Information Security Sr. Principal (Azure Security Senior Engineer)

General Dynamics Information Technology • Washington, DC

6d • $148,750 - $201,250 • Hybrid

About The Position

Join a team supporting federal civilian agencies and contribute to protecting and enabling mission‑critical systems that serve U.S. citizens. This role involves supporting government personnel in authorizing secure networks/applications in Azure Government Secret environments, developing and submitting A&A packages in eMASS, and configuring/managing security controls, auditing, logging, vulnerability management, and CONMON activities across Microsoft Defender, Key Vault, Azure Policy, and other Azure security services. The position also provides guidance for SIEM/SOAR integrations (e.g., Microsoft Sentinel IL6) for monitoring, logging, and incident response, and supports engineering teams in implementing remediations aligned with NIST 800‑53, DoD STIGs/SRGs, and CIS Benchmarks. Collaboration with mission owners, compliance teams, and developers is key to ensuring secure DevSecOps pipelines. The role supports ATO processes by developing security documentation, gathering control evidence, and assisting with audits, while navigating federal systems through the authorization process to achieve and maintain ATO. The Information Security Sr. Principal will work closely with Program and DOC ITD IA teams to maintain required security authorizations, develop System Security Plans (SSPs) documenting implementation of NIST 800‑53 Rev 5 and overlay controls, and coordinate with third‑party assessors for security assessments. Responsibilities include managing POA&Ms to address identified vulnerabilities, ensuring continuous monitoring plans meet agency requirements, preparing authorization packages for government review, and maintaining compliance through established change‑management processes. The role serves as a liaison between technical teams and authorizing officials, translating security requirements into actionable technical tasks, and ensuring all documentation meets federal information system requirements.

Requirements

• Bachelor’s degree in Information Systems Security, IT, or Networking
• Active Secret clearance
• 5+ years of cloud security experience, including 2+ years in Azure Government or DoD environments
• Strong knowledge of Azure-native security tools, IL6 data-handling, cloud networking, and architectural validation
• Experience with DoD SRG/STIG/CIS Benchmarks
• Hands-on experience with classified enclaves, hardened images, and enclave-to-enclave connectivity
• Deep experience with auditing, logging, vulnerability management, and secure configuration management
• Strong communication skills; customer-facing experience
• Knowledge of Agile software development
• Secret clearance required for start
• SCAP, STIGs, patching, eMASS, and related RMF tools
• Cybersecurity and A&A package development
• Experience obtaining ATOs and navigating the assessment/authorization process
• Experience across cybersecurity, information security, and IT security protocols and procedures
• 5 years of relevant experience (may vary based on training, certifications, or degree)
• Cloud security experience (Azure Government) and SIPRNet exposure
• Experience with internet, web, application, and network security techniques
• Experience working in federal environments
• Ability to work independently and remotely
• Active DoW 8570 IAT Level II/III (Security+, CISSP, CISM)

Nice To Haves

• Microsoft Azure Security Stack (Sentinel, Defender, Auditing)
• RMF for classified systems/applications
• Plan of Action & Milestones (POA&M) management
• Experience with GRC tools (CSAM, eMASS)

Responsibilities

• Support government personnel in authorizing secure networks/applications in Azure Government Secret environments
• Develop and submit A&A packages in eMASS
• Configure and manage security controls, auditing, logging, vulnerability management, and CONMON activities across Microsoft Defender, Key Vault, Azure Policy, and other Azure security services
• Provide guidance for SIEM/SOAR integrations (e.g., Microsoft Sentinel IL6) for monitoring, logging, and incident response
• Support engineering teams in implementing remediations aligned with NIST 800‑53, DoD STIGs/SRGs, and CIS Benchmarks
• Collaborate with mission owners, compliance teams, and developers to ensure secure DevSecOps pipelines
• Support ATO processes by developing security documentation, gathering control evidence, and assisting with audits
• Navigate federal systems through the authorization process to achieve and maintain ATO
• Work closely with Program and DOC ITD IA teams to maintain required security authorizations
• Develop System Security Plans (SSPs) documenting implementation of NIST 800‑53 Rev 5 and overlay controls
• Coordinate with third‑party assessors for security assessments
• Manage POA&Ms to address identified vulnerabilities
• Ensure continuous monitoring plans meet agency requirements
• Prepare authorization packages for government review
• Maintain compliance through established change‑management processes
• Serve as liaison between technical teams and authorizing officials
• Translate security requirements into actionable technical tasks
• Ensure all documentation meets federal information system requirements

Benefits

• Variety of medical plan options, some with Health Savings Accounts
• Dental plan options
• Vision plan
• 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match
• Full flex work weeks where possible
• Variety of paid time off plans, including vacation, sick and personal time, holidays
• Paid parental, military, bereavement and jury duty leave
• Short and long-term disability benefits
• Life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance

What This Job Offers

• Job Type: Full-time
• Career Level: Senior