Overview

The Cloud Security Engineer will be a subject matter expert with hands-on experience with cloud technologies, tools and methodologies with a particular focus on Microsoft Azure. The role is suited for an experienced Cloud Security Engineer with proven understanding in enterprise security and will focus on building tool sets and processes to support Navy's Cloud program.

Navy's Cloud Organization fosters a collaborative environment and is building a best-in-class Cloud program that protects Navy Federal information and cloud compute environments.

Responsibilities

• Contribute to the vision, strategy, and drive execution for integrated security controls across Software-as-a-Service (SaaS), Platform-as-a-Service (PaaS), Infrastructure-as-a-Service (IaaS) for Navy's Azure environment.
• Able to demonstrate clear understanding of current risks and threats to Cloud infrastructure and/or IT infrastructures at technical and manager audiences.
• Provide security consultancy and engineering support for cloud security solutions including analysis and development of Azure and other security solutions.
• Provide architecture assurance on Cloud security initiatives and compliance of existing security standards interfacing with infrastructure and development teams.
• Maintain the security infrastructure tools that are built on the Cloud platform, providing stability and policies and procedures.
• Develop and maintain documentation of all Security products including specific tools, technologies and processes.
• Participate in Information Security Incident Response activities for the NFCU's environment.
• Respond to security vulnerabilities identified through periodic and on-demand system audits and vulnerability assessments of Cloud services.
• Monitor compliance with the organization's information security policies and procedures among employees, contractors and third parties.
• Manage remediation efforts for any gaps reported in audits or recommended process improvements.
• Actively monitor new and emerging cloud security technologies, trends, issues, and solutions and assess their applicability to Navy Federal's cloud strategy.

• Bachelor's degree in computer science, Information Technology, or similar field of study required
• Hands on experience with Azure Policy and Azure initiatives management
• Knowledge of Azure Policy as Code
• Experience with Microsoft Defender for cloud
• Experience with Microsoft defender for cloud Apps and Defender for endpoints
• Experience with Azure Key Vault integration, secrets, certificate and key management
• Experience with other IaaS and PaaS elements such as compute services, Data Services and App Services.
• Experience with Sentinel and Azure Purview
• Hands-on experience with Access control technologies such as Azure AD B2C; SAML SSO, oAuth 2.0 configuration, set-up and operations management;
• Understanding of encryption options in Azure such as CMK with DES and TDE
• Experience with certificate management for IaaS and PaaS elements
• Experience with Azure AD, Azure Resource Management Templates and Azure policies
• Hands-on development and scripting skills in PowerShell 5
• 7+ years' experience working in a technical role with a minimum of 3 years' experience focused on cloud security and access control..
• Experience with Azure Devops permission management and overall governance
• Experience with Azure conditional Access and Privileged Identity Management PIM
• Experience with Azure Identity Governance
• Working knowledge of App registration management and enterprise Applications
• Strong knowledge of information security and access controls.
• Industry certification (CISSP, CISA, Azure) of high interest
• Financial industry experience preferred