Cloud Security Engineer – Infrastructure

This is a fully remote position, open to applicants in United States.

📋 Description

• Implement, maintain, evaluate, and document cybersecurity controls across both corporate and program environments.

• Assist in RMF activities throughout the system lifecycle, encompassing control implementation, assessment, authorization, reauthorization, and continuous monitoring.

• Create and sustain ATO documentation, which includes System Security Plans, control implementation statements, architecture and data-flow diagrams, configuration evidence, POA&Ms, and related security artifacts.

• Collaborate with system owners, program managers, government clients, and assessors to prepare systems for authorization, address findings, and ensure ongoing compliance.

• Conduct system hardening, identify vulnerabilities and remediate them, manage secure configuration, provide security monitoring, and support incident response.

• Implement and evaluate controls in accordance with NIST SP 800-53, NIST SP 800-171, DoD RMF, CMMC, and other relevant federal cybersecurity mandates.

• Aid in security assessments, audits, penetration testing, and the secure handling of CUI, PII, and other sensitive data.

• Assess technologies, system changes, and integrations for their cybersecurity and compliance implications.

• Design, implement, manage, and secure Microsoft Azure infrastructure that supports corporate and federal program environments.

• Oversee Azure virtual machines, virtual networks, storage, firewalls, VPN connectivity, identity services, backup, monitoring, and related cloud technologies.

• Configure and maintain Microsoft Entra ID, role-based access control, Conditional Access, MFA, least-privilege access, and other identity and security controls.

• Set up and support Azure security and monitoring technologies, including Microsoft Defender for Cloud, Azure Policy, Microsoft Sentinel, or similar tools.

• Execute provisioning, configuration, patching, monitoring, troubleshooting, backup validation, and disaster recovery tasks.

• Develop scripts, automation, and Infrastructure as Code using PowerShell, Python, Terraform, Azure Bicep, or comparable tools.

• Keep accurate architecture diagrams, system inventories, configuration records, and technical documentation.

• Act as a cybersecurity and cloud technical resource for internal program managers, engineering teams, leadership, government clients, and other stakeholders.

• Clearly explain cybersecurity requirements, risks, findings, controls, and recommended solutions to both technical and non-technical audiences.

• Participate in customer meetings and technical discussions concerning security practices, system architecture, federal compliance, and cloud security.

• Contribute to proposal and business development efforts by reviewing cybersecurity requirements and providing technical content for proposals, security questionnaires, requests for information, and related documents.

• Convert customer, business, and federal cybersecurity requirements into practical technical solutions.

• Clearly and professionally communicate technical risks, constraints, recommendations, alternatives, and trade-offs.

• Perform additional related duties as needed based on organizational and program requirements.

⛳️ Requirements

• Bachelor's degree in computer science, information technology, cybersecurity, engineering, or a related field; an equivalent combination of education, certifications, training, and experience may be considered.

• At least seven years of progressively responsible experience in cybersecurity engineering, cloud security, cloud infrastructure, systems engineering, or a closely related area.

• Proven hands-on experience in cybersecurity engineering, including security control implementation, vulnerability management, system hardening, monitoring, or incident response.

• Demonstrated hands-on experience managing and securing production Microsoft Azure environments.

• Familiarity with Microsoft Azure infrastructure, networking, identity and access management, monitoring, backup, and cloud security technologies.

• Direct experience supporting federal RMF and ATO activities, including the development or maintenance of security documentation, control implementation statements, assessment evidence, POA&Ms, or continuous monitoring artifacts.

• Experience implementing or assessing controls according to NIST SP 800-53, NIST SP 800-171, RMF, CMMC, FedRAMP, FISMA, or similar federal cybersecurity standards.

• Strong ability to effectively communicate technical and cybersecurity information to both technical and non-technical stakeholders.

• Experience collaborating directly with customers, program managers, or external stakeholders to discuss cybersecurity requirements, risks, findings, or technical solutions.

• Excellent technical writing, troubleshooting, analytical, and organizational skills.

• United States citizenship and current CompTIA Security+ certification, or a higher qualifying certification, at the time of hire.

• Capability to obtain and maintain a government security clearance and meet applicable DoD 8140 qualification requirements.

• Willingness to support occasional maintenance, incident response, or system restoration activities outside of regular business hours.

• Preferred: Experience in supporting federal government contracts or working within a government contracting environment.

• Preferred: Experience directly communicating with DoD or other federal clients regarding cybersecurity, technical requirements, or compliance.

• Preferred: Experience with Microsoft Azure Government and systems operating under a DoD ATO.

• Preferred: Experience in supporting government proposals, security questionnaires, requests for information, or customer-facing technical discussions.

• Preferred: Familiarity with Microsoft Defender for Cloud, Microsoft Sentinel, Azure Policy, SIEM, EDR, or cloud security posture management technologies.

• Preferred: Experience with Terraform, Azure Bicep, Azure DevOps, GitHub Actions, or other infrastructure automation and DevSecOps tools.

• Preferred: Relevant certifications such as CISSP, Microsoft Certified: Azure Security Engineer Associate, Azure Administrator Associate, Azure Solutions Architect Expert, or comparable credentials.

• Successful completion of a criminal background check.

🏝️ Benefits

• 100% employee ownership through our ESOP.

• Comprehensive medical, dental, and vision coverage.

• Generous PTO policy with 11 paid holidays annually.

• Paid family leave.

• 401(k) retirement plan.

• Monthly reimbursement for high-speed internet.

• Fully remote work with flexible scheduling.

• Sponsored professional development and training.

• A fun and inclusive culture featuring regular virtual team events.