[Remote] Cloud Infrastructure & Security Engineer

Note The job is a remote job and is open to candidates in USA. SOLID, Inc. is seeking a Cloud Infrastructure & Security Engineer to support its corporate operations and federal programs. This hands-on individual contributor will design, administer, secure, automate, and continuously improve Microsoft Azure infrastructure while supporting DoD RMF, ATO activities, cybersecurity compliance, cloud operations, and stakeholder collaboration.

Responsibilities

Design, implement, administer, and optimize secure, scalable, resilient, and supportable Microsoft Azure infrastructure across corporate and program-specific environments Manage Azure computing resources, virtual machines, virtual networks, storage, cloud identity services, firewalls, VPN connectivity, load balancing, backup services, and monitoring solutions Configure and maintain Azure subscriptions, resource groups, networking, identity integration, access controls, and platform services Administer and integrate Microsoft Entra ID, Microsoft 365, endpoint management, and other enterprise services with Azure infrastructure, including identity management, authentication, access control, and secure connectivity Implement and maintain Infrastructure as Code (IaC) solutions using technologies such as Terraform, Azure Bicep, or ARM templates to support consistent and repeatable infrastructure deployments Perform cloud resource provisioning, configuration management, patching, upgrading, monitoring, troubleshooting, backup validation, and capacity planning Develop scripts, automation, and repeatable processes using PowerShell, Python, or comparable technologies to improve infrastructure deployment, configuration, monitoring, evidence collection, and administration Implement and maintain cloud backup, disaster recovery, business continuity, and Continuity of Operations capabilities, including documentation, periodic testing, and corrective actions Configure and maintain Azure monitoring, logging, and alerting solutions to proactively identify performance, availability, security, and operational issues Evaluate Azure resource utilization, performance, security, reliability, and costs; recommend improvements to resource sizing, architecture, availability, and operational efficiency Maintain cloud architecture documentation, system inventories, network and data-flow diagrams, configuration records, operating procedures, and infrastructure deployment documentation Design, implement, maintain, assess, and document cybersecurity controls across Microsoft Azure infrastructure and hosted environments in accordance with organizational and applicable federal cybersecurity

requirements

Lead and support technical RMF activities throughout the system lifecycle, including security control implementation, assessment, authorization, and continuous monitoring Develop, maintain, and coordinate ATO packages and supporting cybersecurity documentation, including System Security Plans (SSPs), control implementation statements, Azure architecture and data-flow diagrams, configuration evidence, Plans of Action and Milestones (POA&Ms), and related security artifacts Work with cybersecurity personnel, system owners, government stakeholders, and assessors to prepare systems for authorization, address assessment findings, support ATO submissions, and maintain documentation throughout the authorization lifecycle Implement and document security controls under NIST SP 800-53, NIST SP 800-171, DoD RMF, and other applicable federal cybersecurity frameworks Implement and maintain Azure security configurations, identity and access controls, multifactor authentication, role-based access control (RBAC), least-privilege access, secure network segmentation, encryption, and secure configuration baselines Configure and maintain cloud security capabilities using Microsoft Entra ID, Microsoft Defender for Cloud, Azure Policy, and comparable security technologies Perform system hardening and manage vulnerability identification, prioritization, remediation, validation, and reporting across Azure infrastructure and hosted environments Review security scans, alerts, logs, and configuration findings; investigate potential security issues, coordinate corrective actions, and support incident response and remediation Maintain audit-ready technical documentation and continuous monitoring evidence, including security control validation, configuration records, vulnerability remediation records, and POA&M updates Coordinate security assessments, penetration testing, tabletop exercises, internal audits, and customer or third-party reviews Support the secure storage, processing, and transmission of Controlled Unclassified Information (CUI), Personally Identifiable Information (PII), and other sensitive data Evaluate proposed Azure services, infrastructure changes, and integrations for security, compliance, operational, and architectural impacts Collaborate with software engineering, DevOps, and cybersecurity teams to design and maintain Azure environments supporting application development, testing, deployment, and production operations Support the integration of infrastructure provisioning, configuration management, security validation, and monitoring into CI/CD pipelines and automated deployment workflows Gather and analyze operational, business, cybersecurity, and technical

requirements

and translate them into practical Azure infrastructure and security solutions Coordinate with cybersecurity personnel and program stakeholders to ensure infrastructure designs, deployments, and system changes align with applicable RMF and ATO

requirements

Evaluate Azure technologies, platform services, and architectural approaches to improve system reliability, scalability, security, maintainability, and cost effectiveness Coordinate with internal departments, government customers, vendors, and external service providers regarding cloud infrastructure requirements, system changes, technical issues, and compliance activities Communicate technical risks, operational constraints, architectural recommendations, and alternative solutions clearly to technical and nontechnical stakeholders Perform other related duties as organizational and program needs require

Skills

• Strong knowledge of Microsoft Azure infrastructure, cloud computing, systems administration, cloud networking, identity and access management, vulnerability management, and cybersecurity fundamentals
• Working knowledge of Azure compute, networking, storage, identity services, logging and monitoring, backup, virtualization, firewalls, VPN technologies, and endpoint security
• Strong understanding of federal cybersecurity requirements, particularly DoD RMF, NIST security controls, and the ATO lifecycle
• Ability to develop, maintain, and organize accurate, complete, and audit-ready ATO documentation and technical security evidence
• Experience with PowerShell, Python, or comparable scripting and automation technologies; familiarity with Infrastructure as Code, configuration management, and DevSecOps practices
• Ability to diagnose complex infrastructure and cybersecurity problems, identify root causes, implement sustainable solutions, and independently manage competing priorities
• Excellent organizational, analytical, communication, technical writing, and documentation

skills

Ability to communicate technical and cybersecurity

requirements

• effectively to engineering teams, government stakeholders, and nontechnical personnel Bachelor's degree in computer science, information technology, cybersecurity, engineering, or a related discipline. An equivalent combination of education, certifications, training, and experience may be considered Seven or more years of progressively responsible experience in cloud infrastructure, systems engineering, cloud administration, cybersecurity engineering, or a closely related field, including substantial hands-on experience deploying and administering Microsoft Azure environments Demonstrated experience designing, implementing, administering, and securing production infrastructure within Microsoft Azure
• Strong working knowledge of Azure infrastructure services, including virtual machines, virtual networking, storage, identity and access management, network security, monitoring, backup, and disaster recovery Hands-on experience with Microsoft Entra ID, including identity management, authentication, access controls, and integration with Azure infrastructure
• Experience implementing and maintaining infrastructure through automated deployment or Infrastructure as Code technologies, such as Terraform, Azure Bicep, or ARM templates
• Experience developing scripts or automated workflows using PowerShell, Python, or comparable technologies
• Experience implementing or assessing technical security controls under NIST SP 800-53, NIST SP 800-171, RMF, CMMC, FedRAMP, FISMA, or comparable federal cybersecurity

requirements

Demonstrated experience directly supporting RMF and ATO activities, including developing or maintaining security documentation, technical control implementation statements, assessment evidence, POA&Ms, and other authorization-related artifacts Strong troubleshooting, technical documentation, communication, and stakeholder engagement

skills

United States citizenship and current CompTIA Security+ (or higher) certification at the time of hire Ability to obtain and maintain a government security clearance and satisfy applicable DoD 8140 qualification

requirements

Ability to support occasional maintenance, incident response, or system restoration activities outside normal business hours Experience supporting Microsoft Azure Government or other cloud environments subject to federal cybersecurity

requirements

• Experience supporting systems operating under a DoD ATO, including initial authorization, reauthorization, and continuous monitoring activities
• Experience designing or migrating enterprise infrastructure and applications to Microsoft Azure
• Experience with Terraform, Azure Bicep, ARM templates, Ansible, or comparable infrastructure automation technologies
• Experience with Azure DevOps, GitHub Actions, or comparable CI/CD and infrastructure deployment technologies
• Experience with containerization, container orchestration, and cloud-native application hosting technologies, including Azure Kubernetes Service (AKS)
• Experience with Microsoft Defender for Cloud, Microsoft Sentinel, Azure Policy, cloud security posture management, SIEM, EDR, or automated compliance monitoring tools
• Experience with hybrid cloud architectures and secure connectivity between Azure and on-premises infrastructure
• Experience supporting CMMC assessments or implementing NIST SP 800-171

requirements

Experience with AWS or AWS GovCloud infrastructure and security, particularly in environments utilizing multiple cloud platforms Relevant certifications such as Microsoft Azure Administrator Associate, Azure Solutions Architect Expert, Azure Security Engineer Associate, CISSP, or comparable cloud and cybersecurity certifications Benefits 100% employee ownership through our ESOP Comprehensive medical, dental, and vision coverage Generous PTO policy with 11 paid holidays annually Paid family leave 401(k) retirement plan Monthly reimbursement for high-speed internet Fully remote work with flexible scheduling Sponsored professional development and training A fun and inclusive culture with regular virtual team events Company Overview SOLID is an employee-owned small business with over 20 years of experience providing policy research, analysis, and transformative information technology solutions for numerous government and private sector clients. It was founded in 2003, and is headquartered in Fairfax, Virginia, USA, with a workforce of 51-200 employees. Its website is https//solidinfodesign.

com.