Azure Cloud Engineer (remote)

Bull Bear Defense Solutions is seeking an experienced Azure Cloud Engineer with hands-on expertise in Microsoft Azure (including Azure Government), cloud networking, ports/protocols/services configuration, and secure enterprise integrations. This role will build and maintain the network and connectivity components that support Risk Management Framework (RMF) activities, ATO certification, and application modernization within a FedRAMP-authorized cloud environment.

This position is a hands-on engineering role responsible for implementing, configuring, and troubleshooting network infrastructure in Azure Government, working from architecture and security guidance to deliver a functioning, compliant environment.

This position will work day to day with the architecture, security engineering, AI/ML, and DevSecOps teams to build out and validate privacy and security control implementations throughout the EPS lifecycle.

Key Responsibilities

Azure Network Engineering & Implementation

Build and configure Azure network infrastructure, including VNETs, subnets, peering, firewalls, private endpoints, NSGs/ASGs, and routing tables, based on approved architecture and security guidance. Implement ports, protocols, and services (PPS) requirements for applications, integrations, and system components, and keep the supporting documentation current as configurations change. Stand up and maintain DNS, load balancing, VPN, and ExpressRoute connections. Configure network segmentation and access controls that support Zero Trust principles and least privilege in day-to-day operations.

RMF, Security Controls, and ATO Support

Act as the hands-on network engineer supporting RMF Step 1 through 6 activities, implementing and configuring controls that meet NIST SP 800-53, FISMA, and FedRAMP Moderate requirements. Generate and maintain configuration evidence for SC, AC, IA, AU, IR, and CP control families, and support the cybersecurity team in preparing SSP, SAP, SAR, and POA&M inputs. Work with cybersecurity, data governance, and PM teams to keep network operations secure and audit-ready throughout the system development lifecycle.

Azure Cloud Security & Integration

Build and maintain secure integrations between application tiers, databases, logging services, CI/CD pipelines, third-party services, and on-prem environments. Monitor and enforce traffic flow so all connectivity stays within FedRAMP-authorized boundaries with no egress to non-approved networks. Implement secure configurations, encryption settings, and identity controls alongside the security engineering team.

Application Development & Deployment Support

Provide direct network engineering support to application teams deploying services into Azure Government, including connectivity, bandwidth, firewall rules, and endpoint configuration. Participate in Agile ceremonies (Scrum/SAFe) and work with PM/Scrum leadership to keep network tasks on pace with sprint objectives. Troubleshoot connectivity, latency, DNS, load balancing, and service integration issues as they come up.

Documentation & Technical Support

Maintain accurate architectural documentation, including as-is/to-be network states, configuration baselines, and change records. Support technical evaluations and recommendations on:

• Network modernization approaches
• Secure cloud migration patterns
• FedRAMP-aligned configurations
• Performance optimization
• Cost management

Work collaboratively across engineering, cybersecurity, governance, and operations teams to implement and support solutions end to end.

• 5+ years of experience in network engineering, with at least 2 years working hands-on in Azure or Azure Government
• Strong working knowledge of:
• VNET configuration, firewalls, routing, private endpoints
• Ports, protocols, and service dependency mapping
• Zero Trust network segmentation
• DNS, load balancing, VPN/ExpressRoute
• Network telemetry and logging
• Experience supporting RMF, ATO, NIST SP 800-53 Rev. 5, FedRAMP Moderate, and cloud security controls in an operational capacity
• Ability to build and maintain technical documentation and diagrams
• Experience with incident response support, audit logging, and compliance evidence generation, * Azure certifications: AZ-104, AZ-700, AZ-500, or equivalent
• CISSP, CCSP, CGRC (CAP), or similar federal cybersecurity certifications
• Experience supporting federal or enterprise modernization programs
• Familiarity with DevSecOps pipelines, CI/CD, and microservices networking

Based out of the Wright-Patterson Air Force Base (WPAFB) community in Dayton, Ohio, Bull Bear Defense Solutions is a dedicated force in IT, cloud, and GRC modernization. Our commitment is clear: to deliver agile, efficient solutions tailored for legacy IT and cloud systems, catering to federal, defense, and commercial sectors. The cornerstone of our success lies in our team of industry-certified consultants, whose vast expertise in IT and cybersecurity ensures that we not only meet but surpass our clients’ expectations. At Bull Bear, we stand ready to address the unique challenges of each client, guiding them toward robust, future-ready solutions that elevate their security posture in an ever-evolving digital landscape.