Cloud Security Engineer I - Azure

New York, NY, United States

Title: Cloud Security Engineer I - Azure

Location: Midtown

Org Unit: IT Security

Work Days: Monday-Friday

Exemption Status: Exempt

Salary Range: $101,600.00 - $113,500.00

*As required under NYC Human Rights Law Int 1208-2018 - Salary range for this role when Hired for NYC Offices

Position Summary

This position provides the opportunity to participate in multiple areas of IT cloud infrastructure by using risk analysis techniques, industry knowledge, security best practices, and other tools to develop and implement security solutions for Weill Cornell Medicine. This role requires a passion for collaborating with fellow engineers and architects to build and deploy security solutions within a dynamic, cloud-centric organization. This position encompasses all technical aspects of security and requires active involvement in project-oriented tasks.

Job Responsibilities

Assist architects and engineers in identifying, implementing, and maintaining Azure-related security and identity solutions, ensuring their optimal performance and effectiveness.

Identify opportunities for improvements and lead efforts through automation and orchestration of repeatable security tasks within Azure.

Champion security best practices while fostering a positive, collaborative work environment conducive to the overall mission of the medical college and hospital.

Participate in event monitoring and incident response activities, including the creation and execution of Azure-related playbooks.

Contribute to developing and maintaining metrics and reports to provide senior management with insights into the effectiveness of Azure security infrastructure, controls, projects, and processes.

Stay abreast of evolving cyber threats, continuously updating skillsets as required to maintain proficiency in Azure security.

Perform other related duties as assigned.

Education

Bachelor's Degree in related field

Experience

Minimum Requirements:

Three years of hands-on experience implementing and managing security controls according to best practices.

Experience with Azure security controls, particularly Microsoft Entra, Azure Policy, Azure Key Vault, Azure Monitor, and Azure Firewall.

Experience configuring and analyzing logs from Azure infrastructure, focusing on seamless integration into event monitoring systems to enrich incident response capabilities.

Experience in one or more common scripting and/or programming languages (e.g., Python, PowerShell, Bash, Java, etc.).

Understanding of common networking and service protocols (e.g., TCP/IP, HTTPS, SSH).

Highly Desired Requirements:

Passion for building cloud environments while maintaining a pragmatic and balanced approach to security and privacy.

Experience with infrastructure as code principles and tools such as Terraform.

Experience with multiple cloud approaches (SaaS, PaaS, IaaS) and the ability to provide recommendations on their use and security.

Experience working with Information Technology processes in healthcare or academic institutions and knowledge of related regulatory requirements (e.g., HIPAA, FERPA, PCI, etc.).

Relevant information security or Azure certifications, such as Microsoft Azure Security Engineer Associate or others from CompTIA, (ISC)², or SANS/GIAC.

Comfortable working with technologies across all layers of the OSI model.

Knowledge, Skills and Abilities

Ability to think creatively when designing systems and solutions.

Excellent written and verbal communication skills across technical and non-technical subjects.

Proficient in creating and presenting documentation, diagrams, and reports tailored to technical and non-technical audiences.

Capable of delivering results under tight deadlines.

Demonstrated ability to solve problems and make critical decisions independently with minimal supervision in a demanding, high-pressure environment.

A strong team player committed to mentoring and assisting individuals with diverse backgrounds and skill levels.

Familiarity with common documentation storage and management systems, such as SharePoint, Box, or ServiceNow.

Licenses and Certifications

Relevant certifications in Azure or information security are highly desirable.

Working Conditions/Physical Demands

Works off-hours as needed.

Weill Cornell Medicine is a comprehensive academic medical center that is committed to excellence in patient care, scientific discovery, and the education of future physicians and scientists in New York City and around the world. Our doctors and scientists - faculty from Weill Cornell Medical College, Weill Cornell Graduate School of Medical Sciences, and the Weill Cornell Physician Organization - are engaged in world-class clinical care and cutting-edge research that connect patients to the latest treatment innovations and prevention strategies. Located in the heart of the Upper East Side's scientific corridor, Weill Cornell Medicine's powerful network of collaborators extends to its parent university Cornell University; to Qatar, where an international campus offers a U.S. medical degree; and to programs in Tanzania, Haiti, Brazil, Austria and Turkey. Our medical practices serve communities throughout New York City, and our faculty provide comprehensive care at NewYork-Presbyterian Hospital/Weill Cornell Medical Center, NewYork-Presbyterian/Lower Manhattan Hospital, NewYork-Presbyterian Hospital/Brooklyn Methodist Hospital, NewYork-Presbyterian Hospital/Westchester Behavioral Health Center, and NewYork-Presbyterian/Queens. At Weill Cornell Medicine, we work together to treat each individual, not just their conditions or illnesses, as we strive to deliver the finest possible care for our patients - the center of everything we do. Weill Cornell Medicine is an Equal Employment Opportunity Employer. Weill Cornell Medicine provides equal employment opportunities to all qualified applicants without regard to protected status, including race, sex, sexual orientation, gender identity, national origin, color, age, religion, protected veteran or disability status, or genetic information.