Overview
In this role you will help modernize a large multi-cloud environment to support the USAF Cloud One architecture. You will act as a subject matter expert for Azure-based systems, helping with design, authorization, and ongoing security operations to ensure resiliency and cost effectiveness. You will collaborate with cross-functional teams to implement compliance controls, monitor for threats, and sustain ATO through RMF and STIG processes. This is a mission-focused opportunity to apply advanced cloud security practices at scale.
Responsibilities
- Design, deploy, and maintain ATO-compatible Azure SIPRNet environments within the C1 Architecture
- Serve as SME for system design, builds, and ATO efforts related to cybersecurity requirements and tooling
- Operate and configure compliance tools (ACAS/Nessus, Microsoft Defender, Microsoft Sentinel) and cloud-native services
- Monitor logging and event data with Azure Monitor, Log Analytics, Network Watcher, and related services
- Document mitigation steps, generate vulnerability reports, and manage POA&M
- Automate monitoring, reporting, and vulnerability scanning to support ongoing authorizations
- Ensure compliance with SCCA, Cloud Computing SRG, and STIG/SRG requirements; prepare RMF authorization documentation
- Verify patch compliance and perform remediation activities; execute enterprise vulnerability management plans
- Coordinate STIG checklists for systems, applications, and code; assist with ATO sustainment
- Prepare technical briefing materials for cybersecurity status and mentor junior staff
Key requirements
- 8+ years of relevant experience with a Bachelor’s degree or 6+ years with a Master’s degree
- 6+ years of experience supporting cloud-hosted systems and/or applications
- Active DoD Secret clearance; US citizenship
- DoD 8570/8140 IAT Level II baseline certification (e.g., Security+ CE, CySA+, or equivalent)
- Microsoft Certified: Azure Security Engineer Associate (AZ-500) or equivalent
- ACAS Certified – Operator and Supervisor
- Hands-on experience with KQL, Log Analytics, Defender for Cloud, and DISA STIGs
- Stakeholder collaboration
- Mentorship of junior staff
- Strong written and verbal briefing abilities
- Azure security engineering (AZ-500)
- Defender for Cloud
- Microsoft Sentinel
…
