Azure Cloud Security & CMMC Compliance Engineer

We are seeking a highly technical Azure Cloud Security & CMMC Compliance Engineer with strong hands-on experience in CMMC Level 2 compliance, NIST SP 800-171 remediation, and Microsoft Azure security implementation. The ideal candidate will be responsible for addressing security gaps, resolving Plans of Action and Milestones (POA&Ms), implementing Zero Trust architecture, and collecting technical evidence to support regulatory compliance and audit readiness., * Lead technical remediation efforts to achieve CMMC Level 2 and NIST SP 800-171 compliance.

• Review, track, and resolve POA&Ms, including remediation planning, validation, and technical evidence collection.
• Implement and maintain Azure Zero Trust security architecture and identity security controls.
• Configure and manage Microsoft Entra ID governance, access controls, and identity security policies.
• Design and implement Azure network segmentation and secure connectivity using Private Link and Private Endpoints.
• Administer and secure Azure Bastion for controlled administrative access.
• Harden Azure Virtual Desktop (AVD) host pools and implement Data Loss Prevention (DLP) controls.
• Harden Azure virtual machines in accordance with CIS Benchmarks and Department of Defense Security Technical Implementation Guides (DoD STIGs).
• Develop and enforce Azure Policy initiatives to support regulatory requirements and security compliance.
• Configure, monitor, and optimize Microsoft Defender for Cloud and Microsoft Sentinel.
• Implement storage and disk encryption using Azure Key Vault and associated encryption controls.
• Conduct security assessments, identify configuration gaps, and implement corrective actions.
• Develop and maintain technical documentation, security configurations, compliance artifacts, and audit evidence.
• Communicate technical findings, remediation progress, risks, and recommendations clearly to technical and non-technical stakeholders.

The candidate must possess excellent technical troubleshooting, documentation, and communication skills, with the ability to collaborate effectively with security, infrastructure, and compliance teams., * Strong hands-on experience with CMMC Level 2 and NIST SP 800-171 compliance and remediation.

• Demonstrated experience resolving POA&Ms and gathering technical evidence for compliance assessments.
• Extensive practical knowledge of Microsoft Azure security services and cloud infrastructure hardening.
• Experience implementing Zero Trust architecture, Microsoft Entra ID governance, and identity and access management controls.
• Hands-on expertise in Azure networking, network segmentation, Private Link, Private Endpoints, and Azure Bastion.
• Experience securing Azure Virtual Desktop environments, including host pool hardening and DLP implementation.
• Knowledge of CIS Benchmarks, DoD STIGs, and secure virtual machine configurations.
• Experience with Azure Policy, Microsoft Defender for Cloud, Microsoft Sentinel, and Azure Key Vault.
• Strong understanding of encryption, security monitoring, vulnerability remediation, and regulatory compliance requirements.
• Excellent written and verbal communication skills, with the ability to explain complex technical concepts and document remediation activities clearly.
• Ability to work independently, prioritize remediation activities, and collaborate with cross-functional teams.

Preferred Certifications

• Microsoft Certified: Azure Security Engineer Associate (AZ-500).
• CyberAB Registered Practitioner (RP) or Registered Practitioner Advanced (RPA).
• Certified Information Systems Security Professional (CISSP).