Job Summary: We are seeking an Information Assurance (IA) / Cybersecurity Engineer to support and maintain the security posture of mission systems in a DoD environment. The role focuses on implementing security controls, supporting compliance activities, and coordinating remediation across Azure and hybrid enterprise environments. *This position is contingent upon contract award.* Job Duties and Responsibilities: Core Responsibilities - Implement, maintain, and assess security controls for Azure and hybrid enterprise systems in accordance with organizational policies and applicable cybersecurity standards - Support security compliance and authorization activities, including preparation, review, and maintenance of required security documentation and artifacts. - Conduct security control validation, vulnerability analysis, and risk assessment activities across systems and platforms - Monitor system security posture and coordinate with engineering teams to remediate identified vulnerabilities and findings - Provide IA guidance during system changes, deployments, and upgrades to ensure security controls remain effective and compliant - Support incident response and cybersecurity event handling, including analysis, containment support, and post-incident remediation activities - Review system configurations, architectures, and operational procedures to identify security gaps and risk areas - Collaborate with Senior Azure Systems & Platform Engineers and Azure Architects to ensure security requirements are integrated into system designs and implementations - Assist with continuous monitoring activities, including review of security-relevant logs, alerts, and assessment results - Support audits, inspections, and compliance reviews by providing technical input, evidence, and security expertise - Track and manage plans of action and milestones (POA&M) and remediation efforts, as applicable - Maintain accurate security documentation, including control implementations, assessment results, and remediation records - Ensure compliance with DoD 8140 / DCWF qualification requirements and maintain required professional certifications and continuing education Job Requirements (Education/Skills/Experience): Required Qualifications - Experience: - Minimum 4 years of cybersecurity/IA/security engineering experience (or equivalent) - Education: - Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or related field - OR an equivalent combination of education, training, and experience - Microsoft Azure: - Demonstrated hands-on experience supporting or securing Microsoft Azure environments - Certifications (Required): - Microsoft Certified: Azure Administrator Associate or higher - Must meet DoD 8570 / 8140 IAT-II requirements (examples in the table include Security+, SSCP, GSEC, etc.) - Security Designation / Eligibility: - Active Secret clearance - Professional Development: - Maintain continuous professional development Preferred Qualifications - Advanced security certifications (e.g., CISSP/CISM/CAP-type credentials) - Experience with secure cloud architecture patterns in Azure (identity, access, segmentation, logging/monitoring) - Familiarity with RMF-style compliance workflows in regulated environments This contractor and subcontractor shall abide by the requirements of 41 CFR 60-1.4(a), 60-300.5(a) and 60-741.5(a). These regulations prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities, and prohibit discrimination against all individuals based on their race, color, religion, sex, sexual orientation, gender identity, national origin, or for inquiring about, discussing, or disclosing information about compensation, or any other basis prohibited by law. We participate in E-Verify.

• Support the CIO PMO and Security teams across various focus areas • Assist with communications and leadership messaging • Help develop the monthly CIO All Hands agenda • Support procurement and renewal processes for technology tools

• Ensure all security practices, systems, and architectures adhere to applicable laws, regulations, frameworks, and industry standards. • Maintain documentation to demonstrate compliance and support audits. • Develop and document secure technical architectures that integrate cybersecurity best practices into enterprise systems, applications, and cloud environments. • Balance security requirements with business needs to enable scalable, resilient solutions. • Engineer and implement security controls for systems, applications, and networks to safeguard against unauthorized access, data breaches, and service disruptions. • Conduct risk assessments to identify potential vulnerabilities and apply appropriate mitigations. • Partner with infrastructure, operations, and development teams to embed security throughout the technology lifecycle. • Provide guidance during planning, design, development, testing, and deployment to ensure secure-by-design outcomes. • Perform and coordinate penetration testing, vulnerability scanning, code reviews, and other security validation activities. • Interpret results, recommend remediation strategies, and ensure corrective actions are effectively implemented. • Establish monitoring processes, tools, and dashboards to proactively detect and respond to anomalies or threats. • Continuously assess and refine security controls, processes, and technologies to address evolving risks and improve maturity. • Assist in the identification, investigation, containment, and recovery of security incidents. • Provide technical expertise to incident response teams and contribute to post-incident reviews to strengthen defenses and reduce recurrence. • Performs other duties as assigned. • Comply with all policies and standards

• Design, implement, and manage cloud security solutions • Develop and maintain security policies, procedures, and controls to protect the company's assets • Monitor and respond to security incidents, investigating and mitigating threats and vulnerabilities • Configure and manage AWS security services such as AWS Identity and Access Management (IAM), AWS Key Management Service (KMS), AWS Security Hub, AWS GuardDuty, and AWS CloudTrail • Conduct risk assessments and security audits to identify and mitigate potential vulnerabilities • Collaborate with development and operations teams to integrate security best practices into the software development lifecycle (SDLC) • Stay updated on cloud security trends and AWS advancements, continuously proposing improvements to our security practices