Federal Cloud Security Engineer

InEight; Scottsdale (AZ); Hybrid; USD 120,000 - 180,000; Full time

Job summary

InEight, a leader in construction project controls software, seeks a Federal Cloud Security Engineer to secure FedRAMP-authorized and IRAP-assessed cloud environments. You will manage vulnerabilities, monitor security events, and support annual compliance activities across Microsoft Azure and Azure Government.

You will collaborate with engineering, DevOps, auditors, and compliance teams to implement controls, maintain evidence, and drive continuous improvement in a regulated, globally

Qualifications

• Bachelor's degree in CS/IT/Cyber Security or related field, or equivalent experience.
• Experience administering Microsoft Azure environments and cloud security.
• Knowledge of FedRAMP, IRAP, NIST 800-53, ISO 27001 or similar frameworks.
• Experience supporting audits, assessments, or regulatory compliance activities.

Responsibilities

• Manage vulnerability scanning, remediation efforts, and security findings using Tenable and related tools.
• Support FedRAMP and IRAP Continuous Monitoring activities to maintain compliance.
• Monitor, investigate, and respond to security events with Microsoft Sentinel/Defender.
• Assist security assessments, audits, and annual compliance reviews with evidence and documentation.
• Implement and maintain security controls and secure configurations in Azure/Azure Government.

Skills

FedRAMP / IRAP experience

Cloud security

Azure familiarity

Vulnerability management

Security monitoring

Regulatory compliance

Communication skills

Education

Bachelor's degree in CS/IT/Cyber Security

Tools

Tenable

Microsoft Sentinel

Microsoft Defender

Azure Government

Job description

Requisition ID11342-Posted -Remote (Remote)-IT

InEight is a leader in construction project controls software, empowering over 850 companies taking on challenging projects in industries including construction and engineering; transportation infrastructure; mining; water; power and renewables; and oil, gas and chemical. Uniquely suited to capital construction and other complex work, our integrated modular software manages projects with over $1 trillion globally.

Based in Scottsdale, Arizona, InEight supports a remote work model with employees working throughout the United States, Canada, Australia, Sri Lanka and Europe. InEight, an ISO 9001:2015-registered company, is a subsidiary of Kiewit Corporation (Kiewit). Kiewit, through its subsidiaries, is one of North America's largest and most respected construction and engineering organizations.

InEight is a fast -paced, innovative company comprised of high-energy teams of self-starters playing integral roles in shaping the future of capital projects around the world. Our industry-leading solutions, dedicated employees, and proven leadership team provide a solid foundation to support our continued growth and success.

We offer our fulltime employees a comprehensive benefits package that's among the best in our industry, including top-tier medical, dental and vision plans covering eligible employees and dependents, voluntary wellness and employee assistance programs, life insurance, disability, retirement plans with matching, and generous paid time off.

Position Summary:

The Federal Cloud Security Engineer supports InEight's regulated cloud environments, including FedRAMP-authorized and IRAP-assessed platforms hosted in Microsoft Azure. This role is responsible for vulnerability management, security monitoring, compliance activities, and cloud security operations that help ensure the ongoing security and regulatory compliance of our government-regulated environments.

The Federal Cloud Security Engineer partners with engineering, DevOps, auditors, and security stakeholders to implement security controls, manage vulnerabilities, and support annual assessments. They will continuously improve the organization's security posture while maintaining secure cloud infrastructure. This position supports global teams and regulated environments across multiple regions; flexibility to accommodate meetings, project activities, and occasional operational support outside traditional business hours is expected.

This position plays a critical role in supporting both ongoing Continuous Monitoring (ConMon) activities and IRAP compliance initiatives.

Duties & Responsibilities:

• Manage vulnerability scanning, remediation efforts, and security findings using Tenable and other security tools.
• Support ongoing FedRAMP and IRAP Continuous Monitoring (ConMon) activities to maintain regulatory compliance.
• Monitor, investigate, and respond to security events using Microsoft Sentinel, Microsoft Defender, and related technologies.
• Support security assessments, audits, and annual compliance reviews by collecting evidence and maintaining required documentation.
• Implement and maintain security controls, secure configurations, and cloud security best practices within Microsoft Azure and Azure Government environments.
• Participate in incident response, risk assessments, change management reviews, and corrective action planning.
• Collaborate with engineering, DevOps, auditors, and compliance stakeholders to address findings and improve security posture.
• Support the day-to-day operation, maintenance, and continuous improvement of regulated cloud environments.
• Participate in required after-hours support activities, including incident response, maintenance windows, compliance audits, and collaboration with globally distributed teams (20% per month).

Requirements & Qualifications:

• 5+ years of experience in Information Technology, Cyber Security, Cloud Security, Infrastructure Engineering, or a related technical field.
• 3+ years of hands-on experience supporting FedRAMP-authorized, IRAP-assessed, or other government-regulated environments preferred.
• Bachelor's degree in Computer Science, Information Technology, Cyber Security, or a related field, or equivalent experience preferred
• Experience administering and securing Microsoft Azure environments.
• Experience with vulnerability management platforms such as Tenable.
• Experience with security monitoring and incident response tools, including Microsoft Sentinel, Microsoft Defender, or similar technologies.
• Knowledge of security frameworks and compliance standards such as NIST 800-53, FedRAMP, IRAP, ISO 27001, or similar.
• Experience supporting audits, assessments, or regulatory compliance activities.
• Understanding of vulnerability remediation, risk management, and security best practices.
• Strong written and verbal communication skills with the ability to work effectively across technical and non-technical teams.
• Relevant certifications such as Security+, AZ-500, CISSP, or CCSP are a plus.
• Experience supporting FedRAMP, government cloud, or other regulated environments is preferred.

InEight Inc. is an Equal Opportunity Employer, (EOE) and will consider all applications without regard to race, marital status, sex, age, color, religion, national origin, veteran status, disability or any other characteristic protected by law.