Cloud Security and Infrastructure Engineer

Summary / Objective:

The Cloud Security & Infrastructure Engineer is a hands-on cybersecurity and cloud engineering professional responsible for securing, administering, and continuously improving SOLID's corporate and program-specific technology environments. The role places primary emphasis on cybersecurity engineering, federal security compliance, and Risk Management Framework (RMF) / Authority to Operate (ATO) activities, supported by strong hands-on Microsoft Azure experience.

This position works closely with program managers, software and DevOps teams, government customers, partners, and prospective customers. The engineer must be able to translate technical and cybersecurity requirements into practical solutions, explain risks and recommendations clearly to technical and nontechnical audiences, and support proposal and business development activities involving cybersecurity and cloud requirements.

Essential Job Functions / Responsibilities / Duties

Cybersecurity Engineering and Federal Compliance (45%)

• Implement, maintain, assess, and document cybersecurity controls across corporate and program environments.
• Support RMF activities throughout the system lifecycle, including control implementation, assessment, authorization, reauthorization, and continuous monitoring.
• Develop and maintain ATO documentation, including System Security Plans, control implementation statements, architecture and data-flow diagrams, configuration evidence, POA&Ms, and related security artifacts.
• Work with system owners, program managers, government customers, and assessors to prepare systems for authorization, address findings, and maintain ongoing compliance.
• Perform system hardening, vulnerability identification and remediation, secure configuration management, security monitoring, and incident response support.
• Implement and assess controls under NIST SP 800-53, NIST SP 800-171, DoD RMF, CMMC, and other applicable federal cybersecurity requirements.
• Support security assessments, audits, penetration testing, and secure handling of CUI, PII, and other sensitive information.
• Evaluate technologies, system changes, and integrations for cybersecurity and compliance impacts.

Microsoft Azure Cloud Infrastructure and Security (30%)

• Design, implement, administer, and secure Microsoft Azure infrastructure supporting corporate and federal program environments.
• Manage Azure virtual machines, virtual networks, storage, firewalls, VPN connectivity, identity services, backup, monitoring, and related cloud technologies.
• Configure and maintain Microsoft Entra ID, role-based access control, Conditional Access, MFA, least-privilege access, and related identity and security controls.
• Configure and support Azure security and monitoring technologies such as Microsoft Defender for Cloud, Azure Policy, Microsoft Sentinel, or comparable tools.
• Perform provisioning, configuration, patching, monitoring, troubleshooting, backup validation, and disaster recovery activities.
• Develop scripts, automation, and Infrastructure as Code using technologies such as PowerShell, Python, Terraform, Azure Bicep, or comparable tools.
• Maintain accurate architecture diagrams, system inventories, configuration records, and technical documentation.

Stakeholder, Customer, and Proposal Support (25%)

• Serve as a cybersecurity and cloud technical resource to internal program managers, engineering teams, leadership, government customers, and other stakeholders.
• Explain cybersecurity requirements, risks, findings, controls, and recommended solutions clearly to technical and nontechnical audiences.
• Participate in customer meetings and technical discussions and respond to questions regarding security practices, system architecture, federal compliance, and cloud security.
• Support proposal and business development efforts by reviewing cybersecurity requirements and contributing technical content to proposals, security questionnaires, requests for information, and related materials.
• Translate customer, business, and federal cybersecurity requirements into practical technical solutions.
• Communicate technical risks, constraints, recommendations, alternatives, and tradeoffs clearly and professionally.

Perform other related duties as organizational and program needs require.