VDOT is seeking an experienced Senior Cloud Security Engineer (Sr CSE) to implement and support the agencys cloud and computing infrastructure. The Senior Cloud Security Engineer will serve as a subject matter expert supporting VDOTs enterprise Azure migration, responsible for architecting, implementing, and securing cloud environments in alignment with SEC530 principles, Zero Trust, and enterprise compliance frameworks. The Senior Cloud Security Engineer will be responsible for assisting in the design, implementation, securing, monitoring, and the continuous improvement of VDOTs cloud infrastructure and services across the enterprise. The position provides senior-level technical leadership for cloud security architecture, identity and access management, network security, security monitoring, vulnerability management, incident response, and cloud governance. The Senior Cloud Security Engineer works closely with Cloud Engineering, Network Engineering, Security Operations, Enterprise Architecture, Infrastructure, Application Development, DevOps, Risk Management, and IT leadership to ensure cloud environments are secure, resilient, compliant, and aligned with enterprise security standards. Key Responsibilities: Identify cloud security vulnerabilities, assess risk based on business impact, prioritize remediation, track remediation activities, and validate corrective actions Lead complex cloud security initiatives and provide technical directions to engineers. Also assist in the design of secure cloud architecture for complex enterprise environments Influence architecture and security decisions and prevent insecure configurations from reaching production and implement security gates within deployment pipelines. Explain complex security risks to non-technical stakeholders Assess cloud security risks and security gaps and recommend appropriate remediations. Create and maintain security documentation and evidence as well as support audits and assessments. Review proposed cloud solutions for security risk and define appropriate security and compensation controls. Will develop Azure policies to enforce standardization and compliance with enterprise requirements, as well as creating Azure Automation runbooks to support incident response workflows. Monitor security events using SIEM technologies and work with VDOTs SOC team to coordinate incident response activities. Identifies and diagnoses system problems and threats by using system logs, line monitors, SIEM, diagnostic software, and test equipment. Lead investigation and containment of cloud security incidents. Review firewall and NSG rule requests and ensure compliance with security standards. Must have the ability to provide documentation, architecture topology diagrams, IP schemes and access controls when required. Must have the ability to work independently on assigned projects.
Azure security architecture, WAF, Azure Firewall, Azure Networking, microsoft sentinel
Azure security architecture,WAF,Azure Firewall,Azure Networking
Enterprise Cloud Experience Required 8 Years Enterprise Cloud Security Experience Required 5 Years Candidate must be highly experienced as a cloud security professional with strong hands-on expertise in cloud infrastructure and cloud engineering Required Candidatte must be highly experienced in cybersecurity, networking, identity, security operations, and have a deep cloud engineering competency Required Candidate must have in-depth experience moving between strategic architecture and hands-on engineering and identifying security risks Required Candidate must have in-depth experience designing practical solutions, implementing controls, and working with infrastructure teams Required Candidate musth have in-depth experience working with application teams to continuously improve the organization's cloud security posture Required Candidate must have experience setting up Network Security Groups (NSGs), resource manager and management groups, monitor and log analytics, Required Candidate must have experience setting up Azure Firewall, Azure WAF, Azure Monitor, Application Gateways, virtual networks and network segmentation. Required Candidate must have experiences in: Incident response, Security investigations, Log analysis, Threat intelligence, Security monitoring, IOC analysis Required Candidate must have experiences coordinating during cyber incidents Required Candidate must have experience in vulnerability management, remediation tracking, vulnerability scanning tools (e.g. Nessus, Tenable, Defender) Required Candidate must have experience securing enterprise cloud environments and implementing security controls in production environments Required Candidate must have experience with the SIEM products (e.g. Splunk, Microsoft Sentinel, CNAPP), Required Candidate must have experience with log management, security analytics, SOC integration, Threat detection, and Threat hunting Required Candidate must also have hands on expertise validating ind
Intermediate Level
This is a Contract position based out of Richmond, VA.
The pay range for this position is $60.00 - $90.00/hr.
Individual compensation offered for this position within this range will depend on many factors, including qualifications, skills, relevant experience, job knowledge, geographic location, internal equity, and other pertinent job-related factors.
Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms. If eligible, the benefits available for this temporary role may include the following: Medical, dental & vision Critical Illness, Accident, and Hospital 401(k) Retirement Plan Pre-tax and Roth post-tax contributions available Life Insurance (Voluntary Life & AD&D for the employee and dependents) Short and long-term disability Health Spending Account (HSA) Transportation benefits Employee Assistance Program Time Off/Leave (PTO, Vacation or Sick Leave)
This is a Contract position based out of Richmond, VA.
This position is anticipated to close on Nov 1, 2026.
This is a hybrid position in Richmond,VA.
We're partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a team of 80,000 strong, working with over 6,000 clients, including 80% of the Fortune 500, across North America, Europe and Asia. As an industry leader in Full-Stack Technology Services, Talent Services, and real-world application, we work with progressive leaders to drive change. That's the power of true partnership. TEKsystems is an Allegis Group company.
The company is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.
Were a leading provider of business and technology services. We accelerate business transformation for our customers. Our expertise in strategy, design, execution and operations unlocks business value through a range of solutions. Were a team of 80,000 strong, working with over 6,000 customers, including 80% of the Fortune 500 across North America, Europe and Asia, who partner with us for our scale, full-stack capabilities and speed. Were strategic thinkers, hands-on collaborators, helping customers capitalize on change and master the momentum of technology. Were building tomorrow by delivering business outcomes and making positive impacts in our global communities. TEKsystems and TEKsystems Global Services are Allegis Group companies. Learn more at TEKsystems.com.
The company is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.
San Francisco Fair Chance Ordinance: Pursuant to the San Francisco Fair Chance Ordinance, for all positions located in the city and county of San Francisco, we will consider for employment qualified applicants with arrest and conviction records.
Massachusetts Lie Detector: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
Use of Artificial Intelligence (AI): We may use Artificial Intelligence (AI) to support parts of our hiring process, including sourcing, screening, and evaluating candidates. AI helps assess applications and qualifications, but final decisions are made by our hiring team. By applying, you acknowledge and agree that your application may be reviewed using AI tools.
We’re TEKsystems and TEKsystems Global Services. We accelerate business transformation for our customers, so they can capitalize on change and master the momentum of technology. Our expertise in strategy, design, execution and operations unlocks business value through a range of solutions. We’re building tomorrow by delivering business outcomes and making positive impacts in our global communities.
TEKsystems and TEKsystems Global Services are Allegis Group companies.
