Cloud Security Engineer (azure)

Mastech Digital Inc. (NYSE: MHH) is a minority-owned, publicly traded IT staffing and digital transformation services company. Headquartered in Pittsburgh, PA, and established in 1986, we serve clients nationwide through 11 U.S. offices.

Role: Cloud Security Engineer

Location: Westlake or Merrimack only.

The Role

As a cloud security engineer, you will work within a diverse team comprised of passionate technologists who believe in the power of innovation and constant collaboration. We believe that small, empowered, self-motivated teams can achieve outstanding things. We are passionate about open-source contribution, sharing our expertise and knowledge with the engineering community while adopting a continuous learning approach supported by a dedicated learning day each week.

The Azure Security and Service Enablement squad is seeking a highly technical, hands-on security engineer with experience on large-scale and/or business-critical Azure environments. On this squad, you will bring your cloud security skillset to a group of talented engineers that are continuously innovating and improving our capabilities to enable the acceleration of the journey to the cloud. You will work on a wide variety of cloud-native stacks and technologies, demonstrating groundbreaking architectures and services. This squad is the starting point for all security capabilities, guardrail definition and service enablement for our Azure environment.

• Designing, scaling, and deploying various cloud security controls and services
• Building processes and workflows along with a consolidated and collaborative integration of IaaS, SaaS, and PaaS cloud services
• Ensuring seamless user experience with advanced security and compliance of our cloud infrastructure
• Maintaining and containing business risk as it pertains to the Azure cloud infrastructure
• Working across teams and Business Units to define requirements and deliver solutions
• Building comprehensive security controls to enforce policy
• Supporting business unit technologists deploying to the public cloud

The Expertise and Skills You Bring

• 6-9 years of experience in IT infrastructure, security, compliance
• A strong understanding of Azure services and security capabilities
• Solid hands-on experience with at least two of the following:
• Engineering/operational support of cloud account configuration in AWS or Azure
• Software Development, Linux Systems Administration, Data Networking
• Hands-on configuration of CI/CD pipelines for cloud-native deployments
• Very strong with scripting languages, including integration with CSP APIs; python preferred
• Azure Networking
• Identity and Access Management - RBAC
• Azure Policies
• Azure Security Services – Security Center, Key Vault, Log Analytics
• Azure ARM/PowerShell
• Ability to work with application and security teams to promote a secure posture in the cloud
• You can mentor and train other team members to work effectively in the cloud
• You are a self-starter who can independently by reading technical documentation

Bonus skills

• Advanced Azure Certifications

The Team

This is an opportunity for a highly motivated cloud security engineer to join the client architecture and engineering business unit and work in a diverse, open and transparent culture where you will contribute to powering the next generation of the client’s digital services through innovative solutions using the latest cloud-native technologies and leading-edge engineering practices.

Top Skills:

• Azure Policy Exp
• Azure Security Services – Security Center, Key Vault, Log Analytics
• Identity and Access Management Exp
• Prior software engineering background; any language is fine, but someone coming from a sys admin/DevOps background won't be the right fit here.