IT Lead Engineer (Azure & Compliance) - Remote (WFH)
United States of America
Full Time
4 hours ago
No H1B
Key skills
AzureEntra ID
About this role
Cognitive Medical Systems, Inc. is an IT and software engineering services company dedicated to enhancing US government healthcare programs. The IT Lead Engineer (Azure & Compliance) is responsible for the integrity, security, and audit readiness of cloud infrastructure, ensuring compliance with federal and healthcare mandates.
Responsibilities:
- Azure/M365 Architecture: Architect and optimize Azure GCC High and Commercial environments, including Entra ID, Conditional Access, and RBAC
- Security Operations (SIEM/DLP): Oversee SIEM, managing Data Loss Prevention (DLP), retention policies, and insider risk
- Compliance & Audit: Lead the implementation of controls for CMMC Level 2, NIST SP 800-53, and FISMA. Serve as the primary technical lead for internal and external audits
- Vulnerability & Incident Response: Own vulnerability management and security monitoring, serving as the lead for incident response activities
- Data Governance: Manage Exchange Online, SharePoint, and Teams, ensuring secure configuration and eDiscovery readiness
- Business Continuity: Maintain robust backup, disaster recovery, and business continuity plans aligned with federal healthcare availability requirements
- Help Desk: Support the IT service desk, ensuring high-quality support and maintaining SLAs for hardware, software, and identity access issues
Requirements:
- Bachelor's degree in Cybersecurity, IT, or a related field
- 3–5 years in an individual contributor role managing infrastructure/security for federal government contractors
- Deep experience with Azure GCC High, Microsoft 365 security tools (Defender, Sentinel), and Intune MDM
- Proven ability to manage CMMC and NIST assessments and maintain 'audit-ready' status
- Experience working with VA, DHA, CMS, HHS, or similar federal healthcare agencies
- Familiarity with FedRAMP Moderate or High environments
- Certifications such as CISSP, CISM, Security+, Azure, or ITIL
- Experience in small business or SDVOSB environments with growth-oriented responsibilities