Note: The job is a remote job and is open to candidates in USA. SOLID, Inc. is hiring an Infrastructure & Security Engineer within its Engineering department. The role is a hands-on individual contributor responsible for designing, administering, securing, and improving corporate and program technology environments while supporting DoD Risk Management Framework and federal cybersecurity compliance requirements. The engineer will manage infrastructure operations, cybersecurity controls, documentation, incident response, automation, and collaboration with technical and business stakeholders.
Responsibilities
- Design, implement, administer, and improve secure, scalable, resilient, and supportable infrastructure across corporate and program environments
- Manage cloud services, servers, virtual machines, networks, firewalls, identity platforms, endpoints, VPN services, backups, collaboration platforms, and monitoring tools
- Perform provisioning, configuration, patching, upgrading, monitoring, troubleshooting, backup validation, capacity planning, and other systems administration activities
- Develop scripts, automation, and repeatable processes to improve deployment, configuration, monitoring, evidence collection, and administration
- Maintain system documentation, inventories, diagrams, configuration records, operating procedures, and core IT service management processes
- Support disaster recovery, business continuity, and Continuity of Operations planning, documentation, testing, and corrective actions
- Evaluate technologies and coordinate with vendors and service providers to improve performance, security, reliability, service quality, and cost effectiveness
- Implement, maintain, assess, and document cybersecurity controls applicable to SOLID's corporate and program environments
- Support RMF activities throughout the system lifecycle, including control implementation, assessment, authorization, and continuous monitoring
- Develop and maintain ATO packages, security plans, control implementation statements, network and data-flow diagrams, configuration evidence, POA&Ms, and related artifacts
- Perform system hardening, maintain secure configuration baselines, and manage vulnerability identification, prioritization, remediation, validation, and reporting
- Review security scans, alerts, logs, and configuration findings; coordinate corrective actions and support incident investigation, containment, remediation, and lessons learned
- Coordinate security assessments, penetration testing, tabletop exercises, internal audits, and customer or third-party reviews
- Support secure handling of CUI, PII, and other sensitive information, including Zero Trust, least privilege, MFA, identity and access management, endpoint security, and periodic permission reviews
- Evaluate proposed technologies, system changes, and integrations for security and compliance impacts and remain current on relevant threats and federal cybersecurity requirements
- Gather and analyze operational, business, cybersecurity, and technical requirements and translate them into practical infrastructure and security solutions
- Collaborate with software engineers and DevOps personnel to incorporate security into development, deployment, system integration, and CI/CD processes
- Communicate technical risks, constraints, recommendations, and alternatives clearly to technical and nontechnical stakeholders
- Perform other related duties as organizational and program needs require
Skills
- Bachelor's degree in computer science, information technology, cybersecurity, engineering, or related discipline. An equivalent combination of education, certifications, training, and experience may be considered
- Seven or more years of progressively responsible experience in IT infrastructure, systems engineering, cloud administration, cybersecurity, or a closely related field
- Demonstrated experience designing, implementing, administering, and securing enterprise infrastructure
- Hands-on experience with Microsoft Azure or Azure Government, Microsoft 365 and Entra ID, AWS or AWS GovCloud, virtualization, networking, endpoint management, backup, and monitoring technologies
- Experience implementing or assessing controls under NIST SP 800-53, NIST SP 800-171, RMF, CMMC, FedRAMP, FISMA, or comparable federal cybersecurity requirements
- Experience developing or maintaining ATO documentation, security control evidence, Plans of Action and Milestones, and audit-ready technical documentation
- Strong troubleshooting, scripting or automation, communication, and stakeholder engagement skills
- Strong knowledge of enterprise infrastructure, cloud computing, systems administration, networking, identity and access management, endpoint management, vulnerability management, and cybersecurity fundamentals
- Working knowledge of IaaS and PaaS services, logging and monitoring, storage, backup, virtualization, firewalls, switching, routing, VPN technologies, and endpoint security
- Ability to develop clear, accurate, and audit-ready technical and cybersecurity documentation
- Experience with PowerShell, Python, or comparable scripting and automation technologies; familiarity with infrastructure as code, configuration management, and DevSecOps practices
- Demonstrated ability to diagnose complex technical problems, identify root causes, implement sustainable solutions, and manage competing priorities independently
- Excellent organizational, analytical, communication, technical writing, and documentation skills
- United States citizenship and current CompTIA Security+ (or higher) certification at the time of hire
- Ability to obtain and maintain a government security clearance and satisfy applicable DoD 8140 qualification requirements
- Ability to support occasional maintenance, incident response, or system restoration activities outside normal business hours
- Experience supporting systems operating under a DoD ATO or in Azure Government, AWS GovCloud, NIPRNet, or other federal environments
- Experience with Terraform, Bicep, CloudFormation, Ansible, security scanning, EDR, SIEM, cloud security posture management, or automated compliance tools
- Experience supporting CMMC assessments or implementing NIST SP 800-171 requirements
- Relevant certifications such as CISSP or Microsoft Certified Azure (e.g. Administrator Associate, Security Engineer Associate, Solutions Architect, Identity and Access)
Company Overview