L2 Cloud Infrastructure Engineer in Shreveport, LA

Virtual Service Operations • Shreveport, LA

19m • Onsite

About The Position

VSO seeks an experienced L2 Cloud Infrastructure Engineer for the secure Azure GCC-H environment. Provides 24×7 support for STIG-compliant infrastructure, security operations, and NIST 800-171/CMMC Level 2 compliance with 1-hour response time requirements.

Requirements

• Azure GCC-H experience with STIG compliance, NIST 800-171 controls, and CMMC Level 2 requirements
• Azure Virtual Desktop (AVD), FSLogix profiles, session hosts, and PKI certificate/smart card authentication (IdenTrust or similar)
• Microsoft Sentinel SIEM, Defender XDR, security incident response, and vulnerability management with CVSS prioritization
• Azure infrastructure: VMs, VNets, NSGs, Firewall, VPN Gateways, Storage, Key Vault, Monitor, and Log Analytics
• Infrastructure as Code (PowerShell and/or Terraform) and Entra ID including Conditional Access and PIM
• Understanding of ITAR/EAR export control requirements for defense contractors
• Must be within driving distance of Shreveport, LA and willing to work onsite
• Please note that pursuant to a government contract, this specific position requires U.S. citizenship status.
• 3+ years Azure cloud infrastructure and 2+ years security compliance experience (NIST, CMMC, STIG)
• Experience supporting defense, government, or highly regulated industries
• Eligible for security clearance (background check required); flexible 24×7 shift availability
• Strong documentation and communication skills for compliance and audit coordination

Nice To Haves

• CMMC Certified Professional (CCP), CompTIA Security+/CySA+/CASP+, or Terraform certification
• Experience with ITIL, ITSM tools (Jira Service Management), SCAP scanning, or SCCM/Intune
• Working knowledge of Oracle Simphony 2 POS systems (WS625x and WS8 workstations)
• Experience supporting self-service kiosks: Qikserve and XPR platforms (Zivelo, ELO, Pyramid, Acrelec)
• Proficiency with Cisco Meraki network infrastructure (wireless access points, switches, security appliances)

Responsibilities

• Deploy and maintain STIG-compliant Azure VMs, Azure Virtual Desktop (AVD) environments, and endpoint devices in Azure GCC-H
• Manage IdenTrust PKI operations: certificate lifecycle, token provisioning, MFA troubleshooting, and smart card authentication
• Implement RBAC in Azure/Entra ID including user lifecycle management, quarterly access reviews, and Privileged Identity Management (PIM)
• Monitor and respond to Microsoft Sentinel SIEM and Defender XDR security alerts within 1-hour SLA; perform incident response and root cause analysis
• Execute CVSS-based patch management across Dev/Test/Prod environments (Emergency: 7d, Critical: 20d, High: 40d, Medium: 60d)
• Maintain Azure infrastructure: VNets, NSGs, VPN gateways, firewalls, storage accounts, and Key Vault services
• Document NIST 800-171/CMMC Level 2 compliance requirements with artifacts, screenshots, and configuration evidence for security plans and audits
• Coordinate with OEM vendors and Microsoft support; maintain change logs; participate in weekly ISSM reviews and on-call rotation

Benefits

• As part of the VSO company, you will be part of a virtue-centered team who value their work and teammates.
• We provide ongoing learning and development opportunities to foster continuous growth.
• We offer a wide variety of benefits for eligible employees related to health, retirement, professional development, and more!

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed
• Number of Employees: 501-1,000 employees