Federal Cloud Security Engineer

InEight is a construction project controls software company that supports complex capital projects through integrated solutions and regulated cloud environments. The Federal Cloud Security Engineer will secure FedRAMP-authorized and IRAP-assessed Microsoft Azure environments by managing vulnerabilities, monitoring security events, supporting compliance activities, and maintaining security controls. The role collaborates with engineering, DevOps, auditors, and security stakeholders to improve the organization's security posture.

Responsibilities:

• Manage vulnerability scanning, remediation efforts, and security findings using Tenable and other security tools
• Support ongoing FedRAMP and IRAP Continuous Monitoring (ConMon) activities to maintain regulatory compliance
• Monitor, investigate, and respond to security events using Microsoft Sentinel, Microsoft Defender, and related technologies
• Support security assessments, audits, and annual compliance reviews by collecting evidence and maintaining required documentation
• Implement and maintain security controls, secure configurations, and cloud security best practices within Microsoft Azure and Azure Government environments
• Participate in incident response, risk assessments, change management reviews, and corrective action planning
• Collaborate with engineering, DevOps, auditors, and compliance stakeholders to address findings and improve security posture
• Support the day-to-day operation, maintenance, and continuous improvement of regulated cloud environments
• Participate in required after-hours support activities, including incident response, maintenance windows, compliance audits, and collaboration with globally distributed teams (20% per month)

Requirements:

• • 5+ years of experience in Information Technology, Cyber Security, Cloud Security, Infrastructure Engineering, or a related technical field
• • Experience administering and securing Microsoft Azure environments
• • Experience with vulnerability management platforms such as Tenable
• • Experience with security monitoring and incident response tools, including Microsoft Sentinel, Microsoft Defender, or similar technologies
• • Knowledge of security frameworks and compliance standards such as NIST 800-53, FedRAMP, IRAP, ISO 27001, or similar
• • Experience supporting audits, assessments, or regulatory compliance activities
• • Understanding of vulnerability remediation, risk management, and security best practices
• • Strong written and verbal communication skills with the ability to work effectively across technical and non-technical teams
• • 3+ years of hands-on experience supporting FedRAMP-authorized, IRAP-assessed, or other government-regulated environments preferred
• • Bachelor's degree in Computer Science, Information Technology, Cyber Security, or a related field, or equivalent experience preferred
• • Relevant certifications such as Security+, AZ-500, CISSP, or CCSP are a plus
• • Experience supporting FedRAMP, government cloud, or other regulated environments is preferred