Information Assurance (IA)/Cybersecurity Engineer
Responsibilities
- Implement, maintain, and assess security controls for Azure and hybrid enterprise systems in alignment with organizational policies and applicable cybersecurity standards.
- Support security compliance and authorization activities, including preparation, review, and maintenance of required cybersecurity documentation and artifacts.
- Conduct security control validation, vulnerability analysis, and comprehensive risk assessments across systems and platforms.
- Monitor system security posture and coordinate with engineering teams to remediate identified vulnerabilities and findings.
- Provide IA guidance during system changes, deployments, and upgrades to ensure security controls remain effective and compliant.
- Support incident response activities, including analysis, containment, and post-incident remediation.
- Review system configurations, architectures, and operational procedures to identify security gaps and risk areas.
- Collaborate with Senior Azure Systems & Platform Engineers and Azure Architects to ensure security requirements are integrated into system designs and implementations.
- Assist with continuous monitoring activities, including review of security logs, alerts, and assessment results.
- Support audits, inspections, and compliance reviews through technical inputs, evidence gathering, reporting, and subject-matter expertise.
- Track and manage Plans of Action and Milestones (POA&M) and associated remediation efforts.
- Maintain accurate and up-to-date security documentation including control implementations, assessment results, and remediation records.
- Ensure alignment with DoD 8140 / DCWF qualification requirements, maintaining required professional certifications and continuing education.
- Performs other related duties as assigned.
Qualifications
- Experience: Minimum 4 years of cybersecurity, information assurance, or security engineering experience (or equivalent).
- Education:
- Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or related field
- OR equivalent combination of education, training, and experience
- Microsoft Azure:
- Demonstrated hands-on experience supporting or securing Azure environments
- Certifications:
- Microsoft Certified: Azure Administrator Associate (or higher)
- Meets DoD 8570 / 8140 IAT-II requirements (e.g., Security+, SSCP, GSEC)
- Security Clearance:
- Active Secret clearance (required)
Preferred
- Advanced security certifications (e.g., CISSP, CISM, CAP).
- Experience with secure cloud architecture patterns in Azure, including identity, access management, segmentation, and logging/monitoring.
- Familiarity with RMF-style compliance workflows in regulated environments.
- Experience supporting enterprise-level hybrid or Azure-integrated environments.