Journeyman Cloud Security Engineer (Q Clearance)

ShorePoint, LLC; Las Vegas (NV); On-site; USD 150,000 - 190,000; Full time

Benefits offered by this job

144 hours PTO

11 holidays

Health insurance premium coverage 85%

401(k)

Continuing education

Certification maintenance & reimburse

Job summary

ShorePoint, LLC is seeking a Journeyman Cloud Security Engineer to strengthen the security posture across Azure, VMware VCF and on-premises infrastructure. This role supports Zero Trust and DevSecOps, enforcing compliance and secure architecture through automation and threat detection.

The position requires a DOE Q or DoD Top Secret clearance, a Bachelor’s degree, 5+ years of cybersecurity experience, and hands-on Azure security, IaC, and CI/CD expertise.

Qualifications

• Bachelor’s degree in Cybersecurity, CS, IS, Math, Engineering or related field.
• 5+ years of cybersecurity expertise and automation.
• Designing automated operations across IL2/IL3/IL4 environments using Azure Policy, VMWARE Auria and Gitlab.
• Experience with Microsoft Azure, including security and identity management.
• Develop and manage Infrastructure as Code (IaC) using Terraform, Bicep or ARM templates.
• Proficient with IaC tools (Terraform, Bicep) and automation scripting (PowerShell, Python).
• DoD cybersecurity frameworks (RMF, NIST 800-53, STIGs).
• Experience with CI/CD pipelines, Gitlab and security integration.
• Strong understanding of networking, firewalls and RBAC.
• Analyzing logs and security alerts and develop proactive countermeasures.
• Applicants must hold and maintain an active DOE Q Clearance or equivalent DoD Top Secret clearance at time of hire.

Responsibilities

• Serve as SME for cloud security incidents, coordinating with Cyber Operations and SCA teams.
• Integrate security scanning tools into CI/CD pipelines (e.g., Gitlab, SonarQube, Trivy).
• Support and enhance Zero Trust Architecture (ZTA) implementations, including Conditional Access, PIM and Identity Governance.
• Perform cloud compliance checks aligned with DoD and FedRAMP baselines (NIST 800-53, RMF).
• Monitor and manage cloud-native SIEM tools (e.g., Azure Sentinel, SPLUNK) and log analytics for threat detection and operational insights.
• Automate security and operational tasks through scripting and platform-native automation tools (e.g., Logic Apps, PowerShell, Python).
• Contribute to risk assessments, Authorization to Operate (ATO) documentation and policy enforcement strategies.
• Assist with token management, certificate renewal automation and credential lifecycle tasks.
• Support performance monitoring, system patching and endpoint protection across the cloud landscape.

Skills

Cybersecurity Expertise

Automation

Zero Trust

Azure Security

IaC

CI/CD

Security Logging

Python

Education

Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Mathematics, Engineering or related field

Tools

Terraform

Bicep

ARM templates

PowerShell

Python

GitLab

Azure Policy

VMware Auria

Azure AD

Kubernetes

Job description

Who We Are

ShorePoint is a fast-growing, industry-recognized and award-winning cybersecurity services firm focused on high-profile, high-threat public and private sector customers who demand experience and proven security models to protect their data. We embrace a “work hard, play hard” mentality and celebrate individual and company successes. We are passionate about our mission and going above and beyond to deliver for our customers, while fostering an environment that supports creativity, accountability, mission success, critical thinking and a desire to give back to our community.

Who We Are

ShorePoint is a fast-growing, industry-recognized and award-winning cybersecurity services firm focused on high-profile, high-threat public and private sector customers who demand experience and proven security models to protect their data. We embrace a “work hard, play hard” mentality and celebrate individual and company successes. We are passionate about our mission and going above and beyond to deliver for our customers, while fostering an environment that supports creativity, accountability, mission success, critical thinking and a desire to give back to our community.

The Perks

As recognized members of the Cyber Elite, we work together in partnership to defend our nation’s critical infrastructure while building meaningful and exciting career development opportunities in a culture tailored to the individual’s technical and professional growth. We are committed to the belief that our team members do their best work when they are happy and well cared for. In support of this philosophy, we offer a comprehensive benefits package, major carriers for healthcare providers. Highlighted benefits include 144 hours of PTO, 11 holidays, 85% of insurance premiums covered, a 401(k), continuing education, certification maintenance and reimbursement and more.

Who We’re Looking For

We are seeking a Journeyman Cloud Security Engineer with deep cybersecurity expertise and automation capabilities to strengthen the security posture across Azure, VMware VCF and on-premises infrastructure. This role supports Zero Trust and DevSecOps initiatives, enforces compliance and streamline operations through secure architecture design, automation and advanced threat detection. The Journeyman Cloud Security Engineer will play a critical role in securing cloud environments, supporting authorization efforts and integrating security throughout the development lifecycle. This is a unique opportunity to shape the growth, development and culture of an exciting and fast-growing company in the cybersecurity market.

What You’ll Be Doing

• Serve as Subject Matter Expert (SME) for cloud security incidents, coordinating with Cyber Operations and Security Control Assessor (SCA) teams.
• Integrate security scanning tools into CI/CD pipelines (e.g., Gitlab, SonarQube, Trivy).
• Support and enhance Zero Trust Architecture (ZTA) implementations, including Conditional Access, Privileged Identity Management (PIM) and Identity Governance.
• Perform cloud compliance checks aligned with DoD and FedRAMP baselines (NIST 800-53, RMF).
• Monitor and manage cloud-native SIEM tools (e.g., Azure Sentinel, SPLUNK) and log analytics for threat detection and operational insights.
• Automate security and operational tasks through scripting and platform-native automation tools (e.g., Logic Apps, PowerShell, Python).
• Contribute to risk assessments, Authorization to Operate (ATO) documentation and policy enforcement strategies.
• Assist with token management, certificate renewal automation and credential lifecycle tasks.
• Support performance monitoring, system patching and endpoint protection across the cloud landscape.

What You Need To Know

• Strong understanding of secure cloud architecture, Zero Trust principles and identity governance.
• Proficiency in integrating security tools into CI/CD pipelines and automating security workflows.
• Hands-on experience with cloud-native SIEM platforms and log analytics.
• Ability to support ATO documentation, compliance activities and enforcement of security policies.
• Skilled in scripting for security automation using platform-native tools and languages.

Must Have’s

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Mathematics, Engineering or a related field.
• 5+ years of experience in:
  • Cybersecurity Expertise and Automation.
  • Designing and implementing automated operations across IL2/IL3 / IL4 environments using tools like Azure Policy, VMWARE Auria and Gitlab.
  • Experience in Microsoft Azure, including security and identity management.
  • Develop and manage Infrastructure as Code (IaC) for repeatable, secure cloud deployments using Terraform, Bicep or ARM templates.
  • Proficient with IaC tools (Terraform, Bicep) and automation scripting (PowerShell, Python).
  • DoD cybersecurity frameworks (RMF, NIST 800-53, STIGs).
  • Experience with CI/CD pipelines, Gitlab and security integration.
  • Strong understanding of networking, firewalls and role-based access control (RBAC).
  • Analyzing logs and security alerts and develop proactive countermeasures.
• Proven ability to analyze complex requirements and translate them into clear, actionable tasks and processes through critical thinking.
• Applicants must hold and maintain an active DOE Q Clearance or equivalent DoD Top Secret clearance at time of hire.

Beneficial To Have The Following

• Master’s degree in Cybersecurity, Information Systems or a related technical discipline.
• Experience with cloud security architectures in AWS and Azure.
• Proficiency with containerization and orchestration technologies such as Docker and Kubernetes.
• Knowledge of DevSecOps best practices.

Where It’s Done

• Onsite (Washington, D.C.)