Junior Cloud Engineer, Treasury

The Azure Cloud Security Engineer is responsible for implementing and maintaining security controls across enterprise cloud environments while ensuring compliance with federal cybersecurity requirements. This position supports cloud security architecture, compliance automation, infrastructure security, vulnerability management, logging, monitoring, and policy development across Azure and hybrid cloud environments., * Implement and maintain security controls across Azure cloud and hybrid environments.

• Develop and maintain cloud security baselines to support federal cybersecurity requirements.
• Automate security compliance monitoring and reporting across cloud resources.
• Support enterprise compliance initiatives related to federal cybersecurity directives and agency requirements.
• Enforce security configurations and policies using Infrastructure as Code (IaC) methodologies.
• Develop and maintain Terraform configurations that support secure cloud deployments.
• Monitor cloud infrastructure for security events, system health, and operational performance.
• Support integration of cloud environments with enterprise Security Operations Center (SOC) monitoring capabilities.
• Develop automation scripts and API integrations to improve security reporting and operational efficiency.
• Support implementation of cloud-native security technologies across Azure environments.
• Collaborate with infrastructure, networking, DevSecOps, and cybersecurity teams to strengthen enterprise security.
• Assist in the development and maintenance of agency cybersecurity policies, standards, and security baselines.
• Maintain technical documentation using Atlassian Jira and Confluence.

The ideal candidate has experience securing Azure cloud services, automating security processes, and working within highly regulated federal IT environments., * Active Public Trust clearance is required.

• U.S. Citizenship is required.
• 2+ years of experience supporting cloud security, cybersecurity engineering, or enterprise infrastructure security within federal or enterprise environments.
• Experience supporting the creation and maintenance of cloud security baselines.
• Experience establishing automated compliance monitoring and security reporting processes.
• Experience supporting compliance initiatives related to CISA Binding Operational Directives (BODs) and other federal cybersecurity requirements.
• Experience enforcing cloud security policies using Infrastructure as Code (IaC) methodologies.
• Experience developing and maintaining Terraform configurations to implement secure cloud infrastructure.
• Experience supporting security scanning, monitoring system health, and logging across cloud resources.
• Experience integrating cloud environments with enterprise Security Operations Center (SOC) capabilities.
• Knowledge of Microsoft Azure Cloud Services, including:
• Azure DevOps
• Azure Virtual Desktop (AVD)
• Public Key Infrastructure (PKI)
• Microsoft Defender
• Microsoft Power Platform
• Experience implementing security controls across hybrid environments, including:
• On-premises infrastructure
• Commercial cloud environments
• Government cloud environments
• Experience developing and reviewing cloud security baselines and secure configuration standards.
• Ability to develop scripts that leverage APIs to automate security reporting and data collection.
• Experience supporting development and maintenance of enterprise cybersecurity policies and standards.
• Experience using Atlassian Jira and Confluence.
• Strong analytical, troubleshooting, written, and verbal communication skills.

Preferred Qualifications

• Microsoft Certified: Azure Security Engineer Associate (AZ-500) or equivalent Azure certification.
• Experience supporting the Department of the Treasury or other civilian federal agencies.
• Experience implementing Zero Trust Architecture within cloud environments.
• Experience supporting DevSecOps pipelines and secure CI/CD implementations.
• Experience with Microsoft Sentinel, Defender for Cloud, Microsoft Entra ID, or Azure Policy.
• Experience supporting FedRAMP-authorized cloud environments.
• Knowledge of NIST RMF, NIST SP 800-53 Rev. 5, and federal cloud security best practices.
• Experience with scripting languages such as PowerShell, Python, or Bash.

$80,000 - $90,000 a year - Full-time, Pulled from the full job description

• Professional development assistance
• 401(k)
• Health insurance
• Retirement plan
• 401(k) matching
• Paid time off
• Vision insurance, This role is budgeted at an annual salary of $80,000-$90,000, plus benefits including medical, dental, vision coverage, PTO, and partial 401(k) match

Vetting

Candidates selected will be subject to a background investigation for clearance eligibility by our government client.

ThunderYard Solutions is proud to be an Equal Opportunity Employer. We don’t just accept difference - we celebrate it, we support it, and we thrive on it for the benefit of our employees, our community, and our customers. All applicants will be considered for employment without discrimination of race, color, religion, or belief, national, social, or ethnic origin, sex, age, physical, mental, or sensory disability, HIV status, sexual orientation, gender identity and/or expression, marital, civil union, or domestic partnership status, protected veteran status, family medical history or genetic information.

Pay: $80,000.00 - $90,000.00 per year, * 401(k)

• 401(k) matching
• Dental insurance
• Flexible spending account
• Health insurance
• Health savings account
• Life insurance
• Paid time off
• Professional development assistance
• Retirement plan
• Vision insurance