Cloud Security Engineer V

Hanger, Inc. is the world's premier provider of orthotic and prosthetic services and products, offering advanced solutions and exceptional customer service. The Cloud Security Engineer V will be responsible for designing, implementing, and supporting Hanger's cloud security architecture while collaborating with various teams to ensure secure migration and compliance in cloud environments.

Responsibilities:

• Design, develop, and implement cloud security architecture solutions in Microsoft Azure aligned with business objectives, technical requirements, and industry frameworks (e.g., NIST CSF, CIS Benchmarks)
• Build and maintain security automation using Infrastructure as Code (IaC) tools such as Terraform, Bicep, or ARM templates to ensure consistent, repeatable, and auditable deployments
• Architect and implement cloud-native security controls including network segmentation, micro-segmentation, encryption at rest and in transit, and secrets management
• Partner with IT Infrastructure and Enterprise Architecture teams on the migration strategy for moving on-premise data centers to Microsoft Azure, ensuring environments are secure, compliant, and resilient from day one
• Evaluate and remediate security risks across hybrid and cloud-native architectures throughout the migration lifecycle
• Implement and manage Cloud Security Posture Management (CSPM) and Cloud-Native Application Protection Platform (CNAPP) tooling to maintain continuous visibility and compliance
• Collaborate with development and platform engineering teams to embed security into CI/CD pipelines, including static/dynamic code analysis (SAST/DAST), container image scanning, dependency vulnerability scanning, and automated policy enforcement
• Write production-quality code and automation scripts (Python, PowerShell, Bash, or Go) to build security tooling, automate remediation workflows, and integrate security controls across cloud services
• Champion secure software development practices across engineering teams, including threat modeling, secure code review, and security architecture assessments
• Support the adoption of policy-as-code and detection-as-code practices to enforce security standards programmatically
• Lead the design, development, and implementation of a cloud-based IAM strategy, including Zero Trust principles, least-privilege enforcement, conditional access, and identity governance
• Manage and optimize identity platforms (e.g., Microsoft Entra ID), role-based access control (RBAC), privileged access management (PAM), and authentication protocols (OAuth 2.0, SAML, OIDC)
• Implement and tune cloud-native monitoring, logging, and alerting using tools such as Microsoft Sentinel or equivalent SIEM/SOAR platforms
• Develop and enforce cloud security policies, standards, and procedures, and maintain audit readiness for applicable compliance frameworks
• Stay current with emerging technologies, threat vectors, and industry trends — including AI-driven threat detection, container and serverless security, and evolving regulatory requirements
• Act as a subject matter expert, providing technical guidance and mentorship to other engineers and cross-functional team members

Requirements:

• 8+ years of progressive experience in IT, cybersecurity, or cloud engineering, with at least 10 years of hands-on experience in Microsoft Azure security architecture and operations
• Demonstrated experience in software development or platform engineering, with working proficiency in at least two of the following: Python, PowerShell, Go, Bash, or TypeScript
• Proven track record of designing and implementing IaC-driven cloud environments using tools such as Terraform, Bicep, or ARM templates
• Hands-on experience integrating security tooling into CI/CD pipelines (e.g., GitHub Actions, Azure DevOps, GitLab CI) and working within DevSecOps workflows
• Proven success leading or significantly contributing to data center-to-cloud migration initiatives
• Success with AI/ML workload security or securing generative AI deployments
• Bachelor's degree in Computer Science, Software Engineering, Information Technology, Cybersecurity, or a related field (or equivalent professional experience)
• At least one active cloud security certification is required: CCSP, CISSP, Microsoft Certified: Cybersecurity Architect Expert (SC-100), AZ-500 (Azure Security Engineer Associate), or equivalent
• Must have, or be eligible to obtain, a valid driver's license and driving record within the standards outlined within Hanger's Motor Vehicle Safety Policy and Procedures
• Additional certifications in cloud engineering, DevSecOps, or AI security are a strong plus (e.g., AZ-305, Terraform Associate, Certified Kubernetes Security Specialist)