Azure Cloud Security & CMMC Compliance Engineer

Vantage Point Consulting Inc. is seeking an Azure Cloud Security & CMMC Compliance Engineer to remediate security gaps and support CMMC Level 2 and NIST SP 800-171 compliance. The role focuses on Azure security implementation, POA&M resolution, Zero Trust controls, and technical evidence and documentation for audit readiness.

Responsibilities:

• Lead technical remediation efforts to achieve CMMC Level 2 and NIST SP 800-171 compliance
• Review, track, and resolve POA&Ms, including remediation planning, validation, and technical evidence collection
• Implement and maintain Azure Zero Trust security architecture and identity security controls
• Configure and manage Microsoft Entra ID governance, access controls, and identity security policies
• Design and implement Azure network segmentation and secure connectivity using Private Link and Private Endpoints
• Administer and secure Azure Bastion for controlled administrative access
• Harden Azure Virtual Desktop (AVD) host pools and implement Data Loss Prevention (DLP) controls
• Harden Azure virtual machines in accordance with CIS Benchmarks and Department of Defense Security Technical Implementation Guides (DoD STIGs)
• Develop and enforce Azure Policy initiatives to support regulatory requirements and security compliance
• Configure, monitor, and optimize Microsoft Defender for Cloud and Microsoft Sentinel
• Implement storage and disk encryption using Azure Key Vault and associated encryption controls
• Conduct security assessments, identify configuration gaps, and implement corrective actions
• Develop and maintain technical documentation, security configurations, compliance artifacts, and audit evidence
• Communicate technical findings, remediation progress, risks, and recommendations clearly to technical and non-technical stakeholders

Requirements:

• strong hands-on experience in CMMC Level 2 compliance, NIST SP 800-171 remediation, and Microsoft Azure security implementation
• excellent technical troubleshooting, documentation, and communication skills
• the ability to collaborate effectively with security, infrastructure, and compliance teams
• Strong hands-on experience with CMMC Level 2 and NIST SP 800-171 compliance and remediation
• Demonstrated experience resolving POA&Ms and gathering technical evidence for compliance assessments
• Extensive practical knowledge of Microsoft Azure security services and cloud infrastructure hardening
• Experience implementing Zero Trust architecture, Microsoft Entra ID governance, and identity and access management controls
• Hands-on expertise in Azure networking, network segmentation, Private Link, Private Endpoints, and Azure Bastion
• Experience securing Azure Virtual Desktop environments, including host pool hardening and DLP implementation
• Knowledge of CIS Benchmarks, DoD STIGs, and secure virtual machine configurations
• Experience with Azure Policy, Microsoft Defender for Cloud, Microsoft Sentinel, and Azure Key Vault
• Strong understanding of encryption, security monitoring, vulnerability remediation, and regulatory compliance requirements
• Excellent written and verbal communication skills, with the ability to explain complex technical concepts and document remediation activities clearly
• Ability to work independently, prioritize remediation activities, and collaborate with cross-functional teams
• Microsoft Certified: Azure Security Engineer Associate (AZ-500)
• CyberAB Registered Practitioner (RP) or Registered Practitioner Advanced (RPA)
• Certified Information Systems Security Professional (CISSP)