Principal Cybersecurity Engineer
Providence2 months ago
Hyderābād, IndiaStaff+
Responsibilities
- Design, implement, and own Azure Landing Zone security architecture, including Azure Policies, policy initiatives, guardrails, RBAC, management groups, and subscription architecture.
- Lead implementation and day-to-day management of CrowdStrike, Proofpoint, Rapid7, Checkmarx, Wiz, Defender for Cloud, Defender for Identity, and Microsoft Sentinel.
- Implement Azure Policy for resource tagging, region restrictions, SKU allowlists, encryption, data residency, and compliance guardrails.
- Deploy and manage Azure network security architectures including hub-spoke and vWAN designs, Private Endpoints, Azure Firewall, WAF, and DDoS controls.
- Establish policy-as-code and security-baselines-as-code using GitOps practices.
- Maintain the enterprise risk register, report security KPIs, and partner with risk, compliance, and audit teams.
- Run purple-team control validation, lead incident response runbooks, and drive post-incident improvements.
- Analyze and audit platform and application codebases for vulnerabilities and compliance gaps.
- Serve as a security authority on the Architecture Review Board and shape approved application and cloud design patterns.
- Define security operating procedures, monitor threats and alerts, and train L1/L2 teams on triage and escalation.
- Drive delivery of security initiatives with high-quality and timely execution.
Requirements
- 10+ years of cybersecurity experience, including 5+ years focused on Azure cloud security architecture.
- Expert-level experience with Microsoft Entra ID, Conditional Access, PIM, RBAC, and identity governance.
- Hands-on experience with CrowdStrike, Proofpoint, Rapid7, Checkmarx, Wiz, Defender for Cloud, Microsoft Sentinel, Azure Firewall, and WAF.
- Experience delivering Azure Landing Zones aligned with the Microsoft Cloud Adoption Framework and Well-Architected principles.
- Strong knowledge of SAML, OAuth2/OIDC, SCIM provisioning, identity federation, and B2B integrations.
- Automation experience with PowerShell, Python, Terraform, Bicep, Git, YAML, and CI/CD workflows.
- Experience implementing CNAPP, EDR, email security, vulnerability management, code security, SAST/DAST, IaC scanning, and API security platforms.
- Experience with Azure network security, VNet architecture, private endpoints, DDoS, WAF, and Azure Firewall.
- Hands-on experience implementing Defender for Cloud, Sentinel SIEM/SOAR, and cloud threat-detection pipelines.
- Experience designing Azure Policy, policy-as-code, and compliance automation for SOC2, ISO, and HIPAA.
- Deep understanding of Key Vault, CMK encryption, data protection, and secure data pipelines.
- Mature incident response, observability, logging, alert tuning, and incident response automation experience.
- Familiarity with AI/LLM security patterns, including Azure OpenAI and RAG architectures.
- Experience building secure Azure Landing Zones and enterprise cloud architecture.
About Providence
Providence is a nonprofit Catholic health system that operates hospitals, clinics, and related care services for patients and communities across the western U.S. It runs 51 hospitals and 829 clinics and also offers a health plan in select markets. Headquartered in Renton, Washington, Providence provides acute, ambulatory, virtual, and home-based care along with pharmacy and behavioral health services, supported by centralized technology, cybersecurity, and shared services teams.