Azure Networking

Azure Networking Cybersecurity Jobs

3 jobs found

30d ago

Cloud Security Engineer

ArdentMills Denver, CO 🇺🇸 Remote

Denver, CO

30d ago Closed

$140k - $200k/yr Full time Azure Azure Developer Associate Azure Functions

This position is no longer accepting applications (closed Sep 10, 2026).

Job Description

ArdentMills is hiring a Cloud Security Engineer to design, implement, and operate security controls across Microsoft Azure environments, with possible expansion to other leading cloud platforms.

Responsibilities

Own the design and implementation of cloud landing zones, including identity and network controls (VPC/VNet, security groups/NSGs, private endpoints).
Configure and operate cloud-native security services, including Microsoft Defender for Cloud, Microsoft Sentinel, and Defender XDR.
Build posture management (CSPM) and workload protection (CWPP) using policy-as-code and automated remediation.
Implement key management, encryption at rest and in transit, and certificate governance using KMS/Key Vault/Cloud KMS.
Establish logging, telemetry, and alerting with Azure Monitor and integrate to SIEM/XDR; collaborate with IT and Security teams to test and validate detection coverage and maturity from cloud-native sources.
Harden serverless, containers, and managed services using baseline controls, including Functions, Logic Apps, Container Apps, AKS, and ACI.
Conduct threat modeling and security reviews for cloud architectures and application designs.
Partner with platform and product teams to deliver IaC guardrails, image baselines, and patch/vulnerability workflows.
Serve as a point of escalation for cloud incidents: perform triage and containment, drive post-incident improvements, and develop automation architecture to improve cloud detection and response.
Document standards and runbooks; run enablement sessions with dev and ops teams.
Design and support the cloud security strategy and program maturity.

Requirements

Bachelor’s in computer science/engineering or equivalent experience.
4–7 years in cloud security engineering across at least one major CSP.
Strong knowledge of IAM, networking, encryption, and cloud-native security tooling.
Experience securing hybrid environments spanning on-premises and Azure cloud.
Scripting/automation skills: Python, Bash, or PowerShell.
Infrastructure as Code experience using Terraform, Bicep, or ARM.
Certifications: CCSP OR AWS Certified Security – Specialty OR Azure Security Engineer Associate (AZ-500) OR Google Professional Cloud Security Engineer.

Technologies

Microsoft Azure; VPC/VNet; security groups/NSGs; private endpoints
Microsoft Defender for Cloud; Microsoft Sentinel; Defender XDR; CSPM; CWPP; policy-as-code
KMS; Key Vault; Cloud KMS; encryption at rest/in transit; certificate governance
Azure Monitor; SIEM; XDR
Functions; Logic Apps; Container Apps; AKS; ACI
IaC; image baselines; patch/vulnerability workflows
Automation; AI-assisted capabilities
Python; Bash; PowerShell; Terraform; Bicep; ARM
CCSP; AWS Certified Security – Specialty; Azure Security Engineer Associate (AZ-500); Google Professional Cloud Security Engineer

Benefits

Medical, Dental and Vision Coverage
Health and Dependent Savings Accounts
Life and Disability Programs
Voluntary Benefit Programs
Company Sponsored Wellness Programs
Retirement Savings with Company Match
Team Member and Family Assistance Program (EAP)
Paid Time Off and Paid Holidays
Employee Recognition Program with Rewards (RAVE)

Good to Have

Experience with CIEM solutions and multi-cloud governance.
Certifications: GIAC Cloud (GCSA/GPCS); CNCF CKA/CKS; vendor pro-level architect certs.

Work Location and Schedule

Denver, CO (remote); remote eligible
Occasional after-hours support for incidents
On-call rotation for major incidents

Other Considerations

May support cloud migration programs and control design reviews.

Salary: USD 140,000 - 200,000 per yearly

View full job page →

1mo ago

Cybersecurity Network Engineer

Seminole Hard Rock Support Services Davie, FL

Davie, FL

1mo ago Closed

Full time Application Security Azure Azure Networking

This position is no longer accepting applications (closed Sep 4, 2026).

Job Description

Seminole Hard Rock Support Services is seeking a hands-on Cybersecurity Network Engineer to build, operate, and continuously enhance enterprise network security controls across on-premises and cloud environments. In this role, you will turn network architecture and security policy into measurable, automated defenses, with Microsoft Azure as the primary cloud and additional coverage spanning AWS and Google Cloud. The work focuses on deploying and tuning secure access, edge, and segmentation controls while instrumenting telemetry for detection, triage, and response.

What you will do

Deploy, configure, and tune secure-access service edge controls including secure web gateway, cloud firewall, CASB, and DLP policies, maintaining coverage and current policy alignment.
Operate zero-trust network access for workforce and third parties, moving away from legacy VPN patterns toward identity-aware, least-privilege application access.
Operate an enterprise browser to enforce least-privilege isolated access to sensitive applications from both managed and unmanaged endpoints.
Tune SSL/TLS inspection, tenant restrictions, and egress policy to balance security, privacy, and application compatibility, including traffic sensitive to interception such as NTLM, Kerberos, and certificate-pinned traffic.
Manage traffic steering, forwarding, and PAC configurations so users route through the correct control path from any worldwide location.
Administer edge and perimeter defenses such as WAF rules, DDoS mitigation, bot management, and CDN and DNS policies for internet-facing properties.
Operate API security posture and runtime protection by discovering shadow APIs and closing authentication and data-exposure gaps.
Administer next-generation firewall policy, NAT, and rule lifecycle across data center and property perimeters, supporting rule hygiene and least-privilege access.
Harden DNS, certificate, and TLS posture at the edge in partnership with PKI and infrastructure teams.
Coordinate perimeter changes with franchise, property, and vendor networks so remote sites integrate securely without breaking authentication or application flows.
Deploy and tune network detection and response, triaging anomalous east-west and north-south activity and delivering high-fidelity findings to the SOC.
Engineer network telemetry pipelines (flow data, DNS logs, proxy logs, firewall logs, packet metadata) to route, shape, and enrich data for cost-effective analysis.
Develop and tune network-focused detections and SIEM content, mapping coverage to attacker techniques.
Investigate network-layer incidents end-to-end by correlating packet capture, flow, proxy, and firewall logs to isolate root cause under time pressure.
Maintain authoritative visibility of network assets and attack surface by continuously reconciling what is connected against what is inventoried.
Apply zero-trust segmentation and least-privilege access across campus, data center, gaming, and hospitality network estates.
Design and enforce microsegmentation and network policy for sensitive zones including payment, gaming, surveillance, and OT/IoT environments, in partnership with infrastructure and compliance teams.
Implement cloud network security guardrails across Azure (primary), AWS, and Google Cloud, including virtual network design, firewalling, private connectivity, and logging baselines such as Azure Firewall, NSGs, and Private Link.
Remediate cloud network misconfigurations and exposure paths identified by posture management to prevent long-term drift.
Integrate network security checks into infrastructure-as-code and deployment workflows so network changes are secure by default.
Build and maintain network security automations, integrations, and response playbooks across the stack using APIs and SOAR.
Leverage AI/ML and large language models to analyze network telemetry at scale, accelerate alert triage and enrichment, surface anomalies, and automate reporting and documentation.
Develop production-grade scripts, services, and tooling (including Python, PowerShell, and Go) to operationalize network controls and reduce repetitive manual work.
Automate firewall rule reviews, policy validation, and configuration compliance checks so drift is caught by pipelines rather than manual review.
Instrument metrics and dashboards that measure network control coverage, detection efficacy, and remediation timeliness.
Partner with Cybersecurity Architecture, IAM, infrastructure, application, and SOC/MSSP teams to deploy network controls consistently and resolve issues quickly.
Support Cybersecurity Strategy & Governance, audit, and privacy programs by automating evidence collection and continuous control monitoring for network controls.
Document standards, runbooks, integration designs, and operating procedures to keep network controls repeatable and supportable.
Research, prototype, and pilot emerging network security tools and AI-driven capabilities that improve detection, automation, and analyst efficiency.
Participate in an on-call rotation and incident response for a 24/7 gaming and hospitality environment.

Experience and skills

5–7+ years of combined experience in network engineering, network security engineering, or cloud networking, with at least 4+ years hands-on focused on enterprise network security engineering.
Strong enterprise network engineering fundamentals, including hands-on design, operation, and troubleshooting of routing and switching, firewalls, proxies, VPN/ZTNA, load balancing, DNS, and TLS/PKI.
Practical automation capability with hands-on experience in Python, PowerShell, Go or similar languages, including building custom network security tooling and integrations.
Experience applying AI/ML or large language models to network data analysis, detection, triage, or automation.
Working knowledge of SASE/SSE platforms including SWG, ZTNA, CASB, and DLP, plus WAF and DDoS mitigation, NDR, and API security.
Hands-on cloud network security experience on Microsoft Azure (required), plus working experience in AWS and/or Google Cloud involving virtual network design, cloud firewalls, private connectivity, and network security posture management.
Deep networking knowledge including TCP/IP, BGP/OSPF, DNS, DHCP, TLS/PKI, NAT, IPv6, packet analysis, segmentation, and zero-trust access models.
Experience integrating network security tools and data sources via API, familiarity with SOAR playbook development, and SIEM content engineering.
Familiarity with relevant gaming and hospitality compliance frameworks such as PCI-DSS, SOX, tribal gaming regulations, and GLBA is preferred but not required.
Certifications preferred: Cisco CCNP Security, vendor certifications in next-generation firewalls and SASE/SSE platforms, Microsoft AZ-700 or AZ-500, AWS Advanced Networking Specialty, and GIAC (GCIA, GDSA, GCLD) or equivalent; CISSP is a plus.

Technologies you will work with

Cloud and networking: Microsoft Azure, AWS, Google Cloud, SASE, SWG, ZTNA, CASB, DLP, Azure Firewall, NSGs, Private Link, microsegmentation, zero-trust access, NAT, PKI, infrastructure-as-code
Security controls and telemetry: SSL/TLS inspection, NTLM, Kerberos, WAF, DDoS mitigation, bot management, CDN, DNS, API security, SIEM, SOAR, telemetry pipeline, packet metadata
Languages and automation: Python, PowerShell, Go
Compliance frameworks and certifications (as applicable): SOX, PCI-DSS, GLBA, Cisco CCNP Security, Microsoft AZ-700, Microsoft AZ-500, AWS Advanced Networking Specialty, GIAC (GCIA, GDSA, GCLD), CISSP

Benefits

Comprehensive benefits package supporting health and well-being, planning for the future, and maintaining a healthy work-life balance.
Benefits may vary with employment status.

View full job page →

1mo ago

Sr. Network Security Engineer

Astyra Corporation Mechanicsville, VA

Mechanicsville, VA

1mo ago Closed

$70 - $75/hr Contract Senior Azure Networking Cloud Platforms

This position is no longer accepting applications (closed Sep 4, 2026).

Job Description

Senior Network Security Engineer role supporting a hybrid enterprise network and cloud security program for an agency in the Richmond/Mechanicsville, VA area.

Implement and support the agency’s IT network cloud and computing infrastructure
Deliver day-to-day network security activities and ongoing operational support
Ensure network security architecture aligns with operational security standards before and after deployment
Lead investigation, containment, and coordination for network security incidents
Review and validate firewall rule requests for compliance with security standards
Design and maintain secure hybrid network architecture across on-premises and Azure environments
Monitor security events using SIEM technologies and coordinate incident response activities
Conduct network security assessments and recommend remediation strategies
Develop and maintain network security standards diagrams and operational documentation
Support penetration testing and remediation efforts
Participate in on-call support during critical security incidents
Perform proactive threat hunting and anomaly detection
Validate WAF and firewall placement and integration exposure/connectivity
Lead implementation review and management of agency WAFs
Identify and diagnose system problems and threats using system logs, line monitors, SIEM diagnostic software, and test equipment
Identify, prioritize, and remediate network security vulnerabilities
Provide documentation including network architecture topology diagrams, IP schemes, firewall rules, and access controls when required
Work independently on assigned projects

Requirements

Enterprise Networking: 8 years (Required)
Enterprise Security: 5 years (Required)
Azure Networking: 3 years (Required)
WAF/NGFW: 3 years (Required)
Supporting environments with 300+ network devices: 3 years (Desired)
Incident response, security investigations, log analysis, threat intelligence, and security monitoring experience (Required)
SIEM products experience (e.g., Splunk, Microsoft Sentinel) (Required)
Vulnerability management, remediation tracking, and vulnerability scanning tools (e.g., Nessus, Tenable, Def) (Required)
Active Directory, MFA, Conditional Access, and Certificates experience (Required)
Experience with SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, and Zero Trust principles (Required)
Experience with Cisco ISE, NAC, 802.1X, RADIUS, TACACS (Required)
Experience with products including Palo Alto, F5 Distributed Cloud, Azure WAF, Cisco VPN, Global Protect, F5 BIG-IP (Required)
Experience working in highly regulated environments and leading technical troubleshooting during outages (Required)
Ability to communicate technical issues to technical and executive audiences and mentor junior engineers (Required)
Certifications: Azure Security Engineer (AZ-500) and/or Azure Network Engineer (AZ-700) (Required, or ability to achieve)

Technologies

Palo Alto firewalls
Azure networking
ExpressRoute connectivity
WAF technologies
SD-WAN
Splunk SIEM
SIEM technologies
Splunk
Microsoft Sentinel
Nessus, Tenable, Def
Active Directory, MFA, Conditional Access, Certificates
SEC530, CIS Benchmarks, NIST CSF, NIST 800-53
Zero Trust principles
Cisco ISE, NAC, 802.1X, RADIUS, TACACS
F5 Distributed Cloud, Azure WAF, Cisco VPN, Global Protect, F5 BIG-IP
Azure Security Engineer (AZ-500), Azure Network Engineer (AZ-700)
SIEM diagnostic software, system logs, line monitors, test equipment

Contract, Location, and Pay

Job type: Contract (Full-time listed)
Location: Mechanicsville, VA 23116 (hybrid remote)
Salary: $70.00 - $75.00 per hour
Local requirement: Richmond/Mechanicsville, VA area only

Benefits

Dental insurance
Health insurance
Paid time off
Vision insurance

Application Notes

Proper email communication will only be done using @astyra.com addresses
Ensure messages are sent/received through approved Astyra recruiters for quickest interview consideration

Application Questions

Are you a U.S. Citizen or Permanent Resident?
How many years of Enterprise Networking experience do you have?
How many years of experience do you have with: Palo Alto, F5 Distributed Cloud, Azure WAF, Cisco VPN, Global Protect, F5 BIG-IP?
Do you have either or both certifications: Azure Security Engineer (AZ-500), Azure Network Engineer (AZ-700)?
How many years of experience do you have with Azure Networking?
How many years of WAF/NGFW experience do you have?

View full job page →

Azure Networking Cybersecurity Jobs

Cloud Security Engineer

Cybersecurity Network Engineer

Sr. Network Security Engineer

Get Azure Networking Cybersecurity Jobs alerts