Cloud Engineering Specialist

As a Cloud Engineering Specialist at Hexagon US Federal, your key responsibilities will include designing and managing security controls for Azure-based infrastructure, monitoring security incidents with Azure Sentinel, conducting vulnerability assessments, and ensuring compliance with security standards such as FedRAMP High and NIST 800-53. You'll need to implement Role-Based Access Control (RBAC) and work closely with customers to gather requirements.

To be successful as a Cloud Engineering Specialist at Hexagon US Federal, candidates should possess a Bachelor’s degree with 5+ years of applicable experience, or 7+ years without a degree. Additionally, relevant certifications such as Azure Security Engineer Associate (AZ-500) or CompTIA CySA+, along with experience in deploying Microsoft Defender for Cloud and managing Azure environments, are essential.

Hexagon US Federal is deeply committed to the professional development of its employees. As a Cloud Engineering Specialist, you will have access to a robust Learning Management System, a Tuition Reimbursement Program, and a Leadership Development Program that offers various learning options. These resources will help you grow your skills and advance your career in a supportive environment.

At Hexagon US Federal, Cloud Engineering Specialists can expect a collaborative and flexible work environment. The company provides hybrid and remote working arrangements when possible, promoting a healthy work-life balance. Additionally, employees are encouraged to contribute to Employee Resources Groups focused on Diversity, Equity, & Inclusion, making it a welcoming space for everyone.

Candidates applying for the Cloud Engineering Specialist position at Hexagon US Federal must possess a Secret security clearance or have the ability to obtain one. This requirement is crucial due to the nature of the work and the sensitivity of the information managed within the organization.

When answering this question, highlight your familiarity with tools like Azure Sentinel, Microsoft Defender for Cloud, and Azure Security Center. Discuss specific projects or tasks where you've successfully utilized these tools to enhance security in Azure environments, emphasizing your approach to monitoring and mitigating threats.

In responding to this question, detail your understanding of the requirements associated with FedRAMP High and mention your experience in implementing controls that meet these compliance standards. You might also discuss previous audits or assessments you’ve participated in, showcasing your attention to detail and ability to follow regulations.

When preparing your response, consider including your incident response strategies, such as how you would investigate, contain, and remediate a breach. Mention any experience you have in using Azure tools, like Log Analytics, to analyze incidents and determine their root cause.

To effectively answer this question, provide a concise explanation of RBAC and its importance in securing Azure environments. Share an example from your experience where you defined roles and permissions to restrict access in accordance with security policies, emphasizing the positive results of your implementation.

In your answer, narrate a specific project involving multiple stakeholders, detailing your role, challenges faced, and the solutions you implemented. Highlight the skills and technologies you used, and conclude by discussing the successful results achieved from the project.

To respond effectively, mention specific resources you utilize, such as security blogs, webinars, and online forums. Discuss any certifications you pursue or professional networks you engage with to continually learn and stay informed about the latest trends in cloud security and Azure.

Highlight your familiarity with scripting using PowerShell or Azure CLI, mentioning any scripts you’ve written to automate tasks or improve security processes in Azure. If applicable, give examples of how your scripting skills have optimized workflows or responded to incidents more efficiently.

In your response, outline your structured approach to threat modeling and how you use various techniques to identify vulnerabilities in Azure applications or infrastructure. Share any specific methods, such as STRIDE or PASTA, that you follow and discuss how you incorporate findings into your security strategies.

When discussing this question, focus on your problem-solving skills and your ability to work independently. Outline the challenge you faced, the steps you took to investigate and mitigate the issue, and the lessons learned that helped improve your future work.

When answering, emphasize the importance of a layered security approach, integrating tools, policies, and staff training. Discuss how regularly updating security protocols and conducting assessments contribute to overall security, ensuring that you highlight your strategic thinking in this area.