Senior Azure Security Engineer Jobs in Kentucky (NOW HIRING)

We are seeking an experienced Cloud Security Engineer to design, implement, and manage multi-cloud

network security controls across Azure and GCP. The role focuses on Infrastructure-as-Code (IaC) delivery

through Terraform, integrated into Azure DevOps Pipelines, GitHub Actions, and Argo CD GitOps workflows.

The ideal candidate is a subject matter expert (SME) who can build secure, automated solutions from

scratch using Terraform, while documenting and transferring knowledge to internal teams. The role

requires someone comfortable balancing planned project execution under agile methodologies with rapid

incident triage (P0–P3) in a dynamic, fast-paced environment.

Roles & Responsibilities

Design, implement, and manage cloud-native network security controls in Azure and GCP, including:

• Azure NSGs (Network Security Groups)

• GCP VPC Service Controls (VPC-SC)

• GCP Cloud Armor (DDoS/WAF protection)

• GCP Cloud Next-Gen Firewall (NGFW Enterprise) with IPS/IDS

• Develop, maintain, and scale Terraform-based Infrastructure-as-Code modules for cloud infrastructure

and security policies.

• Build, enhance, and manage CI/CD automation using Azure DevOps Pipelines and GitHub Actions.

• Support Kubernetes deployments and GitOps workflows using Argo CD, ensuring secure and reliable rollout of application manifests. • Author clear documentation, runbooks, and deliver knowledge transfers/training to operational and engineering teams. • Collaborate cross-functionally with cloud, security, and development teams to ensure secure, scalable solutions. • Participate in agile ceremonies for planned project work and provide rapid incident response during P0–P3 security/networking events. Required Qualifications 5+ years of hands-on experience as a Cloud Engineer / Cloud Security Engineer / DevOps Engineer. • Strong expertise in Terraform (designing reusable modules, managing state, enterprise workflows). • 5+ years of practical experience with Azure and GCP network security services: NSGs, VPC-SC, Cloud Armor, NGFW with IPS/IDS. • Proficiency in CI/CD tools: Azure DevOps Pipelines and GitHub Actions. • Familiarity with GitOps tools (Argo CD or Flux) for Kubernetes. • Scripting proficiency (PowerShell, Bash, or Python) for automation and troubleshooting. • Demonstrated experience documenting technical solutions, producing clear runbooks, and performing knowledge transfers to enable operational adoption. • Strong troubleshooting and incident response skills in cloud environments. Experience securing workloads in AKS (Azure Kubernetes Service) and GKE (Google Kubernetes Engine). • Exposure to other CI/CD platforms (GitLab CI, Jenkins, CircleCI) and config management (Ansible). • Relevant certifications (strongly desired): • Cloud Security / Architecture: Microsoft Azure Security Engineer Associate, Azure Solutions Architect Expert, Google Professional Cloud Security Engineer, or Google Professional Cloud Architect • IaC / DevOps: HashiCorp Certified: Terraform Associate, Certified Kubernetes Administrator (CKA), Certified Kubernetes Application Developer (CKAD), or Azure DevOps Engineer Expert

Generic Managerial Skills, If any

Experience securing workloads in AKS (Azure Kubernetes Service) and GKE (Google Kubernetes Engine).

• Exposure to other CI/CD platforms (GitLab CI, Jenkins, CircleCI) and config management (Ansible).

• Relevant certifications (strongly desired):

• Cloud Security / Architecture: Microsoft Azure Security Engineer Associate, Azure Solutions Architect

Expert, Google Professional Cloud Security Engineer, or Google Professional Cloud Architect

• IaC / DevOps: HashiCorp Certified: Terraform Associate, Certified Kubernetes Administrator (CKA),

Certified Kubernetes Application Developer (CKAD), or Azure DevOps Engineer Expert

Role Descriptions: Design| implement| and manage cloud-native network security controls in Azure and GCP| including Azure NSGs (Network Security Groups) GCP VPC Service Controls (VPC-SC) GCP Cloud Armor (DDoSWAF protection) GCP Cloud Next-Gen Firewall (NGFW Enterprise) with IPSIDS Develop| maintain| and scale Terraform-based Infrastructure-as-Code modules for cloud infrastructure and security policies. Build| enhance| and manage CICD automation using Azure DevOps Pipelines and GitHub Actions. Support Kubernetes deployments and GitOps workflows using Argo CD| ensuring secure and reliable rollout of application manifests. Author clear documentation| runbooks| and deliver knowledge transferstraining to operational and engineering teams. Collaborate cross-functionally with cloud| security| and development teams to ensure secure| scalable solutions. Participate in agile ceremonies for planned project work and provide rapid incident response during P0P3 securitynetworking events.Required Qualifications5 years of hands-on experience as a Cloud Engineer Cloud Security Engineer DevOps Engineer. Strong expertise in Terraform (designing reusable modules| managing state| enterprise workflows). 5 years of practical experience with Azure and GCP network security services NSGs| VPC-SC| Cloud Armor| NGFW with IPSIDS. Proficiency in CICD tools Azure DevOps Pipelines and GitHub Actions. Familiarity with GitOps tools (Argo CD or Flux) for Kubernetes. Scripting proficiency (PowerShell| Bash| or Python) for automation and troubleshooting. Demonstrated experience documenting technical solutions| producing clear runbooks| and performing knowledge transfers to enable operational adoption. Strong troubleshooting and incident response skills in cloud environments.Experience securing workloads in AKS (Azure Kubernetes Service) and GKE (Google Kubernetes Engine). Exposure to other CICD platforms (GitLab CI| Jenkins| CircleCI) and config management (Ansible). Relevant certifications (strongly desired) Cloud Security Architecture Microsoft Azure Security Engineer Associate| Azure Solutions Architect Expert| Google Professional Cloud Security Engineer| or Google Professional Cloud Architect IaC DevOps HashiCorp Certified Terraform Associate| Certified Kubernetes Administrator (CKA)| Certified Kubernetes Application Developer (CKAD)| or Azure DevOps Engineer Expert

Essential Skills: Design| implement| and manage cloud-native network security controls in Azure and GCP| including Azure NSGs (Network Security Groups) GCP VPC Service Controls (VPC-SC) GCP Cloud Armor (DDoSWAF protection) GCP Cloud Next-Gen Firewall (NGFW Enterprise) with IPSIDS Develop| maintain| and scale Terraform-based Infrastructure-as-Code modules for cloud infrastructure and security policies. Build| enhance| and manage CICD automation using Azure DevOps Pipelines and GitHub Actions. Support Kubernetes deployments and GitOps workflows using Argo CD| ensuring secure and reliable rollout of application manifests. Author clear documentation| runbooks| and deliver knowledge transferstraining to operational and engineering teams. Collaborate cross-functionally with cloud| security| and development teams to ensure secure| scalable solutions. Participate in agile ceremonies for planned project work and provide rapid incident response during P0P3 securitynetworking events.Required Qualifications5 years of hands-on experience as a Cloud Engineer Cloud Security Engineer DevOps Engineer. Strong expertise in Terraform (designing reusable modules| managing state| enterprise workflows). 5 years of practical experience with Azure and GCP network security services NSGs| VPC-SC| Cloud Armor| NGFW with IPSIDS. Proficiency in CICD tools Azure DevOps Pipelines and GitHub Actions. Familiarity with GitOps tools (Argo CD or Flux) for Kubernetes. Scripting proficiency (PowerShell| Bash| or Python) for automation and troubleshooting. Demonstrated experience documenting technical solutions| producing clear ru

Role Descriptions: Security Analyst

Essential Skills: Security Analyst

Desirable Skills:

Keyword:

Skills: Digital : Digital Security

Experience Required: 6-8