Microsoft Azure Security

Microsoft Azure Security Cybersecurity Jobs

22 jobs found

Today

Senior Security Engineer

GORILLA GLUE COMPANY Sharonville, OH

Sharonville, OH

Today

Full time Senior Cloud Platforms Cloud Security

Apply Now

Job Description

The Senior Security Engineer is the primary technical cybersecurity expert for GORILLA GLUE COMPANY, helping design, implement, operate, and validate security controls across identity, endpoint, cloud, data protection, and security operations. This onsite role in Sharonville, OH focuses on reducing risk and continuously improving the company’s cybersecurity posture by partnering with internal teams and managed security providers.

In this position, you will support Microsoft security capabilities end to end, from identity and access to data protection and detection workflows, while also contributing to incident response, architecture reviews, and industrial cybersecurity for manufacturing and OT environments.

Key Responsibilities

Administer and continuously improve Microsoft Entra ID security controls, including Conditional Access, multifactor authentication, Privileged Identity Management, access reviews, and privileged-access hygiene.
Configure, operate, and optimize Microsoft Defender capabilities across endpoint, identity, email, cloud applications, and related security workloads.
Design and implement Microsoft Purview controls for data classification, data loss prevention, information protection, and secure AI adoption.
Maintain strong working knowledge of SIEM integrations, security telemetry, KQL, and Microsoft Sentinel to support the managed detection environment.
Design and implement security controls across Microsoft 365, Azure, hybrid identity, endpoints, servers, cloud services, and business technology environments.
Conduct security architecture reviews and technical risk assessments for new systems, projects, integrations, vendors, and cloud services.
Develop security automation using PowerShell, KQL, APIs, and orchestration capabilities to improve consistency, visibility, and response speed.
Establish technical standards, configuration baselines, implementation documentation, and operational runbooks for security controls.
Lead vulnerability and exposure prioritization using threat intelligence, exploitability, asset criticality, and business impact.
Partner with Infrastructure, application owners, and service providers to plan remediation, validate fixes, manage exceptions, and report aging and risk trends.
Validate deployment and coverage of required security agents, logging, integrations, and monitoring across in-scope assets.
Provide technical leadership during cybersecurity investigations and incidents, including scoping, containment, eradication, recovery, and lessons learned.
Coordinate with MDR/SOC providers on escalations, investigations, detection quality, telemetry gaps, and response actions.
Perform or support phishing investigations, identity investigations, endpoint analysis, cloud investigations, and data protection events.
Translate technical findings into clear remediation actions, risk statements, and status updates for security leadership and control owners.
Partner with Plant IT teams to strengthen cyber security posture of manufacturing and OT environments.
Assist in the design, implementation, and ongoing management of network segmentation and connected manufacturing technology.
Evaluate cybersecurity risks associated with industrial operations, control systems, and connected manufacturing technologies.
Ensure cyber security controls align with industry best practices, regulatory expectations, and corporate security standards.
Support Information Security policies, standards, and compliance requirements.
Maintain security documentation, diagrams, and procedures.
Assist with vendor security reviews and risk assessments.
Support audits and cybersecurity assessments.

What You Bring

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field (or equivalent professional experience).
5+ years of progressive experience in security engineering, cybersecurity operations, cloud security, identity security, or related disciplines.
Hands-on experience securing Microsoft 365, Azure, hybrid identity, endpoints, and cloud services.
Experience with vulnerability management, technical incident response, security monitoring, and remediation validation.
Practical experience with PowerShell, KQL, APIs, or other scripting and automation technologies.
Deep working knowledge of Microsoft Entra ID, Conditional Access, MFA, PIM, Microsoft Defender XDR, and Microsoft Purview.
Strong understanding of identity and access management, endpoint security, cloud security, data protection, logging, and zero trust concepts.
Ability to troubleshoot complex security issues, assess technical risk, and design practical controls for hybrid environments.
Ability to work effectively with Infrastructure, Service Desk, application owners, data teams, vendors, and managed security providers.
Strong analytical, documentation, communication, and project execution skills.

Technologies

Microsoft Entra ID
Conditional Access
Multifactor authentication
Privileged Identity Management
Microsoft Defender
Microsoft Purview
SIEM
KQL
Microsoft Sentinel
Microsoft 365
Azure
PowerShell
APIs
MDR/SOC providers
Microsoft Defender XDR
Zero trust

Benefits

Competitive compensation packages
Comprehensive healthcare benefits
Other perks and incentives
Recognized as a top place to work for 16 years in a row

Preferred Certifications

Microsoft Cybersecurity Architect Expert (SC-100) preferred
Microsoft Security Operations Analyst (SC-200), Identity and Access Administrator (SC-300), Information Protection and Compliance Administrator (SC-400), or Azure Security Engineer Associate (AZ-500) are beneficial
CISSP or equivalent security certification is helpful but not required

Company Values

Have fun, be passionate and show it!
Act with integrity and respect in all relationships.
Communicate openly and appreciate the effort of others.
Embrace knowledge, growth, and change.
Strive for excellence in what we do every day!

View full job page →

1d ago

Network & Cybersecurity Engineer

Bitful Consulting Flowery Branch, GA 🇺🇸 Remote

Flowery Branch, GA

1d ago

Part time Application Security Cloud Platforms Cloud Security

Apply Now

Job Description

Maintain and enhance a secure cloud and on-premises environment for a heavily regulated organization, supporting network security, threat response, and compliance activities.

Responsibilities

Maintain network infrastructure, including firewalls, security tooling, and secure Azure connectivity
Monitor security threats, investigate incidents, and coordinate remediation efforts
Assess security posture and address vulnerabilities across networks, cloud applications, and website hosting
Conduct annual website penetration testing, document results, and verify remediation is completed
Support regulatory audits by preparing documentation and coordinating responses and corrective actions
Maintain and update security policies, standards, and procedures
Maintain, test, and support business continuity (BC) and disaster recovery (DR) plans
Partner with IT and business leadership to address security risks, compliance requirements, and improvement opportunities

Requirements

Demonstrated experience maintaining and securing cloud and on-premises networks, including Azure
Experience supporting regulatory audits and maintaining security policies in a regulated environment; pharmaceutical experience preferred
Hands-on experience performing website penetration testing
Familiarity with security monitoring and operations, including vulnerability scanning, endpoint protection, and patch management tools
Strong analytical, documentation, and communication skills
Experience building relationships with technical teams and business stakeholders
Relevant security certifications preferred

Technologies

Microsoft Azure, Microsoft Defender for Cloud, Microsoft Defender
Splunk, IBM QRadar, ArcSight
Qualys
Metasploit, Burp Suite, Nmap
AxCrypt, BitLocker, Microsoft Intune
Cloudflare, Bitdefender

Role Logistics

Part time role: 20 hours per week
Primary work is remote
Onsite presence: 1 to 2 days in Flowery Branch, GA approximately every two months
Initial engagement: one year; extension likely

View full job page →

4d ago

Senior Cloud & Data Protection Security Engineer

U.S. Bank National Association Atlanta, GA

Atlanta, GA

4d ago

$112k - $131k/yr Full time Aws Cloud Security Cloud Platforms Cloud Security

Apply Now

Job Description

As a Senior Cloud & Data Protection Security Engineer within U.S. Bank’s Database Protection Team, you will support database activity monitoring, tokenization-related capabilities, and security services across AWS, Azure, and Kubernetes environments. The role focuses on administering and improving database protection platforms, strengthening platform operations, and resolving complex technical issues as an L3 resource.

Responsibilities

Administer, support, and enhance database protection and database activity monitoring platforms.
Build, configure, and maintain cloud-hosted infrastructure across AWS and Azure.
Administer and support Kubernetes clusters used by security and data-protection services.
Troubleshoot complex cloud, infrastructure, networking, application, and connectivity issues.
Onboard databases, applications, and systems into security monitoring and protection platforms.
Partner with database security, cloud, infrastructure, and data-protection teams to deliver secure and scalable solutions.
Improve platform reliability, stability, performance, monitoring, and operational support.
Implement platform upgrades, enhancements, and new technical capabilities.
Support infrastructure-as-code, cloud automation, and deployment-pipeline initiatives.
Serve as an L3 technical resource and independently lead complex problem resolution.

Required Qualifications

5+ years of relevant experience in cloud infrastructure, security engineering, platform engineering, or a related field.
Hands-on experience supporting information security, cybersecurity, or data-protection technologies.
Strong production experience with AWS and Azure.
Experience administering or providing advanced support for Kubernetes clusters.
Cloud infrastructure engineering and operational support experience.
Demonstrated ability to troubleshoot infrastructure, networking, application, and connectivity issues.
Experience building, configuring, and maintaining cloud-hosted environments.
Strong understanding of enterprise infrastructure, networking, and operational practices.
Experience supporting large, complex enterprise environments.
Ability to work independently and function as a senior L3 technical resource with minimal oversight.
Typically a Bachelor’s degree, or equivalent work experience.
Advanced technical and functional subject matter expert knowledge across security domain areas.

Technologies

AWS
Azure
Kubernetes
Infrastructure-as-code
Cloud automation
Deployment pipelines

Nice to Have

Database Activity Monitoring experience.
Tokenization, encryption, data masking, or other data-protection platform experience.
Database-security experience.
Infrastructure-as-code and cloud automation experience.
Experience with deployment pipelines and automated platform implementations.
Experience onboarding databases or applications into enterprise security platforms.
CISSP or another relevant security certification.
Familiarity with ITIL or service-management practices.
Financial-services or other highly regulated industry background.

Compensation and Location

Location: Atlanta, GA (onsite). This role requires working from a U.S. Bank location three (3) or more days per week.

Salary: USD 111,605 - 131,300 per yearly. Pay Range: $111,605.00 - $131,300.00.

Education

Typically a Bachelor’s degree or equivalent work experience.

Benefits

Healthcare (medical, dental, vision)
Basic term and optional term life insurance
Short-term and long-term disability
Pregnancy disability and parental leave
401(k) and employer-funded retirement plan
Paid vacation (from two to five weeks depending on salary grade and tenure)
Up to 11 paid holiday opportunities
Adoption assistance
Sick and Safe Leave accruals of one hour for every 30 worked, up to 80 hours per calendar year unless otherwise provided by law

E-Verify

U.S. Bank participates in the U.S. Department of Homeland Security E-Verify program in all facilities located in the United States and certain U.S. territories. The E-Verify program is an Internet-based employment eligibility verification system operated by the U.S. Citizenship and Immigration Services.

View full job page →

5d ago

Cloud & Security Engineer

Novacis Digital Atlanta, GA

Atlanta, GA

5d ago

$80k - $100k/yr Full time Application Security Automation Aws Cloud

Apply Now

Job Description

Novacis Digital is hiring a Senior Cloud / Security Engineer to design, secure, automate, and operate cloud infrastructure for enterprise healthcare, AI, and digital technology workloads. This hybrid role in Atlanta, GA supports Microsoft Azure and/or AWS environments, partnering closely with software, data, AI, architecture, and security teams to deliver reliable, compliant, and scalable cloud platforms. Enjoy a competitive salary and comprehensive health and dental benefits, plus paid time off and vision insurance.

Responsibilities

Design, build, and operate secure cloud infrastructure in Microsoft Azure and/or AWS for enterprise healthcare applications.
Implement Infrastructure as Code using Terraform, Bicep, CloudFormation, or equivalent tooling, including reusable modules and controlled promotion across environments.
Build and maintain CI/CD pipelines with Azure DevOps, GitHub Actions, Jenkins, or similar platforms.
Deploy and manage containerized workloads using Docker, Kubernetes, and cloud-native services such as AKS and EKS.
Apply DevSecOps security controls, including SAST, DAST, dependency scanning, container scanning, secrets detection, policy-as-code, and vulnerability remediation.
Engineer secure cloud networking with VNets/VPCs, subnets, routing, private endpoints, load balancers, DNS, firewalls, VPNs, and certificate management.
Implement identity and access controls using Microsoft Entra ID, Azure RBAC, AWS IAM, managed identities, key management, and least-privilege principles.
Establish centralized logging, metrics, tracing, alerting, security monitoring, and operational dashboards.
Support patching, backup, disaster recovery, capacity planning, cost optimization, incident response, and root-cause analysis.
Maintain architecture diagrams, security documentation, operating procedures, deployment standards, and environment configuration baselines.

Requirements

3-5 years of experience in Cloud Engineering, DevOps, DevSecOps, Security Engineering, Site Reliability Engineering, or Infrastructure Engineering.
Strong hands-on experience with Microsoft Azure and/or AWS in production environments.
Strong experience with Terraform or equivalent Infrastructure as Code tooling.
Hands-on experience with Docker, Kubernetes, AKS/EKS, container registries, ingress, and workload deployment.
Strong CI/CD experience with Azure DevOps, GitHub Actions, Jenkins, GitLab CI, or similar tools.
Strong understanding of Linux, networking, DNS, TLS/certificates, load balancing, storage, compute, and core cloud security fundamentals.
Experience with Python, Bash, PowerShell, or similar scripting and automation languages.
Experience implementing IAM, RBAC, secrets management, key management, secure configuration, and vulnerability management.
Strong troubleshooting, documentation, and cross-functional communication skills.

Preferred Skills

Experience with Azure Government, AWS GovCloud, FedRAMP-aligned environments, or government cloud workloads.
Knowledge of NIST 800-53, FISMA, Zero Trust, HIPAA, SOC 2, or similar security and compliance frameworks.
Experience supporting healthcare, federal, AI/ML, intelligent document processing, data analytics, or case management platforms.
Experience with observability and security tooling such as Azure Monitor, Application Insights, CloudWatch, Prometheus, Grafana, ELK/OpenSearch, or SIEM tooling.
Azure, AWS, Kubernetes, Terraform, or cybersecurity certifications.

Required/Relevant Technologies

Microsoft Azure, AWS, Terraform, Bicep, CloudFormation, Azure DevOps, GitHub Actions, Jenkins, GitLab CI, Docker, Kubernetes, AKS, EKS, SAST, DAST, policy-as-code, VNets, VPCs, private endpoints, load balancers, DNS, firewalls, VPNs, certificate management, Microsoft Entra ID, Azure RBAC, AWS IAM, managed identities, key management, least-privilege, Linux, TLS/certificates, Python, Bash, PowerShell, centralized logging, metrics, tracing, alerting, security monitoring, disaster recovery, incident response, root-cause analysis, and architecture diagrams.

What Novacis Digital Values

A security-first and automation-first engineering mindset with strong ownership of production environments.
Ability to translate security and reliability requirements into repeatable cloud engineering controls.
Sound judgment balancing security, performance, availability, maintainability, and cost.
Strong collaboration with software, AI, data, architecture, compliance, and program teams.

View full job page →

5d ago

Jr. Cloud Security Engineer

True Zero Technologies Model, CO

Model, CO

5d ago

Full time Amazon Web Services Ansible Application Security

Apply Now

Job Description

True Zero Technologies is hiring a Jr. Cloud Security Engineer to support secure, reliable cloud infrastructure deployments onsite in Model, CO. In this role, you’ll help strengthen cloud security and operational readiness while partnering closely with developers and DevOps teams on application deployment and CI/CD pipeline support. You will also gain hands-on exposure to cloud monitoring, log review, and automation workflows that keep systems running smoothly.

What you’ll do

Assist with deploying and configuring virtual machines, S3/Blob storage, and networking components including VPCs and subnets.
Track system performance metrics using tools such as AWS CloudWatch or Azure Monitor, with a focus on high availability.
Identify, document, and resolve minor technical issues and infrastructure errors.
Apply security best practices across cloud environments, including user access controls, firewalls, and security groups.
Support application deployment efforts and CI/CD pipelines in collaboration with developers and DevOps teams.
Maintain technical documentation, diagrams, and operational procedures to reflect current infrastructure and processes.
Provide first-level support for cloud system issues by monitoring network and application logs and helping resolve downtime.
Learn and use infrastructure automation tools such as Terraform or Ansible to enable repeatable cloud deployments.

What you bring

Foundational knowledge of at least one major cloud provider.
Ability to write and maintain basic scripts using Python, PowerShell, or Bash to automate routine tasks.
Basic understanding of TCP/IP, DNS, load balancers, firewalls, and comfort working with Linux or Windows.
BA or BS degree, or 2-4 years of experience in a related field.
Excellent verbal and written communication skills, with the ability to collaborate with peers and influence leadership.
Authorization to work in the United States and ability to work well in a team environment.
Some hands-on experience related to cloud architecture/engineering, including migration and security across FedRAMP IaaS, PaaS, and SaaS.
Experience with Cloud-based Computer Network Defense (CND).
Experience with cloud automation and scripting, including items such as Auto-scale and Azure Resource management.

Tools and technologies you may work with

AWS CloudWatch, Azure Monitor, S3, Blob, VPCs, subnets, Python, PowerShell, Bash, Linux, Windows, TCP/IP, DNS, load balancers, firewalls, security groups, Terraform, Ansible, FedRAMP, IaaS, PaaS, SaaS, Cloud-based Computer Network Defense (CND), Auto-scale, Azure Resource management.

Minimum experience: 2 years

View full job page →

5d ago

Information Security Engineer

Cooper's Hawk Winery & Restaurants Downers Grove, IL

Downers Grove, IL

5d ago

$105k - $120k/yr Full time Application Security Cloud Application Security Cloud Platforms

Apply Now

Job Description

Cooper’s Hawk Winery & Restaurants is building secure enterprise platforms that support hybrid operations across Azure, Oracle Cloud, Salesforce, and on-prem environments. This Information Security Engineer role focuses on protecting applications, cloud services, identity and access, and the tooling that helps keep business-critical systems resilient. The position is hybrid based in Downers Grove, IL, with a compensation range of USD 105,000 to 120,000 per year.

You will help strengthen security across the stack, from secure configurations and defense tooling to DevSecOps integration and threat detection tuning, while collaborating with MDR and SOC teams during monitoring and incident response.

What you’ll do

Support the design, implementation, and maintenance of security controls across Cooper’s Hawk hybrid infrastructure, with emphasis on Microsoft Azure, Oracle Cloud (ERP, Simphony POS), and Salesforce Commerce Cloud, ensuring secure configurations and reduced attack surface.
Develop and maintain secure configuration standards for cloud services, with a focus on Azure.
Engineer and manage security tooling across cloud and on-prem, including Microsoft Defender for Endpoint, Defender for Identity, Cisco VPN, Meraki firewalls, and Cloudflare WAF.
Embed security into the SDLC by integrating SAST, DAST, and SCA into GitHub and CI/CD pipelines, supporting threat modeling and code reviews to improve secure coding and strengthen APIs and customer-facing applications.
Administer and fine-tune Cloudflare WAF policies, bot mitigation, and access rules to help address OWASP Top 10 risks, credential stuffing, and scraping attempts.
Support identity and access controls across Azure Entra ID and on-prem Active Directory, including Conditional Access Policies, RBAC, Just-In-Time (JIT) access, and MFA enforcement.
Monitor and respond to threats by tuning detections, assisting investigations, and coordinating incident containment and recovery with MDR and SOC teams.
Perform and support vulnerability assessments and penetration testing, prioritize remediation based on risk, and track findings to closure.
Contribute to security programs such as PCI-DSS audits, NIST CSF 2.0 alignment, and cloud security posture improvements.
Continuously research CVE activity and evolving TTPs to update defenses and detection rules.

What you bring

Bachelor’s degree in information security, Computer Science, or a related field, or equivalent practical experience.
3+ years of progressive experience in infrastructure and application security across hybrid (on-prem and cloud) environments.
Technical experience with Windows Server and desktop platforms, including Active Directory and Entra ID, plus core networking fundamentals such as DNS, TCP/IP, VLANs, and VPNs.
Experience with enterprise security tools covering areas such as EDR, IPS, IAM, DLP, and vulnerability management platforms.
Knowledge of cloud security best practices with hands-on experience securing services in Azure and/or AWS.
Understanding of application security principles, including the OWASP Top 10, secure SDLC practices, and securing APIs and web applications.
Familiarity with integrating security into DevOps pipelines and managing cloud-native security controls, including WAFs, API gateways, and bot protection.
Familiarity with Salesforce security configurations and securing SaaS platforms.
Experience with SIEM, IDS/IPS, endpoint protection, firewalls, and security monitoring.
Knowledge of compliance and risk frameworks, including PCI-DSS, NIST CSF, and SOX/ITGC.
Strong communication and collaboration skills across technical and business teams.

Preferred qualifications

Industry-recognized security certifications (examples include CISSP, CISM, CRISC, CCSK, or relevant cloud/security certifications).
Experience in hospitality, restaurant, or retail.
Experience with DevSecOps and secure CI/CD integration.

Compensation and schedule

$105,000 - $120,000 per year. Final salary offer will depend on experience depth, skill set, qualifications, and internal pay equity. This role supports a hybrid work week model (3 days in office, 2 days remote, depending on role).

Benefits

Monthly Dining Allowance
50% Dining and Carryout
40% Retail Wine
20% Retail and Private Events
Monthly Complimentary Wine Tasting for Two
Medical, Prescription, Dental, Vision insurance plus Telemedicine and a Wellness Program
401(k) with Company Matching Retirement Savings Plan
Supplemental Health Coverage (Voluntary Accident, Hospital Indemnity and Critical Illness)
Flexible Savings Accounts (Health and Dependent Care)
Health Savings Account
Long-Term Disability; Voluntary Short-Term Disability
Basic Life and AD&D insurance (with option to purchase additional coverage)
Paid Parental Leave
Highly competitive pay plus Team Member Incentives & Rewards
Paid Time Off
Tenure Recognition Program
Complimentary Gym Membership in the RSC Building

View full job page →

7d ago

Cloud Security Engineer

TherapyNotes.com Philadelphia, PA

Philadelphia, PA

7d ago

$110k - $150k/yr Full time Cloud Identity Security Cloud Platforms Cloud Security

Apply Now

Job Description

TherapyNotes.com is looking for a hands-on Cloud Security Engineer to help protect cloud infrastructure, containerized workloads, and infrastructure-as-code pipelines with a strong emphasis on Azure. This role supports cloud security posture management and security engineering initiatives such as vulnerability management, incident response, and identity and access controls, within a healthcare-regulated environment.

Key Responsibilities

Manage and secure cloud infrastructure and cloud-based applications, with a focus on Azure.
Secure containerized workloads and Kubernetes environments (for example AKS), including network policy, workload identity, runtime protection, and container image scanning.
Own and mature cloud security posture management (CSPM) by continuously identifying and remediating misconfigurations across cloud environments.
Secure infrastructure-as-code orchestration platforms by implementing access control, secrets management, and deployment approval workflows for Terraform and OpenTofu pipelines.
Manage and secure identities in Microsoft Entra ID using Conditional Access, Entitlement Management, and just-in-time (JIT) privileged access models.
Review network diagrams and proposed connectivity changes, provide security guidance on segmentation and sensitive data flows, and coordinate with IT and SRE teams on concerns.
Administer Zero Trust network access and edge security tooling to secure access to corporate and cloud resources.
Support broader security engineering capabilities, including SIEM, DLP, E/XDR, and vulnerability management.
Monitor security alerts, respond to and escalate incidents, and participate in the incident response on-call rotation.
Conduct threat analysis, vulnerability assessments, and risk evaluations; document results, manage mitigation, and report status to leadership.
Develop queries, scripts, integrations, and automated workflows that improve cloud security operations.
Collaborate with development teams to integrate security into the SDLC and CI/CD pipeline.
Perform periodic cloud configuration and access reviews to support compliance with security standards.
Participate in audits and assessments to support governance, risk management, and compliance (GRC) efforts.

Requirements

5+ years of experience in cloud security engineering or a related role.
Deep, hands-on experience securing cloud infrastructure and cloud-based applications, with Azure preferred and AWS a plus.
Hands-on network security experience and strong understanding of network architecture, connectivity, segmentation, and firewall controls.
Experience securing containerized workloads and Kubernetes environments (for example AKS), including network policy and workload identity.
Experience with cloud security posture management (CSPM) and remediating misconfigurations across cloud environments.
Experience securing IaC orchestration platforms with access control, secrets management, and deployment approval workflows (for example Terraform, OpenTofu).
Experience with Microsoft Entra ID, including Conditional Access, Entitlement Management, and JIT privileged access models.
Experience with Zero Trust / SASE tooling (for example Cloudflare Zero Trust, WAF, Gateway, or equivalent).
Knowledge of security frameworks (NIST, ISO 27001, CIS) and compliance frameworks (HITRUST, PCI DSS).
Proven ability to conduct security assessments, vulnerability management, and incident response.
Strong understanding of Windows and Linux platforms and endpoint security.
Industry certifications such as CISSP, SSCP, Security+, or a cloud security certification (Azure/AWS) are preferred.
Bachelor’s degree in information security, computer science, or a related field is preferred; equivalent experience will be considered.

Technologies

Azure, AWS
Kubernetes, AKS
Cloud Security Posture Management (CSPM)
Terraform, OpenTofu
Microsoft Entra ID, Conditional Access, Entitlement Management, just-in-time (JIT) privileged access models
Zero Trust / SASE, Cloudflare Zero Trust, WAF, Gateway
NIST, ISO 27001, CIS, HITRUST, PCI DSS
Windows, Linux
CISSP, SSCP, Security+
SIEM, DLP, E/XDR
GitOps tooling: Argo, Flux

Compensation and Benefits

Competitive salary: $110,000 - $150,000 per year
Employer sponsored health, dental, vision, life, and disability insurance
Retirement plan with company contribution
Annual company profit sharing
Personal development and training budget
Open, collaborative work environment
Extensive 2-week onboarding plan
Comprehensive mentorship program

Additional Skills

Familiarity with GitOps tooling (Argo, Flux) for secure Kubernetes deployments
Network or systems engineering background is a plus
Familiarity with programming or scripting languages is a plus
Commitment to continuous learning and staying current with industry trends and technologies
Strong ownership mindset and ability to drive projects to completion
Strong collaboration skills across cross-functional teams

Equal Opportunity Employer: TherapyNotes LLC is an Equal Opportunity Employer and does not discriminate based on race, color, religion, sex, national origin, age, disability, genetic information, or any other protected status under federal, state, or local law. The company is committed to providing a workplace free of discrimination and harassment. If you require a reasonable accommodation during the application process, contact humanresources@therapynotes.com. 10/6/2026.