Senior GCC High Cloud Security Architect (CMMC 2.0)

Two Five; Washington (District of Columbia); On-site; USD 180,000 - 240,000; Full time

Job summary

Two Five Solutions seeks a senior cloud security architect to own GCC High and Azure Government environments. You will be the final technical authority for DIB clients, translating controls into configurations and producing assessment evidence.

Role emphasizes hands-on delivery, not policy writing or Tier 1 support, with responsibilities spanning design, implementation, and runbook creation for compliant CUI boundaries.

Qualifications

• : 5+ years administering Microsoft 365 and Azure in a managed services, systems engineering, or internal IT engineering role.
• : Hands-on GCC High experience with feature availability, licensing, tenant configuration, and external collaboration
• : Entra ID: Conditional Access policy design, Privileged Identity Management, identity lifecycle
• : Intune/Autopilot: device enrollment, configuration profiles, compliance policies
• : Defender/Sentinel: data connectors, analytics rules, alert triage, basic KQL
• : Azure infrastructure: subscriptions, management groups, RBAC, VNet, NSG
• : Knowledge of NIST SP 800-171 at the control level
• : Clear written communication for clients and assessors

Responsibilities

• Provide final technical authority across DIB client base for GCC High environments
• Lead POA&M remediation and control engineering under NIST SP 800-171
• Design, implement, and integrate new GCC High/Azure Government environments
• Produce evidence artifacts for C3PAO interviews and assessments
• Document runbooks and implementation statements for each environment

Skills

Microsoft 365

Azure

GCC High

Entra ID

Intune/Autopilot

Defender/Sentinel

NIST SP 800-171

Written communication

Tools

Microsoft 365

Azure

Entra ID

Intune

Autopilot

Microsoft Defender

Microsoft Sentinel

Azure Policy

Job description

Two Five Solutions seeks a senior cloud security architect to own GCC High and Azure Government environments. You will be the final technical authority for DIB clients, translating controls into configurations and producing assessment evidence.

Role emphasizes hands-on delivery, not policy writing or Tier 1 support, with responsibilities spanning design, implementation, and runbook creation for compliant CUI boundaries.