Senior Azuer Cyber Engineer

Leidos•Bedford, MA

1d•$107,900 - $195,050•Onsite

About The Position

Leidos was awarded the U.S. Air Force Cloud One Architecture and Common Shared Services contract and currently has an opening for a Senior Azure Cyber Engineer supporting Azure cloud environments. This is an exciting opportunity to use your experience to modernize a leading, global-scale multi-cloud environment in support of a critical mission, supporting USAF system resiliency, security, and cost effectiveness. This position will be full-time onsite and may require travel to support customer or corporate meetings near Hanscom AFB (Boston, MA).

Requirements

Bachelors and 8+ years of prior relevant experience or Masters with 6+ years of prior relevant experience or equivalent experience.
Must have 6+ years of relevant experience supporting cloud-hosted systems and/or applications.
Must possess an active DoD Secret security clearance.
U.S. citizenship is required due to contract requirements.
Certifications: DoD 8570/8140 IAT Level II baseline certification (e.g., Security+ CE, CySA+, or equivalent)
Microsoft Certified: Azure Security Engineer Associate (AZ-500) or equivalent
ACAS Certified – Operator and Supervisor
Hands-on experience with KQL, Log Analytics, Defender for Cloud, and DISA STIGs

Nice To Haves

Experience with USAF Cloud One or Platform 1
Experience with automation/tools like EvalSTIG, STIG Manager, Ansible etc.
Experience with Zero Trust Architecture
Linux (RHEL) and/or Microsoft Windows Server administration certifications
Certifications: CISSP or equivalent (IAT-3)

Responsibilities

Design, deploy, configure, operate, and maintain authorizations and accreditation of the C1 Architecture for Microsoft Azure SIPRNet environments.
Serve as Subject Matter Expert (SME) for all IT stakeholders involved with system design, system builds, and Authority to Operate (ATO) efforts on cybersecurity requirements and tooling.
Operate, configure and maintain various compliance tools/services including ACAS/Nessus scanners; Microsoft Defender; Microsoft Sentinel data connectors to detect misconfigurations and threats; and other Cloud Native Services.
Monitor and query various logging and event monitoring tools/services including Azure Monitor; Log Analytics Workspaces; Network Watcher; and other Cloud Native Services.
Document technical mitigation details, compile raw scan exports, generate vulnerability reports, create and maintain system Plan of Action and Milestones (POA&M).
Continuously monitor system resources through automated scanning and implement automated reporting feeds to support cybersecurity authorizations.
Ensure compliance with SCCA, Cloud Computing SRG, and other STIG/SRG requirements.
Create RMF-required authorization-related documentation and artifacts and support ATO sustainment activities.
Verify patch compliance using the approved technical solutions and conduct remediation activities.
Provide and execute a plan for enterprise vulnerability and compliance scanning.
Implementation of security procedures, and verify information system security requirements, including coordinating the execution, review, and disposition of STIG checklists for systems, applications, developed code and other components.
Participate in regular briefings with the customer on cybersecurity status, including preparing briefing materials
Prepare detailed technical documentation to support development and operational processes
Collaborate with team members and provide mentorship to junior staff, fostering a learning environment