Manager Cloud Security

The Manager in Cloud Security role leads a team of consultants, ensuring each person is healthy, high-performing, and aligned to service line priorities. This is also a hands-on technical lead for cloud security solutions. You design and deliver secure, scalable, and maintainable systems on Azure that solve real business problems. You own end-to-end architecture for your projects, stay close to implementation where it matters, and work with teams to meet goals for value, security, performance, reliability, and cost. In the Cloud Security team, your work centers on identity and Zero Trust, threat protection, cloud security posture, data protection, and secure AI adoption across Microsoft Azure and Microsoft 365.

At this level, you lead solution design in your primary domain, guide engineers day to day, and mentor other architects and technical leads. You turn business needs into clear technical plans, help teams make good tradeoffs, and keep delivery predictable and high quality.

Responsibilities

People Leadership Expectations

• Maintain a clear view of each team member's delivery commitments, growth plans, and internal contributions.

• Develop and grow team members through regular coaching, clear expectations, and constructive feedback. Build a culture of trust, inclusion, and collaboration.

• Monitor team health, morale, and workload balance, acting early to address engagement or performance concerns in partnership with practice leadership.

• Maintain regular one-to-one connections with each team member, provide clear feedback, and help them remove blockers related to client work, pursuits, or internal initiatives.

• Oversee staffing and resource alignment across teams, balancing utilization, development goals, client needs, and sustainable workloads.

• Communicate practice priorities and organizational objectives clearly, ensuring teams understand how their work contributes to broader organizational goals.

• Define interview standards and mentorship strategies, training others to apply them consistently and improving hiring outcomes and talent growth at scale.

• Create and maintain development plans for team members, including stretch assignments, shadowing, certifications, and opportunities for external visibility.

• Lead or support performance reviews, promotion recommendations, and compensation input for your teams, using consistent standards that reflect both impact and behavior.

• Represent your teams in leadership forums, communicate expectations and decisions clearly back to the group, and bring forward patterns, risks, and successes that should shape practice strategy.

Solution Architecture and Technical Leadership

• Own end-to-end architecture and scope for your projects, leading teams to design and deliver Azure solutions that meet agreed goals for value, security, scalability, reliability, performance, and cost.

• Lead the design and delivery of Microsoft security solutions, including Microsoft Entra ID (Conditional Access, PIM, identity governance), Microsoft Defender XDR and Defender for Cloud, Microsoft Sentinel, Microsoft Purview, and Azure Policy guardrails, aligned to client compliance requirements such as HIPAA/HITRUST, NIST, FedRAMP, PCI DSS, CJIS, ISO 27001, and SOC 2.

• Serve as the technical lead and subject matter expert on your engagements, guiding consultants and engineers so implementation stays aligned with the architecture and standards.

• Apply sound engineering practices—clear interfaces, modular design, and testability—to produce reliable, maintainable solutions in your primary domain.

• Provide architectural guidance throughout implementation, including design and pull-request reviews, shaping cloud patterns and guardrails and offering practical options to unblock teams.

• Use AI tools to accelerate code, tests, documentation, and similar tasks, and share effective practices so they become repeatable gains for teams and clients.

Delivery and Consulting Excellence

• Lead discovery and requirements sessions for your workstreams, clarifying scope, dependencies, and risks, and shaping a prioritized backlog with clear acceptance criteria tied to business outcomes.

• Serve as a billable security architect on one or more client engagements, meeting the billable utilization expectations set for the role in the annual performance plan.

• Explain complex technical topics in simple, direct language for both technical and non-technical audiences, and consistently connect technical decisions back to client goals.

• Build trust with managers and product owners, influencing priorities and roadmaps in ways that support the client’s long-term interests.

• Enable teams to deliver with stable velocity and low defect rates by providing clear architecture, interfaces, and automation across build, test, and deployment, and by designing for incremental delivery with a clear Definition of Done.

• Align multiple teams on shared outcomes, contracts, and integration points, ensuring dependencies are identified early, owned, and tracked through delivery.

• Support effective Agile practices by ensuring the architecture and backlog structure enable incremental delivery, a clear Definition of Done, and data-informed course corrections based on telemetry and feedback.

Mentorship and Team Development

• Mentor others through pairing, design reviews, and clear feedback that strengthens design skills, technical judgment, and confidence, with a particular focus on senior engineers and technical leads.

• Provide architectural oversight across teams or workstreams, modeling pragmatic decision-making and teaching others when to keep designs simple and when to introduce new patterns or technologies.

• Support hiring and growth by participating in technical interviews, calibration discussions, and cross-project mentorship.

Growth and Innovation

• Contribute to business development by identifying opportunities across all our capabilities (beyond own specialty) and communicating them to the sales director.

• Support sales pursuits for security engagements through scoping, estimates, and solution positioning, contributing to the sales support goals set for the role in the annual performance plan.

• Partner with sales and account leaders on pursuits by defining the cloud vision, contributing architectural viewpoints, and participating in client workshops, demos, and roadmap discussions.

• Produce solution options, high-level designs, and estimates in your domains, clearly documenting assumptions, dependencies, and risks and explaining how proposed approaches drive business value and reduce risk.

• Create and maintain reusable assets—such as runbooks, workshops, starter repositories, and templates—that make it easier for engineers to deliver consistent solutions.

• Champion modern frameworks, patterns, tools, and AI-assisted practices that improve quality, speed, or reliability in a secure and responsible way.

• Actively participate in enablement efforts that support a culture of collaboration, continuous improvement, and knowledge sharing.

Requirements

• 6+ years of experience delivering solutions in a primary domain such as application development, cloud platform engineering, DevOps, or data and analytics.

• 3+ years of experience in solution architecture and leading development or engineering teams.

• Proven experience leading hybrid and remote teams and maintaining alignment, quality, and predictable delivery across time zones.

• Expertise in at least one major public cloud platform, with Azure strongly preferred.

• Deep understanding of core concepts, languages, frameworks, and design patterns in your primary domain, with the ability to apply them to build robust, maintainable systems.

• Experience using AI-augmented development and integrating AI or machine learning capabilities into solutions through APIs, libraries, or cloud-based AI services.

• Hands-on depth in Microsoft security technologies, including Microsoft Entra ID, Microsoft Defender XDR and Defender for Cloud, Microsoft Sentinel, Microsoft Purview, and Azure Policy and governance controls.

• Experience working with third-party identity, SIEM, and firewall tools (such as Okta and its integration with Entra ID, OneLogin, Splunk, Palo Alto, and Fortinet).

• Experience designing security automation and DevSecOps practices, including policy as code, Infrastructure as Code (Bicep, Terraform), and CI/CD guardrails.

• Experience delivering security solutions in regulated environments and applying frameworks such as HIPAA/HITRUST, NIST, FedRAMP, PCI DSS, CJIS, ISO 27001, or SOC 2.

• Microsoft security certifications (such as SC-100, SC-300, SC-200, SC-500, or SC-401; the retired AZ-500 is also accepted) are preferred; industry certifications such as CISSP, CCSP, or CISM are a plus.

• Experience working in Agile or Scrum environments, including backlog refinement and iteration planning.

• Experience in consulting or professional services is a plus.

• Familiarity with key cloud services for your domain, such as messaging, compute, data, security, networking, and integration.

• Strong analytical and problem-solving skills, with clear written and verbal communication.

• Demonstrated interest in continuous learning and adoption of new cloud technologies.

• Ability to be hands-on with implementation while also designing and communicating complex cloud architectures.