Cloud Security and Infrastructure Engineer

Solutions for Information Design, LLC; United States; Remote; USD 140,000 - 180,000; Full time

Benefits offered by this job

100% ESOP ownership

Fully remote work with flexible hours

Paid holidays (11) and family leave

Internet stipend

Professional development

Job summary

SOLID is seeking a Cloud Security & Infrastructure Engineer to secure and optimize our Azure-based environments across corporate and program domains in a fully remote role within the United States.

You will lead cybersecurity engineering, RMF/ATO activities, and cloud infrastructure enhancements, collaborating with program managers, engineers, and government customers. Strong communication and documentation skills are essential.

Qualifications

• Bachelor's degree or equivalent in a related field.
• 7+ years of progressively responsible experience in cybersecurity engineering, cloud security, or related fields.
• Hands-on experience with security control implementation, vulnerability management, and incident response.
• Experience administering and securing production Microsoft Azure environments.
• Direct experience with federal RMF/ATO activities and security documentation.
• Experience with controls under NIST SP 800-53/800-171, RMF, CMMC, FedRAMP, or similar.
• Strong written and oral communication with technical and nontechnical stakeholders.

Responsibilities

• Implement and document cybersecurity controls across environments.
• Support RMF/ATO activities and continuous monitoring.
• Develop and maintain security documentation and artifacts.
• Work with owners, managers, and assessors to prepare systems for authorization.
• Hardening, vulnerability management, monitoring, and incident response support.
• Develop automation and IaC using PowerShell, Python, Terraform, or Azure Bicep.
• Maintain architecture diagrams and inventories.

Skills

Cybersecurity engineering

Cloud security

RMF/ATO experience

Microsoft Azure

Technical communication

Security documentation

Vulnerability management

Education

Bachelor's degree in CS/IT/Cybersecurity/Engineering

Equivalent combination of education and experience

Tools

Microsoft Defender for Cloud

Azure Policy

Terraform

Azure Bicep

PowerShell

Python

Job description

All Jobs > Cloud Security and Infrastructure Engineer

Cloud Security and Infrastructure Engineer
Fully Remote • United States • Engineering

Full-time

Description

Summary / Objective:

The Cloud Security & Infrastructure Engineer is a hands-on cybersecurity and cloud engineering professional responsible for securing, administering, and continuously improving SOLID's corporate and program-specific technology environments. The role places primary emphasis on cybersecurity engineering, federal security compliance, and Risk Management Framework (RMF) / Authority to Operate (ATO) activities, supported by strong hands-on Microsoft Azure experience.

This position works closely with program managers, software and DevOps teams, government customers, partners, and prospective customers. The engineer must be able to translate technical and cybersecurity requirements into practical solutions, explain risks and recommendations clearly to technical and nontechnical audiences, and support proposal and business development activities involving cybersecurity and cloud requirements.

Essential Job Functions / Responsibilities / Duties

Cybersecurity Engineering and Federal Compliance (45%)

• Implement, maintain, assess, and document cybersecurity controls across corporate and program environments.
• Support RMF activities throughout the system lifecycle, including control implementation, assessment, authorization, reauthorization, and continuous monitoring.
• Develop and maintain ATO documentation, including System Security Plans, control implementation statements, architecture and data-flow diagrams, configuration evidence, POA&Ms, and related security artifacts.
• Work with system owners, program managers, government customers, and assessors to prepare systems for authorization, address findings, and maintain ongoing compliance.
• Perform system hardening, vulnerability identification and remediation, secure configuration management, security monitoring, and incident response support.
• Implement and assess controls under NIST SP 800-53, NIST SP 800-171, DoD RMF, CMMC, and other applicable federal cybersecurity requirements.
• Support security assessments, audits, penetration testing, and secure handling of CUI, PII, and other sensitive information.
• Evaluate technologies, system changes, and integrations for cybersecurity and compliance impacts.

Microsoft Azure Cloud Infrastructure and Security (30%)

• Design, implement, administer, and secure Microsoft Azure infrastructure supporting corporate and federal program environments.
• Manage Azure virtual machines, virtual networks, storage, firewalls, VPN connectivity, identity services, backup, monitoring, and related cloud technologies.
• Configure and maintain Microsoft Entra ID, role-based access control, Conditional Access, MFA, least-privilege access, and related identity and security controls.
• Configure and support Azure security and monitoring technologies such as Microsoft Defender for Cloud, Azure Policy, Microsoft Sentinel, or comparable tools.
• Perform provisioning, configuration, patching, monitoring, troubleshooting, backup validation, and disaster recovery activities.
• Develop scripts, automation, and Infrastructure as Code using technologies such as PowerShell, Python, Terraform, Azure Bicep, or comparable tools.
• Maintain accurate architecture diagrams, system inventories, configuration records, and technical documentation.

Stakeholder, Customer, and Proposal Support (25%)

• Serve as a cybersecurity and cloud technical resource to internal program managers, engineering teams, leadership, government customers, and other stakeholders.
• Explain cybersecurity requirements, risks, findings, controls, and recommended solutions clearly to technical and nontechnical audiences.
• Participate in customer meetings and technical discussions and respond to questions regarding security practices, system architecture, federal compliance, and cloud security.
• Support proposal and business development efforts by reviewing cybersecurity requirements and contributing technical content to proposals, security questionnaires, requests for information, and related materials.
• Translate customer, business, and federal cybersecurity requirements into practical technical solutions.
• Communicate technical risks, constraints, recommendations, alternatives, and tradeoffs clearly and professionally.

Perform other related duties as organizational and program needs require.

Requirements

Required Qualifications

• Bachelor's degree in computer science, information technology, cybersecurity, engineering, or a related discipline. An equivalent combination of education, certifications, training, and experience may be considered.
• Seven or more years of progressively responsible experience in cybersecurity engineering, cloud security, cloud infrastructure, systems engineering, or a closely related field.
• Demonstrated hands-on cybersecurity engineering experience, including security control implementation, vulnerability management, system hardening, monitoring, or incident response.
• Demonstrated hands-on experience administering and securing production Microsoft Azure environments.
• Experience with Microsoft Azure infrastructure, networking, identity and access management, monitoring, backup, and cloud security technologies.
• Direct experience supporting federal RMF and ATO activities, including development or maintenance of security documentation, control implementation statements, assessment evidence, POA&Ms, or continuous monitoring artifacts.
• Experience implementing or assessing controls under NIST SP 800-53, NIST SP 800-171, RMF, CMMC, FedRAMP, FISMA, or comparable federal cybersecurity requirements.
• Demonstrated ability to communicate technical and cybersecurity information effectively to both technical and nontechnical stakeholders.
• Experience working directly with customers, program managers, or external stakeholders to discuss cybersecurity requirements, risks, findings, or technical solutions.
• Strong technical writing, troubleshooting, analytical, and organizational skills.

Additional Requirements

• United States citizenship and current CompTIA Security+ certification, or higher qualifying certification, at the time of hire.
• Ability to obtain and maintain a government security clearance and satisfy applicable DoD 8140 qualification requirements.
• Ability to support occasional maintenance, incident response, or system restoration activities outside normal business hours.

Preferred Qualifications

• Experience supporting federal government contracts or working within a government contracting environment.
• Experience communicating directly with DoD or other federal customers regarding cybersecurity, technical requirements, or compliance.
• Experience with Microsoft Azure Government and systems operating under a DoD ATO.
• Experience supporting government proposals, security questionnaires, requests for information, or customer-facing technical discussions.
• Experience with Microsoft Defender for Cloud, Microsoft Sentinel, Azure Policy, SIEM, EDR, or cloud security posture management technologies.
• Experience with Terraform, Azure Bicep, Azure DevOps, GitHub Actions, or other infrastructure automation and DevSecOps technologies.
• Relevant certifications such as CISSP, Microsoft Certified: Azure Security Engineer Associate, Azure Administrator Associate, Azure Solutions Architect Expert, or comparable credentials.

Why Join SOLID?

At SOLID, we offer more than just a job; we offer ownership. As a 100% employee-owned company through our Employee Stock Ownership Plan (ESOP), every team member has a personal stake in our success and a voice in how we grow.

Benefits include:

• 100% employee ownership through our ESOP
• Comprehensive medical, dental, and vision coverage
• Generous PTO policy with 11 paid holidays annually
• Paid family leave
• Monthly reimbursement for high-speed internet
• Fully remote work with flexible scheduling
• Sponsored professional development and training
• A fun and inclusive culture with regular virtual team events

This position will require and is dependent on the successful completion of a criminal background check.

SOLID is committed to ensuring equal employment opportunities for all employees and applicants for employment. As an Equal Opportunity Employer, we do not discriminate based on race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, disability status, or any other characteristic protected by law.

In compliance with the Equal Opportunity Clause §60-1.35, SOLID ensures that employees and applicants are not restricted from discussing or disclosing their compensation or the compensation of other employees or applicants. Our policies do not prohibit, or tend to prohibit, employees or applicants from discussing or disclosing their compensation.

All employees and applicants will have access to our nondiscrimination provision, which is included in our employee manuals and handbooks and posted in conspicuous places or electronically where they are readily available.