Senior Cloud & Security Engineer

About this role

At Armanino, you determine your career path. This means it's possible to pursue challenges you are passionate about, in industries you care about.

Armanino is proud to be  Among the top 20 Largest Firms in the Nation  and one of the  Best Places to Work . We have a community of resources that are ready and willing to support your ideas, build your skills and expand your professional network. We want you to integrate all aspects of your life with your career. At Armanino, we know you don’t check-out of life when you check-in at work. That’s why we’ve created a unique work environment where your passions, work, and family & friends can overlap. We want to help you achieve growth by giving you access to a network of smart and supportive people, willing to listen to your ideas.

Job Responsibilities • Design and implement cloud architecture solutions across Azure, Microsoft 365, and hybrid environments

• Develop and mature cloud foundations, including landing zones, subscription design, governance, and onboarding standards

• Establish engineering standards for identity, networking, monitoring, resiliency, backup, and operational support

• Partner with architecture, infrastructure, networking, and security teams to deliver scalable cloud solutions

• Enable and integrate Microsoft security, compliance, identity, endpoint, and AI capabilities across the enterprise platform

• Improve cloud operations through enhanced monitoring, alerting, dashboards, telemetry, and service readiness practices

• Develop and maintain cloud governance standards, onboarding processes, and policy enforcement practices

• Implement secure, resilient cloud designs that align with compliance, audit, and risk management requirements

• Support security hardening, baseline remediation, and secure configuration initiatives across Azure and Microsoft 365 environments

• Translate Microsoft E5 and E7 capabilities into scalable engineering standards and operational processes

• Strengthen cloud cost governance through tagging, budget monitoring, reporting, and FinOps practices

• Identify and remediate inefficiencies, configuration drift, and unsupported cloud patterns

• Provide technical leadership, mentorship, and knowledge transfer to engineering teams

• Document standards, procedures, runbooks, and support models to improve operational maturity and consistency

• Contribute to cloud and security roadmap initiatives through hands-on engineering and cross-functional collaboration

Requirements • Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field, or equivalent practical experience

• Minimum of 7+ years of experience in cloud engineering, infrastructure engineering, platform engineering, systems engineering, or security engineering, to include but not limited to the following:

• Expert hands-on experience with Azure, Microsoft 365, and hybrid infrastructure environments

• Experience implementing cloud foundations, landing zones, governance frameworks, monitoring, and operational support models

• Experience with scripting and automation using PowerShell, Python, or similar technologies

Preferred Qualifications • Expertise with Microsoft security and compliance technologies, including Entra ID, Defender, Intune, Purview, and Security Copilot

• Experience enabling Microsoft 365 Copilot, Security Copilot, Entra Suite, or other AI governance capabilities

• Experience designing Azure landing zones and enterprise cloud governance frameworks

• Knowledge of cloud networking, hybrid connectivity, segmentation, and identity-aware access controls

• Experience with observability, logging, monitoring, backup, recovery, and production readiness practices

• FinOps experience, including cloud cost optimization, reporting, and budget governance

• Industry certifications such as Azure Solutions Architect Expert, Azure Administrator Associate, Azure Security Engineer Associate, CISSP, CCSP, or equivalent

• Experience mentoring engineers and driving cloud platform standardization across large environments

"Armanino" is the brand name under which Armanino LLP and Armanino Advisory LLC, independently owned entities, provide professional services in an alternative practice structure in accordance with law, regulations, and professional standards. Armanino LLP is a licensed independent CPA firm that provides attest services, and Armanino Advisory LLC and its subsidiary entities provide tax, advisory, and business consulting services. Armanino Advisory LLC and its subsidiary entities are not licensed CPA firms.

Armanino provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, Armanino complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.      Armanino expressly prohibits any form of workplace harassment based on race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, or veteran status. Improper interference with the ability of Armanino employees to perform their job duties may result in discipline up to and including discharge.  

Armanino does not accept unsolicited candidates, referrals, or resumes from any staffing agency, recruiting service, sourcing entity, or third-party paid service at any time. Any referrals, resumes, or candidates submitted to Armanino or any employee or owner of Armanino without a pre-existing agreement signed by both parties covering the submission will be considered the property of Armanino and not subject to any fees or char

Similar jobs

• Senior Cloud Security Engineer — Vanguard · Malvern, PA | Charlotte, NC | Dallas/Ft. Worth, TX
• Senior Cloud Security Engineer — Rescale · Remote
• Senior Cloud Security Engineer — Reltio · United States
• Senior Cloud Security Engineer — Scopely · US - Bellevue, United States
• Senior Cloud Security Engineer — Roblox · San Mateo, CA, United States
• Senior Cloud Security Engineer — Robinhood · Bellevue, WA; Menlo Park, CA; New York, NY
• Senior Cloud Security Engineer — Trueanomalyinc · Denver, CO or Long Beach, CA or SF Bay Area, CA
• Senior Cloud Security Engineer — Iterable · Remote