We are seeking an experienced Cloud Security Engineer to support a largescale data center migration to Microsoft Azure for a healthcare payer organization. This role is responsible for ensuring security controls are applied consistently across cloud workloads, supporting identity and access management alignment, and validating compliancerelevant configurations throughout the migration lifecycle. The Cloud Security Engineer will work closely with platform, IAM, network, application, and compliance teams to ensure Azure environments meet enterprise security standards and healthcare regulatory requirements, including HIPAA and HITECH, while enabling safe and efficient migration waves.

Key Responsibilities
Cloud Security Architecture & Standards
 Define and enforce Azure security standards and guardrails for migrated workloads
 Ensure consistent application of security controls across subscriptions, resource groups, and environments
 Align cloud security designs with enterprise architecture and Zero Trust principles
 Support secure landing zones and shared services architectures
Security Controls & Configuration Management
 Implement and validate Azure security controls including:
o Azure Policy and initiatives
o Network security controls (NSGs, firewalls, segmentation)
o Encryption at rest and in transit
o Logging, monitoring, and diagnostics configurations
 Validate that workloads meet baseline security and compliance requirements before and after migration
Identity & Access Alignment
 Partner with IAM teams to ensure identity and access integration aligns with enterprise standards

 Validate RBAC assignments, leastprivilege access, and role scoping
 Support MFA, Conditional Access, and privileged access management (PIM) implementations
 Ensure secure authentication and authorization for cloud and hybrid workloads
Migration Wave Security Support
 Participate in wavebased migration planning and execution
 Perform premigration security readiness assessments
 Validate security configurations during cutover and postmigration stabilization
 Support rapid remediation of security findings during migration events
Compliance, Risk & Audit Support
 Ensure Azure configurations comply with HIPAA, HITECH, and internal security policies
 Validate compliancerelevant configurations such as logging, access controls, encryption, and retention
 Support security risk assessments, audit requests, and evidence collection
 Track remediation of security gaps identified during migration
Monitoring, Detection & Response
 Ensure security telemetry is properly integrated with enterprise monitoring and SIEM platforms
 Validate alerting and incident detection for migrated workloads
 Support security incident response and rootcause analysis as needed
Documentation & Collaboration
 Document security standards, patterns, and validation checklists
 Maintain security architecture diagrams and runbooks
 Work closely with cloud platform, networking, IAM, application, and compliance teams
 Provide guidance and knowledge transfer to operational security teams postmigration

Required Qualifications
 5+ years of experience in information security or cloud security engineering
 Handson experience securing workloads in Microsoft Azure
 Strong knowledge of Azure security services (Azure Policy, Defender, RBAC, logging)
 Experience supporting data center to Azure migration projects
 Solid understanding of identity and access management principles
 Experience working in healthcare

Preferred Qualifications
 Experience supporting health plan or payer organizations
 Familiarity with Azure landing zones and Cloud Adoption Framework (CAF)
 Experience validating compliance against HIPAA or similar regulatory frameworks
 Knowledge of SIEM/SOC integration and security monitoring tools
 Azure security or architecture certifications

Soft Skills
 Strong analytical and riskbased decisionmaking skills
 Ability to balance security requirements with migration velocity
 Excellent communication and documentation skills
 Proven ability to collaborate across technical and governance teams