Cloud Security Engineer - Public Sector, IT Operations

BDO USA, P.C. • Mclean, VA

2d • $105,000 - $120,000

About The Position

The Cloud Security Engineer plans, implements, upgrades, and monitors security measures that protect the organization’s cloud-based platforms and related data. The role analyzes existing cloud infrastructure and implements security designs and methodologies, applying best practices that meet or exceed FedRAMP, NIST, and CMMC requirements. It focuses on secure configuration and deployment of Microsoft GCC High and other services that support business operations, while maintaining high-performing and reliable technology services for the firm’s mission.

The role collaborates with Public Sector and BDO National IT teams, security operations professionals, and other staff. It leads vulnerability remediation and the Incident Response Team, contributes to audit-readiness documentation, and may direct staff’s day-to-day activities and workload as needed. The position requires at least three years of IT systems security support or incident response experience. A high school diploma or GED is required; a relevant bachelor’s degree and listed Microsoft/Azure certifications are preferred. The role may require work after standard business hours and travel as needed.

Requirements

• High school diploma or GED.
• Three or more years of experience providing IT systems security support or incident response.
• Proficiency with Microsoft Intune, Entra ID/Azure AD, Microsoft 365 Admin Center, and Microsoft Defender for Endpoint.
• Strong verbal and written communication skills.
• Excellent interpersonal and customer relationship skills.
• Ability to work in a deadline-driven environment, manage multiple complex projects or tasks simultaneously, and maintain attention to detail.
• Ability to multitask while working independently or within a group.
• Familiarity with regulatory policies such as PCI, HIPAA, and GLBA as they relate to data security and IT policies, procedures, and standards.
• Basic awareness of PCI-DSS, ISO 2700x, FISMA, and other industry-recommended security frameworks.
• Strong understanding of security breach detection and mitigation.
• Ability to use experience and judgment to plan and accomplish goals.
• Ability to work well under pressure and handle unexpected issues professionally.
• Ability to communicate and interact with employees and management at all levels.
• Ability to interact and build consensus among people.
• Ability to work after standard business hours and travel as needed.
• Ability to design capabilities to find solutions to less common and more complex system problems.

Nice To Haves

• Bachelor’s degree in Cloud Computing, Information Technology, Information Science, Informatics, or Information Systems.
• SC-100 – Microsoft Certified Cybersecurity Architect Expert.
• AZ-305 – Azure Solutions Architect Expert.
• AZ-500 – Azure Security Engineer Associate.
• Proficiency with Microsoft Office Suite.
• Proficiency with Power BI, Apple Business Manager, and macOS and iOS management via Intune.

Responsibilities

• Collaborate with Public Sector and BDO National IT teams on standards, configuration recommendations, and secure management practices for Microsoft 365 GCC High services, including Office, Entra ID, Intune, Defender, and Purview.
• Institute identity, device, and access management policies using Zero Trust principles and security baselines.
• Review configuration management, testing, profiling, and assessment results to address vulnerabilities, misconfigurations, and access risks.
• Implement, maintain, and monitor backup and disaster recovery strategies for the Microsoft 365 environment.
• Participate in the Change Control Board.
• Monitor and investigate emerging cyber threats in the BDO Public Sector cloud environment and recommend and implement defensive actions with staff.
• Contribute to System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), and other audit-readiness artifacts.
• Maintain and enhance security alerts to reduce false positives.
• Lead remediation efforts for vulnerabilities in cloud resources.
• Lead the Incident Response Team, including monitoring for and determining Indicators of Compromise.
• Collaborate with security operations professionals to analyze triaged security alerts and determine escalation and remediation paths.
• Design and implement security technologies in a GCC High tenant, including MFA, FIDO2, endpoint detection and response (EDR), and mobile device management (MDM).
• Align enterprise IT planning with cybersecurity risk management strategies using NIST SP 800-171 and other applicable frameworks.
• Perform and report phishing testing and develop necessary training.
• Escalate critical issues to management.
• Document and maintain policies and procedures.
• Direct staff’s day-to-day activities and workload as needed.
• Perform other duties as required.

Benefits

• BDO describes its Total Rewards offerings as including comprehensive compensation and benefits, subject to eligibility requirements.
• Employee Stock Ownership Plan (ESOP), providing participants beneficial ownership and a stake in the firm’s success.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: High school or GED