Sr. Azure Security Engineer (Remote)

About NFF

Since 1996, NFF has designed, architected, and delivered IT network and security solutions to many state, and local government agencies, K-20 educational institutions, federal agencies, and large enterprise businesses across the mid-Atlantic. NFF is a technology services and solutions provider, specializing in next-generation IT infrastructure including networks, data centers, cloud migrations, IT security, collaboration and mobility, and full/part-time staff augmentation services.   Our solutions, professional services and IT staffing portfolio are centered around building more resilient, secure, adaptive, and intelligent IT infrastructure and include comprehensive assessment, architecture, design, integration and installation services, and ongoing performance management services though our Network Operations Center (NOC). 

NFF is a Cisco Gold Partner with a Customer Experience Specialization and was a “Cisco Top-5 Mid-Atlantic SLED Partner” in 2019, 2020 and 2022. NFF has maintained Cisco Gold Partnership since 2008, is the only Cisco Gold Partner headquartered in the District of Columbia. In addition to Cisco, NFF has key partnerships with many manufacturers and IT solution providers including, Rapid7, Arctic Wolf, VMware, NetApp and Splunk.

NFF is a District of Columbia (DC) Certified Business Enterprise (CBE) and a SBA Certified Small Business with headquarters in downtown Washington, DC. Our dedication to quality is reflected in our accomplishment of being awarded multiple ISO 9001:2015 certifications.

About this Position / Responsibilities

• The Azure Senior Security Engineer will be working with our more established contractors and staff to focus on several web and Windows applications used both by internal staff and constituents of the organization.
• Will need expertise in all aspects of IT security and cloud security and experience working in an Agile/Scrum development environment interacting with technical and non-technical stakeholders.

5+ years in experience in the below-mentioned skill sets:

• IT security or cloud security roles required. - Required
• Hands-on experience securing Azure environments. - Required
• Experience with Azure Security Services (Azure Defender, MS Sentinel, Azure Key Vault, Azure Policy and Blueprints, Azure Security Center). - Required.
• Experience with Azure Active Directory (AAD), including conditional access, MFA, and identity protection - Required
• Extensive knowledge of PIM and RBAC - Required
• Experience with NSGs, ASGs, VPN, ExpressRoute, and hybrid connectivity security required- Required
• Ability to implement and monitor compliance with regulatory standards such as NIST, ISO 27001, GDPR, etc. - Required
• Extensive knowledge of threat modeling and vulnerability management, SIEM/SOAR tuning and response workflows, and security alert triage and forensics - Required
• Ability to perform scripting and automation using PowerShell, Bicep, ARM templates, or Terraform - Required
• Ability to perform integration with CI/CD pipelines for secure deployments (GitHub Actions, Azure DevOps) - Required
• Ability to create and deliver security architecture reports and documentation - Required
• Experience in risk assessment and mitigation strategies – Required
• Bachelor’s degree in Computer Science, Cybersecurity, or related field or equivalent work experience. - Required.
• Must have extensive knowledge of cybersecurity practices, industry security standards, and regulatory standards.
• Should have familiarity with mobile and responsive design practices.
• Expertise in all aspects of IT security and cloud security and experience working in an Agile/Scrum development environment interacting with technical and non-technical stakeholders.
• Minimum 5 years’ experience to work with an existing software development team.

Qualifications

• A bachelor’s degree and/or applicable recognized industry certifications are strongly desired.
• Relevant certifications (MS Certified Cybersecurity Architect Expert, Azure Security Engineer Associate (SC-300), CompTIA Security+, CISSP, CISM - Highly desired

** Strong preference will be given to candidates East Coast Time Zone.

NFF Disclosures

NFF offers a competitive salary, comprehensive benefits and flexible paid time off options, for eligible employees:

• Medical, Dental and Vision, Health Savings Account, Flexible Spending Account
• STD, LTD, Supplemental life insurance and ADD&D
• Comprehensive 401k plan
• Paid Time Off

NFF is an Equal Opportunity Employer.

Important Notice: All NFF Inc communications come from @nffinc.com. Emails from other domains claiming to be NFF are likely scams. Be cautious, verify senders, and report suspicious messages immediately.