Note: The job is a remote job and is open to candidates in USA. SOLID, Inc. is seeking a Cloud Infrastructure & Security Engineer to support its corporate operations and federal programs. This hands-on individual contributor will design, administer, secure, automate, and continuously improve Microsoft Azure infrastructure while supporting DoD RMF, ATO activities, cybersecurity compliance, cloud operations, and stakeholder collaboration.
Responsibilities
- Design, implement, administer, and optimize secure, scalable, resilient, and supportable Microsoft Azure infrastructure across corporate and program-specific environments
- Manage Azure computing resources, virtual machines, virtual networks, storage, cloud identity services, firewalls, VPN connectivity, load balancing, backup services, and monitoring solutions
- Configure and maintain Azure subscriptions, resource groups, networking, identity integration, access controls, and platform services
- Administer and integrate Microsoft Entra ID, Microsoft 365, endpoint management, and other enterprise services with Azure infrastructure, including identity management, authentication, access control, and secure connectivity
- Implement and maintain Infrastructure as Code (IaC) solutions using technologies such as Terraform, Azure Bicep, or ARM templates to support consistent and repeatable infrastructure deployments
- Perform cloud resource provisioning, configuration management, patching, upgrading, monitoring, troubleshooting, backup validation, and capacity planning
- Develop scripts, automation, and repeatable processes using PowerShell, Python, or comparable technologies to improve infrastructure deployment, configuration, monitoring, evidence collection, and administration
- Implement and maintain cloud backup, disaster recovery, business continuity, and Continuity of Operations capabilities, including documentation, periodic testing, and corrective actions
- Configure and maintain Azure monitoring, logging, and alerting solutions to proactively identify performance, availability, security, and operational issues
- Evaluate Azure resource utilization, performance, security, reliability, and costs; recommend improvements to resource sizing, architecture, availability, and operational efficiency
- Maintain cloud architecture documentation, system inventories, network and data-flow diagrams, configuration records, operating procedures, and infrastructure deployment documentation
- Design, implement, maintain, assess, and document cybersecurity controls across Microsoft Azure infrastructure and hosted environments in accordance with organizational and applicable federal cybersecurity requirements
- Lead and support technical RMF activities throughout the system lifecycle, including security control implementation, assessment, authorization, and continuous monitoring
- Develop, maintain, and coordinate ATO packages and supporting cybersecurity documentation, including System Security Plans (SSPs), control implementation statements, Azure architecture and data-flow diagrams, configuration evidence, Plans of Action and Milestones (POA&Ms), and related security artifacts
- Work with cybersecurity personnel, system owners, government stakeholders, and assessors to prepare systems for authorization, address assessment findings, support ATO submissions, and maintain documentation throughout the authorization lifecycle
- Implement and document security controls under NIST SP 800-53, NIST SP 800-171, DoD RMF, and other applicable federal cybersecurity frameworks
- Implement and maintain Azure security configurations, identity and access controls, multifactor authentication, role-based access control (RBAC), least-privilege access, secure network segmentation, encryption, and secure configuration baselines
- Configure and maintain cloud security capabilities using Microsoft Entra ID, Microsoft Defender for Cloud, Azure Policy, and comparable security technologies
- Perform system hardening and manage vulnerability identification, prioritization, remediation, validation, and reporting across Azure infrastructure and hosted environments
- Review security scans, alerts, logs, and configuration findings; investigate potential security issues, coordinate corrective actions, and support incident response and remediation
- Maintain audit-ready technical documentation and continuous monitoring evidence, including security control validation, configuration records, vulnerability remediation records, and POA&M updates
- Coordinate security assessments, penetration testing, tabletop exercises, internal audits, and customer or third-party reviews
- Support the secure storage, processing, and transmission of Controlled Unclassified Information (CUI), Personally Identifiable Information (PII), and other sensitive data
- Evaluate proposed Azure services, infrastructure changes, and integrations for security, compliance, operational, and architectural impacts
- Collaborate with software engineering, DevOps, and cybersecurity teams to design and maintain Azure environments supporting application development, testing, deployment, and production operations
- Support the integration of infrastructure provisioning, configuration management, security validation, and monitoring into CI/CD pipelines and automated deployment workflows
- Gather and analyze operational, business, cybersecurity, and technical requirements and translate them into practical Azure infrastructure and security solutions
- Coordinate with cybersecurity personnel and program stakeholders to ensure infrastructure designs, deployments, and system changes align with applicable RMF and ATO requirements
- Evaluate Azure technologies, platform services, and architectural approaches to improve system reliability, scalability, security, maintainability, and cost effectiveness
- Coordinate with internal departments, government customers, vendors, and external service providers regarding cloud infrastructure requirements, system changes, technical issues, and compliance activities
- Communicate technical risks, operational constraints, architectural recommendations, and alternative solutions clearly to technical and nontechnical stakeholders
- Perform other related duties as organizational and program needs require
Skills
- Strong knowledge of Microsoft Azure infrastructure, cloud computing, systems administration, cloud networking, identity and access management, vulnerability management, and cybersecurity fundamentals
- Working knowledge of Azure compute, networking, storage, identity services, logging and monitoring, backup, virtualization, firewalls, VPN technologies, and endpoint security
- Strong understanding of federal cybersecurity requirements, particularly DoD RMF, NIST security controls, and the ATO lifecycle
- Ability to develop, maintain, and organize accurate, complete, and audit-ready ATO documentation and technical security evidence
- Experience with PowerShell, Python, or comparable scripting and automation technologies; familiarity with Infrastructure as Code, configuration management, and DevSecOps practices
- Ability to diagnose complex infrastructure and cybersecurity problems, identify root causes, implement sustainable solutions, and independently manage competing priorities
- Excellent organizational, analytical, communication, technical writing, and documentation skills
- Ability to communicate technical and cybersecurity requirements effectively to engineering teams, government stakeholders, and nontechnical personnel
- Bachelor's degree in computer science, information technology, cybersecurity, engineering, or a related discipline. An equivalent combination of education, certifications, training, and experience may be considered
- Seven or more years of progressively responsible experience in cloud infrastructure, systems engineering, cloud administration, cybersecurity engineering, or a closely related field, including substantial hands-on experience deploying and administering Microsoft Azure environments
- Demonstrated experience designing, implementing, administering, and securing production infrastructure within Microsoft Azure
- Strong working knowledge of Azure infrastructure services, including virtual machines, virtual networking, storage, identity and access management, network security, monitoring, backup, and disaster recovery
- Hands-on experience with Microsoft Entra ID, including identity management, authentication, access controls, and integration with Azure infrastructure
- Experience implementing and maintaining infrastructure through automated deployment or Infrastructure as Code technologies, such as Terraform, Azure Bicep, or ARM templates
- Experience developing scripts or automated workflows using PowerShell, Python, or comparable technologies
- Experience implementing or assessing technical security controls under NIST SP 800-53, NIST SP 800-171, RMF, CMMC, FedRAMP, FISMA, or comparable federal cybersecurity requirements
- Demonstrated experience directly supporting RMF and ATO activities, including developing or maintaining security documentation, technical control implementation statements, assessment evidence, POA&Ms, and other authorization-related artifacts
- Strong troubleshooting, technical documentation, communication, and stakeholder engagement skills
- United States citizenship and current CompTIA Security+ (or higher) certification at the time of hire
- Ability to obtain and maintain a government security clearance and satisfy applicable DoD 8140 qualification requirements
- Ability to support occasional maintenance, incident response, or system restoration activities outside normal business hours
- Experience supporting Microsoft Azure Government or other cloud environments subject to federal cybersecurity requirements
- Experience supporting systems operating under a DoD ATO, including initial authorization, reauthorization, and continuous monitoring activities
- Experience designing or migrating enterprise infrastructure and applications to Microsoft Azure
- Experience with Terraform, Azure Bicep, ARM templates, Ansible, or comparable infrastructure automation technologies
- Experience with Azure DevOps, GitHub Actions, or comparable CI/CD and infrastructure deployment technologies
- Experience with containerization, container orchestration, and cloud-native application hosting technologies, including Azure Kubernetes Service (AKS)
- Experience with Microsoft Defender for Cloud, Microsoft Sentinel, Azure Policy, cloud security posture management, SIEM, EDR, or automated compliance monitoring tools
- Experience with hybrid cloud architectures and secure connectivity between Azure and on-premises infrastructure
- Experience supporting CMMC assessments or implementing NIST SP 800-171 requirements
- Experience with AWS or AWS GovCloud infrastructure and security, particularly in environments utilizing multiple cloud platforms
- Relevant certifications such as Microsoft Azure Administrator Associate, Azure Solutions Architect Expert, Azure Security Engineer Associate, CISSP, or comparable cloud and cybersecurity certifications
Benefits
- 100% employee ownership through our ESOP
- Comprehensive medical, dental, and vision coverage
- Generous PTO policy with 11 paid holidays annually
- Paid family leave
- 401(k) retirement plan
- Monthly reimbursement for high-speed internet
- Fully remote work with flexible scheduling
- Sponsored professional development and training
- A fun and inclusive culture with regular virtual team events
Company Overview