Senior Security Engineer, Azure Security

Role Overview

• Design and implement identity and access management (IAM) models, including RBAC and privileged access controls
• Configure and advise on security tools such as Microsoft Defender for Cloud
• Define and enforce security policies and governance guardrails using Azure Policy
• Set up and guide centralized logging, monitoring, and threat detection capabilities
• Design key management and secrets handling solutions (e.g., Azure Key Vault)
• Support compliance efforts, including HIPAA alignment and ATO preparation activities
• Collaborate with teams to identify security risks and define remediation approaches
• Contribute to secure cloud architecture decisions, including networking and access patterns
• Support Infrastructure-as-Code (IaC) and CI/CD practices to ensure secure deployments
• Create security documentation, runbooks, and provide guidance to enable client teams to operate securely

Requirements

• Experience with Azure cloud security, including Microsoft Entra ID and Defender for Cloud
• Strong knowledge of Identity and Access Management (IAM), including RBAC and privileged access controls
• Familiarity with security and compliance frameworks (e.g., HIPAA, state security standards, ATO processes)
• Experience implementing cloud security monitoring, logging, and incident detection
• Knowledge of Azure Policy and governance guardrails for enforcing security standards
• Experience with key management and secrets handling (e.g., Azure Key Vault)
• Understanding of secure network architecture and connectivity (including hybrid/on-prem integrations)
• Experience supporting Infrastructure-as-Code (IaC) and secure CI/CD pipeline practices
• Ability to define and document security architecture, standards, and operational runbooks
• Strong collaboration skills to work with engineers, architects, and stakeholders on security design and remediation

Tech Stack

• Azure
• Cloud
• Vault

Benefits

• Health coverage — comprehensive medical, dental, and vision plans to support your overall health needs
• Insurance coverage — Nava provides disability, life, and accidental death insurance at no cost
• Time off — vacation, holidays (including Juneteenth), and floating holidays to rest and recharge
• Company holidays — enjoy 12 paid federal holidays each year on top of your regular PTO
• Annual bonus — when Nava meets its goals, eligible employees receive a performance-based annual bonus
• Parental leave — paid time off for new parents, plus weekly meals delivered to your home
• Wellness program — full platform offering physical, mental, & emotional health resources & support tools
• Virtual care — see doctors online with no copay through UnitedHealthcare’s virtual visit program
• Sabbatical leave — earn extended unpaid leave after continuous service for personal growth or rest
• 401(k) match — Nava matches 4% of your salary to support your retirement savings plan
• Flexible work — remote-first environment with flexibility built around your schedule and responsibilities
• Home office setup — company laptop & setup assistance provided via Staples for remote work needs
• Utility support — monthly reimbursement to help offset eligible home office utility expenses
• Learning opportunities — internal training programs and resources to help grow your professional skills
• Development opportunities — LinkedIn Learning access & an annual allowance for courses, tuition, & certs
• Referral bonus — get rewarded when you refer great people who join the Nava team
• Commuter benefits — pre-tax commuter programs to support in-office travel when applicable
• Supportive culture — A collaborative and remote-friendly team environment where people genuinely care