visit program
Sabbatical leave — earn extended unpaid leave after continuous service for personal growth or rest
401(k) match — Nava matches 4% of your salary to support your retirement savings plan
Flexible work — remote-first environment with flexibility built around your schedule and responsibilities
Home office setup — company laptop & setup assistance provided via Staples for remote work needs
Utility support — monthly reimbursement to help offset eligible home office utility expenses
Learning opportunities — internal training programs and resources to help grow your professional skills
Development opportunities — LinkedIn Learning access & an annual allowance for courses, tuition, & certs
Referral bonus — get rewarded when you refer great people who join the Nava team
Commuter benefits — pre-tax commuter programs to support in-office travel when applicable
Supportive culture — A collaborative and remote-friendly team environment where people genuinely care