Cloud Security Engineer – Cleared (Polygraph)

True Tandem; Reston (VA); On-site; USD 175,000 - 190,000; Full time

Benefits offered by this job

Health insurance

Dental and vision plans

Paid time off (PTO)

Retirement plan options

Job summary

True Tandem is seeking a dedicated cloud security solutions architect based in Reston, Virginia. The role focuses on implementing and sustaining cloud security solutions aligned with industry standards while managing Microsoft Sentinel for security operations.

Qualified candidates must possess an active TS/SCI clearance, extensive experience in cloud security operations, and expertise in Microsoft technologies. Additional benefits include a competitive salary range of $175,000 to $190,000 and comprehensive health insurance coverage.

Qualifications

• An active TS/SCI with polygraph is mandatory.
• Minimum of five years of Tier II or three years of Tier III cloud security experience required.
• Ability to design and implement enterprise cloud security solutions in Azure environments.

Responsibilities

• Architect and sustain cloud security solutions.
• Manage Microsoft Sentinel for security operations.
• Implement Azure Monitoring for performance and risk identification.

Skills

TS/SCI clearance with polygraph

5+ years Tier II or 3+ years Tier III cloud security experience

Microsoft Sentinel proficiency

KQL knowledge

Zero Trust security concepts

Troubleshooting and investigative skills

Tools

Microsoft Azure

Microsoft Defender for Cloud

Power Platform

Job description

Company Description

TrueTandem's mission is to be a trusted information technology solutions provider, committed to the success of our customers, communities and employees. To enable this mission, we listen to our customers’ needs, empower our dedicated and talented employees, envision success together, and deliver innovative cost-effective solutions. For our customers, we aim to deliver more power to meet their business outcomes through technology implementation, integration, optimization and customization. We enable some of the most well‑known companies, nonprofits and federal agencies in the United States to intelligently plan and develop their applications, modernize their infrastructure and manage their data.

Role and Responsibilities

• Architect, deploy, and sustain cloud security solutions aligned with the Microsoft Cloud Adoption Framework (CAF), Zero Trust, and TIC 3.0 security principles.
• Configure, manage, and optimize Microsoft Sentinel for enterprise‑wide security operations, including incident detection, investigation, and response.
• Implement and maintain Azure Monitoring solutions, enabling proactive identification of performance, security, and compliance risks.
• Detect, analyze, and investigate threats across cloud and hybrid environments; support incident triage and response activities.
• Develop custom KQL (Kusto Query Language) queries to create reports, dashboards, and alerts that enhance visibility into security posture.
• Collaborate with cross‑functional IT, DevSecOps, and mission teams to strengthen security monitoring and governance.
• Document cloud security architectures, standard operating procedures, detection use cases, and runbooks.

Provide subject matter expertise in advanced cloud security features (e.g., Defender for Cloud, Entra ID Conditional Access, Identity Protection) to elevate enterprise resilience.

Required Skills

• An active TS/SCI with polygraph.
• Minimum of five (5) years of Tier II or three (3) years of Tier III cloud security or cybersecurity operations experience.
• Proven ability to design, deploy, and sustain enterprise cloud security solutions in Azure environments.
• Expertise with Microsoft Sentinel, Azure Monitoring, and security threat detection/analysis.
• Strong knowledge of KQL to develop security reports, dashboards, and detection rules.
• Solid understanding of Zero Trust security concepts, cloud security baselines, and federal cybersecurity compliance requirements.
• Strong troubleshooting, diagnostic, and investigative skills across security monitoring platforms.

Preferred Skills

• Microsoft Identity and Access Administrator Microsoft Security Operations Analyst (SC‑200), Azure Security Engineer (AZ‑500), or equivalent certifications.
• Experience with Microsoft Defender for Cloud, Microsoft Entra Identity Protection, and enhanced security features.
• Familiarity with security automation and orchestration (SOAR) workflows in Sentinel.
• Experience supporting large‑scale federal security operations centers (SOCs) or cybersecurity modernization initiatives or Azure Security Engineer certifications.
• Experience with Microsoft Entra Permissions Management, Privileged Identity Management (PIM), and Identity Governance.
• Knowledge of integrating IAM with Power Platform and enterprise applications.
• Familiarity with AOAI embedded features and Copilot capabilities for identity workflows.

Compensation & Benefits

$175,000 - $190,000 a year

The above salary range represents a general guideline; however, TrueTandem considers several factors when determining base salary offers such as the scope and responsibilities of the position and the candidate's experience, education, skills and current market conditions.

In addition, TrueTandem provides a variety of benefits including health insurance coverage, dental and vision plans, life and disability insurance, company paid holidays and paid time off (PTO). Our retirement plan offers a variety of investment options to build toward your retirement.

TrueTandem is an Equal Opportunity Employer, making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class.

U.S. Citizenship is required for all positions with a government clearance and certain other restricted positions.