Cloud Infrastructure & Security Engineer

SOLID, Inc. is seeking a Cloud Infrastructure & Security Engineer to support its corporate operations and federal programs. This hands-on individual contributor will design, administer, secure, automate, and continuously improve Microsoft Azure infrastructure while supporting DoD RMF, ATO activities, cybersecurity compliance, cloud operations, and stakeholder collaboration.

Responsibilities:

• Design, implement, administer, and optimize secure, scalable, resilient, and supportable Microsoft Azure infrastructure across corporate and program-specific environments
• Manage Azure computing resources, virtual machines, virtual networks, storage, cloud identity services, firewalls, VPN connectivity, load balancing, backup services, and monitoring solutions
• Configure and maintain Azure subscriptions, resource groups, networking, identity integration, access controls, and platform services
• Administer and integrate Microsoft Entra ID, Microsoft 365, endpoint management, and other enterprise services with Azure infrastructure, including identity management, authentication, access control, and secure connectivity
• Implement and maintain Infrastructure as Code (IaC) solutions using technologies such as Terraform, Azure Bicep, or ARM templates to support consistent and repeatable infrastructure deployments
• Perform cloud resource provisioning, configuration management, patching, upgrading, monitoring, troubleshooting, backup validation, and capacity planning
• Develop scripts, automation, and repeatable processes using PowerShell, Python, or comparable technologies to improve infrastructure deployment, configuration, monitoring, evidence collection, and administration
• Implement and maintain cloud backup, disaster recovery, business continuity, and Continuity of Operations capabilities, including documentation, periodic testing, and corrective actions
• Configure and maintain Azure monitoring, logging, and alerting solutions to proactively identify performance, availability, security, and operational issues
• Evaluate Azure resource utilization, performance, security, reliability, and costs; recommend improvements to resource sizing, architecture, availability, and operational efficiency
• Maintain cloud architecture documentation, system inventories, network and data-flow diagrams, configuration records, operating procedures, and infrastructure deployment documentation
• Design, implement, maintain, assess, and document cybersecurity controls across Microsoft Azure infrastructure and hosted environments in accordance with organizational and applicable federal cybersecurity requirements
• Lead and support technical RMF activities throughout the system lifecycle, including security control implementation, assessment, authorization, and continuous monitoring
• Develop, maintain, and coordinate ATO packages and supporting cybersecurity documentation, including System Security Plans (SSPs), control implementation statements, Azure architecture and data-flow diagrams, configuration evidence, Plans of Action and Milestones (POA&Ms), and related security artifacts
• Work with cybersecurity personnel, system owners, government stakeholders, and assessors to prepare systems for authorization, address assessment findings, support ATO submissions, and maintain documentation throughout the authorization lifecycle
• Implement and document security controls under NIST SP 800-53, NIST SP 800-171, DoD RMF, and other applicable federal cybersecurity frameworks
• Implement and maintain Azure security configurations, identity and access controls, multifactor authentication, role-based access control (RBAC), least-privilege access, secure network segmentation, encryption, and secure configuration baselines
• Configure and maintain cloud security capabilities using Microsoft Entra ID, Microsoft Defender for Cloud, Azure Policy, and comparable security technologies
• Perform system hardening and manage vulnerability identification, prioritization, remediation, validation, and reporting across Azure infrastructure and hosted environments
• Review security scans, alerts, logs, and configuration findings; investigate potential security issues, coordinate corrective actions, and support incident response and remediation
• Maintain audit-ready technical documentation and continuous monitoring evidence, including security control validation, configuration records, vulnerability remediation records, and POA&M updates
• Coordinate security assessments, penetration testing, tabletop exercises, internal audits, and customer or third-party reviews
• Support the secure storage, processing, and transmission of Controlled Unclassified Information (CUI), Personally Identifiable Information (PII), and other sensitive data
• Evaluate proposed Azure services, infrastructure changes, and integrations for security, compliance, operational, and architectural impacts
• Collaborate with software engineering, DevOps, and cybersecurity teams to design and maintain Azure environments supporting application development, testing, deployment, and production operations
• Support the integration of infrastructure provisioning, configuration management, security validation, and monitoring into CI/CD pipelines and automated deployment workflows
• Gather and analyze operational, business, cybersecurity, and technical requirements and translate them into practical Azure infrastructure and security solutions
• Coordinate with cybersecurity personnel and program stakeholders to ensure infrastructure designs, deployments, and system changes align with applicable RMF and ATO requirements
• Evaluate Azure technologies, platform services, and architectural approaches to improve system reliability, scalability, security, maintainability, and cost effectiveness
• Coordinate with internal departments, government customers, vendors, and external service providers regarding cloud infrastructure requirements, system changes, technical issues, and compliance activities
• Communicate technical risks, operational constraints, architectural recommendations, and alternative solutions clearly to technical and nontechnical stakeholders
• Perform other related duties as organizational and program needs require

Requirements:

• Strong knowledge of Microsoft Azure infrastructure, cloud computing, systems administration, cloud networking, identity and access management, vulnerability management, and cybersecurity fundamentals
• Working knowledge of Azure compute, networking, storage, identity services, logging and monitoring, backup, virtualization, firewalls, VPN technologies, and endpoint security
• Strong understanding of federal cybersecurity requirements, particularly DoD RMF, NIST security controls, and the ATO lifecycle
• Ability to develop, maintain, and organize accurate, complete, and audit-ready ATO documentation and technical security evidence
• Experience with PowerShell, Python, or comparable scripting and automation technologies; familiarity with Infrastructure as Code, configuration management, and DevSecOps practices
• Ability to diagnose complex infrastructure and cybersecurity problems, identify root causes, implement sustainable solutions, and independently manage competing priorities
• Excellent organizational, analytical, communication, technical writing, and documentation skills
• Ability to communicate technical and cybersecurity requirements effectively to engineering teams, government stakeholders, and nontechnical personnel
• Bachelor's degree in computer science, information technology, cybersecurity, engineering, or a related discipline. An equivalent combination of education, certifications, training, and experience may be considered
• Seven or more years of progressively responsible experience in cloud infrastructure, systems engineering, cloud administration, cybersecurity engineering, or a closely related field, including substantial hands-on experience deploying and administering Microsoft Azure environments
• Demonstrated experience designing, implementing, administering, and securing production infrastructure within Microsoft Azure
• Strong working knowledge of Azure infrastructure services, including virtual machines, virtual networking, storage, identity and access management, network security, monitoring, backup, and disaster recovery
• Hands-on experience with Microsoft Entra ID, including identity management, authentication, access controls, and integration with Azure infrastructure
• Experience implementing and maintaining infrastructure through automated deployment or Infrastructure as Code technologies, such as Terraform, Azure Bicep, or ARM templates
• Experience developing scripts or automated workflows using PowerShell, Python, or comparable technologies
• Experience implementing or assessing technical security controls under NIST SP 800-53, NIST SP 800-171, RMF, CMMC, FedRAMP, FISMA, or comparable federal cybersecurity requirements
• Demonstrated experience directly supporting RMF and ATO activities, including developing or maintaining security documentation, technical control implementation statements, assessment evidence, POA&Ms, and other authorization-related artifacts
• Strong troubleshooting, technical documentation, communication, and stakeholder engagement skills
• United States citizenship and current CompTIA Security+ (or higher) certification at the time of hire
• Ability to obtain and maintain a government security clearance and satisfy applicable DoD 8140 qualification requirements
• Ability to support occasional maintenance, incident response, or system restoration activities outside normal business hours
• Experience supporting Microsoft Azure Government or other cloud environments subject to federal cybersecurity requirements
• Experience supporting systems operating under a DoD ATO, including initial authorization, reauthorization, and continuous monitoring activities
• Experience designing or migrating enterprise infrastructure and applications to Microsoft Azure
• Experience with Terraform, Azure Bicep, ARM templates, Ansible, or comparable infrastructure automation technologies
• Experience with Azure DevOps, GitHub Actions, or comparable CI/CD and infrastructure deployment technologies
• Experience with containerization, container orchestration, and cloud-native application hosting technologies, including Azure Kubernetes Service (AKS)
• Experience with Microsoft Defender for Cloud, Microsoft Sentinel, Azure Policy, cloud security posture management, SIEM, EDR, or automated compliance monitoring tools
• Experience with hybrid cloud architectures and secure connectivity between Azure and on-premises infrastructure
• Experience supporting CMMC assessments or implementing NIST SP 800-171 requirements
• Experience with AWS or AWS GovCloud infrastructure and security, particularly in environments utilizing multiple cloud platforms
• Relevant certifications such as Microsoft Azure Administrator Associate, Azure Solutions Architect Expert, Azure Security Engineer Associate, CISSP, or comparable cloud and cybersecurity certifications