Cloud Security and Infrastructure Engineer

This position works closely with program managers, software and DevOps teams, government customers, partners, and prospective customers. The engineer must be able to translate technical and cybersecurity requirements into practical solutions, explain risks and recommendations clearly to technical and nontechnical audiences, and support proposal and business development activities involving cybersecurity and cloud requirements., Cybersecurity Engineering and Federal Compliance (45%)

• Implement, maintain, assess, and document cybersecurity controls across corporate and program environments.
• Support RMF activities throughout the system lifecycle, including control implementation, assessment, authorization, reauthorization, and continuous monitoring.
• Develop and maintain ATO documentation, including System Security Plans, control implementation statements, architecture and data-flow diagrams, configuration evidence, POA&Ms, and related security artifacts.
• Work with system owners, program managers, government customers, and assessors to prepare systems for authorization, address findings, and maintain ongoing compliance.
• Perform system hardening, vulnerability identification and remediation, secure configuration management, security monitoring, and incident response support.
• Implement and assess controls under NIST SP 800-53, NIST SP 800-171, DoD RMF, CMMC, and other applicable federal cybersecurity requirements.
• Support security assessments, audits, penetration testing, and secure handling of CUI, PII, and other sensitive information.
• Evaluate technologies, system changes, and integrations for cybersecurity and compliance impacts.

Microsoft Azure Cloud Infrastructure and Security (30%)

• Design, implement, administer, and secure Microsoft Azure infrastructure supporting corporate and federal program environments.
• Manage Azure virtual machines, virtual networks, storage, firewalls, VPN connectivity, identity services, backup, monitoring, and related cloud technologies.
• Configure and maintain Microsoft Entra ID, role-based access control, Conditional Access, MFA, least-privilege access, and related identity and security controls.
• Configure and support Azure security and monitoring technologies such as Microsoft Defender for Cloud, Azure Policy, Microsoft Sentinel, or comparable tools.
• Perform provisioning, configuration, patching, monitoring, troubleshooting, backup validation, and disaster recovery activities.
• Develop scripts, automation, and Infrastructure as Code using technologies such as PowerShell, Python, Terraform, Azure Bicep, or comparable tools.
• Maintain accurate architecture diagrams, system inventories, configuration records, and technical documentation.

Stakeholder, Customer, and Proposal Support (25%)

• Serve as a cybersecurity and cloud technical resource to internal program managers, engineering teams, leadership, government customers, and other stakeholders.
• Explain cybersecurity requirements, risks, findings, controls, and recommended solutions clearly to technical and nontechnical audiences.
• Participate in customer meetings and technical discussions and respond to questions regarding security practices, system architecture, federal compliance, and cloud security.
• Support proposal and business development efforts by reviewing cybersecurity requirements and contributing technical content to proposals, security questionnaires, requests for information, and related materials.
• Translate customer, business, and federal cybersecurity requirements into practical technical solutions.
• Communicate technical risks, constraints, recommendations, alternatives, and tradeoffs clearly and professionally.

Perform other related duties as organizational and program needs require.

• Bachelor’s degree in computer science, information technology, cybersecurity, engineering, or a related discipline. An equivalent combination of education, certifications, training, and experience may be considered.
• Seven or more years of progressively responsible experience in cybersecurity engineering, cloud security, cloud infrastructure, systems engineering, or a closely related field.
• Demonstrated hands-on cybersecurity engineering experience, including security control implementation, vulnerability management, system hardening, monitoring, or incident response.
• Demonstrated hands-on experience administering and securing production Microsoft Azure environments.
• Experience with Microsoft Azure infrastructure, networking, identity and access management, monitoring, backup, and cloud security technologies.
• Direct experience supporting federal RMF and ATO activities, including development or maintenance of security documentation, control implementation statements, assessment evidence, POA&Ms, or continuous monitoring artifacts.
• Experience implementing or assessing controls under NIST SP 800-53, NIST SP 800-171, RMF, CMMC, FedRAMP, FISMA, or comparable federal cybersecurity requirements.
• Demonstrated ability to communicate technical and cybersecurity information effectively to both technical and nontechnical stakeholders.
• Experience working directly with customers, program managers, or external stakeholders to discuss cybersecurity requirements, risks, findings, or technical solutions.
• Strong technical writing, troubleshooting, analytical, and organizational skills.

Additional Requirements

• United States citizenship and current CompTIA Security+ certification, or higher qualifying certification, at the time of hire.
• Ability to obtain and maintain a government security clearance and satisfy applicable DoD 8140 qualification requirements.
• Ability to support occasional maintenance, incident response, or system restoration activities outside normal business hours., * Experience supporting federal government contracts or working within a government contracting environment.
• Experience communicating directly with DoD or other federal customers regarding cybersecurity, technical requirements, or compliance.
• Experience with Microsoft Azure Government and systems operating under a DoD ATO.
• Experience supporting government proposals, security questionnaires, requests for information, or customer-facing technical discussions.
• Experience with Microsoft Defender for Cloud, Microsoft Sentinel, Azure Policy, SIEM, EDR, or cloud security posture management technologies.
• Experience with Terraform, Azure Bicep, Azure DevOps, GitHub Actions, or other infrastructure automation and DevSecOps technologies.
• Relevant certifications such as CISSP, Microsoft Certified: Azure Security Engineer Associate, Azure Administrator Associate, Azure Solutions Architect Expert, or comparable credentials., This position will require and is dependent on the successful completion of a criminal background check.

• 100% employee ownership through our ESOP
• Comprehensive medical, dental, and vision coverage
• Generous PTO policy with 11 paid holidays annually
• Paid family leave
• 401(k) retirement plan
• Monthly reimbursement for high-speed internet
• Fully remote work with flexible scheduling
• Sponsored professional development and training
• A fun and inclusive culture with regular virtual team events

At SOLID, we offer more than just a job; we offer ownership. As a 100% employee-owned company through our Employee Stock Ownership Plan (ESOP), every team member has a personal stake in our success and a voice in how we grow.