Sr. Azure Security Engineer

Location: Washington D.C. - Hybrid Remote

Eligibility: Candidate must possess an active Secret clearance

Job Description:

Sr. Azure Security Engineer Duties and Responsibilities:

- Design, implement, and maintain secure cloud architectures within

Azure Government Secret classified environments

- Enforce zero trust principles, role-based access control (RBAC), and

identity federation (e.g.,Azure AD B2B/B2C with CAC/PIV)

- Configure and manage security controls such as Microsoft Defender

for Cloud, Key Vault, Azure Policy, NSGs, and Private Endpoints

- Automate compliance and security operations using PowerShell,

Terraform, or ARM templates

- Integrate SIEM/SOAR tools (e.g., Microsoft Sentinel for IL6) for

continuous monitoring, logging, and incident response

- Conduct vulnerability assessments and implement remediations aligned

to NIST 800-53, DoD STIGs, and JSIG

- Collaborate with mission owners, compliance teams, and developers to

ensure secure DevSecOps pipelines

- Support Authority to Operate (ATO) processes by generating security

documentation, control evidence, and supporting audits

- Navigate federal systems through the authorization process to

achieve and maintain Authority to Operate (ATO)

- Work with the ISSO, Program and DOC ITD IA teams to maintain the

necessary security authorizations

- Develop comprehensive System Security Plans (SSPs) documenting all

implemented NIST 800-53 controls

- Coordinate security assessments with third-party assessors

- Manage Plans of Actions & Milestones (POA&Ms) for addressing

identified vulnerabilities

- Ensure continuous monitoring plans meet agency requirements

- Prepare authorization packages for government review

- Maintain ongoing compliance through change management processes

- Serve as the liaison between technical teams and authorizing

officials

- Translate security requirements into actionable tasks

- Ensure all documentation meets the rigorous standards required for

federal information systems

Information Security Analyst Requirements and Qualifications:

- Bachelor's degree in information systems security; master's degree

or equivalent professional experience in information security is

preferred

- Active Secret clearance

- 5+ years in cloud security, including 2+ in Azure Government or DoD

environments

- Strong knowledge of Azure-native security tools, IL6 data handling,

and cloud networking

- Proficient in scripting (PowerShell, Python, or Bash) and

Infrastructure as Code (ARM, Bicep, Terraform)

- Experiences with DoD SRG, FedRAMP High, JSIG, and ICD 503 compliance

frameworks

- Hands-on experience with classified enclaves, hardened images, and

enclave-to-enclave connectivity

- Comprehensive knowledge of corporate Systems/Solutions Architecture

processes and trends

- Strong leadership, organizational, and communication skills

- Secret Clearance to start

- Knowledge of Agile software development process

Required Technical Skills:

- SCAP, STIG, Patching, eMASS, and related RMF tools

- Cybersecurity, Systems Administration, implementation of RMF tools

and processes

- Experience with gaining an ATO for systems and working the systems

through the assessment and authorization process

- Experience working with IP networking, networking protocols and

understanding of security related technologies including encryption,

IPsec, PKI, VPNs, firewalls, proxy services, DNS, electronic email

and access-list

- Excellent communication skills

- Experience working in Agile software development teams

- Experience with secure development, coding and engineering practices

- Experience with Cybersecurity, Information Security, and Information

Technology Security processes, protocols, and procedures.

Experience

- 10 years of relevant experience

- * may vary based on technical training, certification(s), or

degree

- Experience with Cloud Security

- Experience working with leading firewall, network scanning and

authentication technologies

- Experience working with internet, web, application and network

security techniques

- Experience in Agile methodology

- Experience in Jira to support development team in agile environment

- Experience working in Federal or State government environments

- Ability to work independently and remotely

Certification: Active DoD 8570 IAT Level II Certification (Security+,

CISSP, CISM)

Travel Required: Little to no travel anticipated (may be required upon

customer request)

Location: On-site 3 days a week at minimum.