Azure Cybersecurity Engineer

Integr8staff, LLC; Brea (CA); On-site; USD 140,000 - 160,000; Full time

Job summary

Integr8staff, LLC is seeking a Cybersecurity Engineer to strengthen Azure and networking capabilities on-site near Fullerton, CA. You will focus on cloud security, identity governance, and cost management while supporting the on-site environment.

Responsibilities include leading cloud migrations, implementing Defender tooling, and designing secure network segmentation. A current Secret clearance and U.S. citizenship are required for this position.

Qualifications

• Hands-on hybrid cloud migration and Azure networking expertise.
• Azure or Microsoft Azure certifications.
• Experience with cybersecurity compliance frameworks similar to CMMC/NIST 800-171.
• Experience administering Azure: Entra ID, VMs, vNet, CA policy, Purview, Defender, Intune.
• Strong PowerShell skills.
• Design and manage basic network architecture: routing, switching, segmentation, firewall/ACLs, VLANs.

Responsibilities

• Own and mature the Azure cloud environment: architecture, storage, Entra ID governance, cost management and security posture.
• Lead cloud migration and hybrid-cloud integration for on-prem workloads.
• Implement cloud security configurations and Defender tooling; monitor/logging.
• Maintain backup/DR and patch/configuration management for cloud systems.
• Use AI, Copilot, and PowerShell to automate repetitive admin tasks.
• Design and continuously improve network architecture with secure segmentation.

Skills

Azure networking

PowerShell

Hybrid cloud migration

Network architecture

Security+ (CE)

Identity management

Defender tooling

Education

Microsoft Azure Certifications

Tools

Azure Foundry

Copilot

Defender

Intune

Purview

Job description

Job Title – Cybersecurity Engineer

Company Location – Near Fullerton, CA

100% On-site

Direct Hire

Pay – 140-160k, DOE

Shift – 1 st shift

Job Summary

Integr8staff is seeking a Cybersecurity Engineer with strong Azure and networking expertise.

Responsibilities

• Own and mature our Azure cloud environment: architecture, storage, identity (Entra ID), governance, cost management, and security posture
• Lead cloud migration and hybrid-cloud integration efforts for on-prem workloads where appropriate
• Implement cloud security configuration, CA policy, Defender security tooling, monitoring/ logging
• Maintain monitoring, backup/DR, and patch/configuration management for cloud-hosted systems
• Use AI, copilot, and PowerShell to automate repetitive administration and security tasks
• Design, document, and continuously improve network architecture, including segmentation between CUI-scoped enclaves and general business networks
• Manage firewall, VLAN, and ACL configurations (including CUI subnet access control lists) and maintain accurate network documentation/diagrams
• Lead network hardening initiatives and access control requirements (e.g., AC, SC control families)
• Evaluate and implement zero-trust and micro-segmentation strategies
• Maintain secure configurations, audits, and documentation for the classified workstations;
• Maintain active Security+ certification
• Maintain System Security Plans (SSPs), POA&Ms, and supporting documentation
• Support periodic government inspections, self-inspections, vulnerability scans, and audit log reviews
• Administer Windows Server, Active Directory/Entra ID, endpoint management, and core virtual infrastructure services
• Participate in security assessments, incident response testing, risk assessments, and 3rd party audits
• Execute vulnerability scans, system patching, configuration deployments
• Support configuration and software management controls (e.g., application allow-listing, nonessential functionality restrictions) in coordination with compliance staff

Requirements

• Hands-on expertise in hybrid cloud migration, Microsoft Azure networking, cloud technologies, protocols, and authentication, and WAN network architecture
• Cloud or Microsoft Azure Certifications
• Implementing simple AI solutions in Azure Foundry and/or Copilot
• Experience with cybersecurity compliance frameworks similar to CMMC/NIST 800-171
• Experience administering Azure: identity (Entra ID), virtual machines, vnet, CA policy, Azure Foundry, Purview, Defender, Intune, etc.
• Strong PowerShell skills
• Design and manage basic network architecture: routing, switching, segmentation, firewall/ACL configuration, VLANs, RADIUS, etc.
• Excellent writing skills, conceptual thinking skills, and communication skills needed to learn/implement GenAI tools
• Active Secret security clearance
• U.S. citizenship required.
• CompTIA Security+ (CE)

Updated resume is required for consideration. Only Local candidateswill be considered- Position does not offer relocation or visa sponsorship