Senior Azuer Cyber Engineer

In this role you will help modernize a large multi-cloud environment to support the USAF Cloud One architecture. You will act as a subject matter expert for Azure-based systems, helping with design, authorization, and ongoing security operations to ensure resiliency and cost effectiveness. You will collaborate with cross-functional teams to implement compliance controls, monitor for threats, and sustain ATO through RMF and STIG processes. This is a mission-focused opportunity to apply advanced cloud security practices at scale.

• Design, deploy, and maintain ATO-compatible Azure SIPRNet environments within the C1 Architecture
• Serve as SME for system design, builds, and ATO efforts related to cybersecurity requirements and tooling
• Operate and configure compliance tools (ACAS/Nessus, Microsoft Defender, Microsoft Sentinel) and cloud-native services
• Monitor logging and event data with Azure Monitor, Log Analytics, Network Watcher, and related services
• Document mitigation steps, generate vulnerability reports, and manage POA&M
• Automate monitoring, reporting, and vulnerability scanning to support ongoing authorizations
• Ensure compliance with SCCA, Cloud Computing SRG, and STIG/SRG requirements; prepare RMF authorization documentation
• Verify patch compliance and perform remediation activities; execute enterprise vulnerability management plans
• Coordinate STIG checklists for systems, applications, and code; assist with ATO sustainment
• Prepare technical briefing materials for cybersecurity status and mentor junior staff

• 8+ years of relevant experience with a Bachelor’s degree or 6+ years with a Master’s degree
• 6+ years of experience supporting cloud-hosted systems and/or applications
• Active DoD Secret clearance; US citizenship
• DoD 8570/8140 IAT Level II baseline certification (e.g., Security+ CE, CySA+, or equivalent)
• Microsoft Certified: Azure Security Engineer Associate (AZ-500) or equivalent
• ACAS Certified – Operator and Supervisor
• Hands-on experience with KQL, Log Analytics, Defender for Cloud, and DISA STIGs

• Stakeholder collaboration
• Mentorship of junior staff
• Strong written and verbal briefing abilities
• Azure security engineering (AZ-500)
• Defender for Cloud
• Microsoft Sentinel