{"id":4046340,"url":"https://alion.io/job/lightfeather-azure-cloud-security-engineer","title":"Azure Cloud Security Engineer","company":{"id":679005,"name":"LightFeather","domain":"lightfeather.io","url":"https://alion.io/company/lightfeather","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Washington, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":120000,"max":130000,"currency":"USD","period":"year","gross":null,"usd_annual":130000},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"Databricks","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Zero Trust","optional":false},{"name":"PowerShell","optional":true},{"name":"Python","optional":true},{"name":"Terraform","optional":true}],"status":"live","first_seen_at":"2026-11-10T21:53:48Z","employer_posted_date":"2026-11-10","last_verified_at":"2026-11-11T00:06:30Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"LightFeather is seeking an Azure Cloud Security Engineer to help secure an enterprise Azure platform for a federal customer. You'll join a cloud security team that protects a shared Azure environment and guides the application teams who build on it. You'll recommend secure architectures, review configurations, and enforce tenant-wide security controls. The right person has strong security fundamentals, communicates clearly with customers, and enjoys learning new services quickly.\nLocation: Hybrid-on-site 4 days per week in the Washington, DC metro area.\nJob Type: Full-time\nSalary: $120,000-$130,000 annually, based on experience level. \nClearance Requirement: U.S. citizenship is required for this position due to federal contract requirements and the need to obtain and maintain a Secret-level security clearance\nKey Responsibilities\nAdvise customer teams on secure architecture, service usage, access design, and workload deployment best practices.\nReview customer service configurations and proposed changes, and give clear recommendations and reference guidance.\nExplain landing zone templates and where shared responsibility falls once customers take over their environments.\nSecure the workloads and services the team deploys.\nDesign and maintain tenant-wide governance controls, including Conditional Access, Azure Policy, and Microsoft Defender for Cloud regulatory compliance.\nEvaluate and apply new Microsoft security features and Zero Trust capabilities as the platform grows.\nExtend Zero Trust principles to emerging services such as Azure Databricks and AI workloads. That includes least privilege, mutual authentication, default-deny access, and tenant isolation.\nSupport security operations with guidance on logging architecture, including audit, diagnostic, and traceable logs, and on reporting requirements.\nAutomate security and management tasks with scripting.\nRequired Qualifications\nActive Secret clearance and the ability to obtain Top Secret.\n3+ years of hands-on experience securing Microsoft Azure environments.\nStrong Azure infrastructure security fundamentals.\nHands-on experience with Conditional Access, Azure Policy, and Defender for Cloud.\nSolid grasp of Zero Trust concepts: least privilege, shared responsibility, mutual authentication (mTLS), and the differences between tenancy, access, and continuous authentication.\nExcellent written and verbal communication, including direct, frequent work with customers over Microsoft Teams and other collaboration tools.\nAdaptability and a drive to pick up new technologies and responsibilities.\nPreferred Qualifications\nMicrosoft certifications: AZ-500 (strongly preferred), AZ-104, SC-300, SC-900, or SC-200\nAzure CLI and Microsoft Graph PowerShell.\nTerraform and Python.\nWorking knowledge of NIST SP 800-53.\nExperience securing Azure Databricks or other data platforms.\nExposure to AI model governance and security.\nFamiliarity with SOC operations and logging requirements.\nWhy Join LightFeather?\nAt LightFeather, you're not just taking a job-you're joining a purpose-driven team that delivers innovative, mission-critical solutions to make a real difference. You'll work on diverse, meaningful projects that challenge and inspire you, alongside some of the best minds in the industry.\nLightFeather is an Equal Opportunity Employer. We consider all qualified applicants for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, disability, veteran status, genetic information, or any other status protected by applicable federal, state, or local law.","description_format":"text","description_chars":3608,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","IT Consulting & Digital Transformation","Enterprise Apps Implementation Partners"],"lifecycle":[{"event":"open","at":"2026-11-11T00:06:30Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":4,"reasons":["conf:3","win:early"],"computed_at":"2026-11-11T03:29:47Z"},"pay":{"stated_usd_annual":130000,"is_top_pay":true},"html_url":"https://alion.io/job/lightfeather-azure-cloud-security-engineer","json_url":"https://alion.io/job/lightfeather-azure-cloud-security-engineer.json","meta":{"generated_at":"2026-11-11T03:29:47Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2865,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":679005},"rest":"https://alion.io/mcp/rest/get_company?id=679005"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Flightfeather-azure-cloud-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Flightfeather-azure-cloud-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Flightfeather-azure-cloud-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/lightfeather-azure-cloud-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Flightfeather-azure-cloud-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4046340}},{"tool":"search_jobs","arguments":{"company":"lightfeather.io","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4046340},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}