Solutions for Information Design, Inc.

Security Engineer

• Design, implement, administer, and improve secure, scalable, resilient, and supportable infrastructure across corporate and program environments
• Manage cloud services, servers, virtual machines, networks, firewalls, identity platforms, endpoints, VPN services, backups, collaboration platforms, and monitoring tools
• Perform provisioning, configuration, patching, upgrading, monitoring, troubleshooting, backup validation, capacity planning, and systems administration
• Develop scripts, automation, and repeatable processes for deployment, configuration, monitoring, evidence collection, and administration
• Maintain system documentation, inventories, diagrams, configuration records, operating procedures, and IT service management processes
• Support disaster recovery, business continuity, and Continuity of Operations planning, documentation, testing, and corrective actions
• Evaluate technologies and coordinate with vendors and service providers to improve performance, security, reliability, service quality, and cost effectiveness
• Implement, maintain, assess, and document cybersecurity controls
• Support Risk Management Framework activities, including control implementation, assessment, authorization, and continuous monitoring
• Develop and maintain ATO packages, security plans, control implementation statements, network and data-flow diagrams, configuration evidence, POA&Ms, and related artifacts
• Perform system hardening and manage vulnerability identification, prioritization, remediation, validation, and reporting
• Review security scans, alerts, logs, and configuration findings; coordinate corrective actions and support incident investigation, containment, remediation, and lessons learned
• Coordinate security assessments, penetration testing, tabletop exercises, internal audits, and customer or third-party reviews
• Support secure handling of CUI, PII, and other sensitive information, including Zero Trust, least privilege, MFA, identity and access management, endpoint security, and permission reviews
• Evaluate proposed technologies, system changes, and integrations for security and compliance impacts
• Gather and analyze operational, business, cybersecurity, and technical requirements and translate them into infrastructure and security solutions
• Collaborate with software engineers and DevOps personnel to incorporate security into development, deployment, system integration, and CI/CD processes
• Communicate technical risks, constraints, recommendations, and alternatives to technical and nontechnical stakeholders
• Perform other related duties as organizational and program needs require

Infrastructure & Security Engineer

Cloud Engineer

• Design, implement, administer, and optimize secure, scalable, resilient, and supportable Microsoft Azure infrastructure across corporate and program-specific environments
• Manage Azure computing resources, virtual machines, virtual networks, storage, cloud identity services, firewalls, VPN connectivity, load balancing, backup services, and monitoring solutions
• Configure and maintain Azure subscriptions, resource groups, networking, identity integration, access controls, and platform services
• Administer and integrate Microsoft Entra ID, Microsoft 365, endpoint management, and other enterprise services with Azure infrastructure
• Implement and maintain Infrastructure as Code solutions using Terraform, Azure Bicep, or ARM templates
• Perform cloud resource provisioning, configuration management, patching, upgrading, monitoring, troubleshooting, backup validation, and capacity planning
• Develop scripts, automation, and repeatable processes using PowerShell, Python, or comparable technologies
• Implement and maintain cloud backup, disaster recovery, business continuity, and Continuity of Operations capabilities
• Configure and maintain Azure monitoring, logging, and alerting solutions
• Evaluate Azure resource utilization, performance, security, reliability, and costs and recommend improvements
• Maintain cloud architecture documentation, system inventories, network and data-flow diagrams, configuration records, operating procedures, and infrastructure deployment documentation
• Design, implement, maintain, assess, and document cybersecurity controls across Microsoft Azure infrastructure and hosted environments
• Lead and support technical RMF activities throughout the system lifecycle, including security control implementation, assessment, authorization, and continuous monitoring
• Develop, maintain, and coordinate ATO packages and supporting cybersecurity documentation, including SSPs, control implementation statements, diagrams, configuration evidence, POA&Ms, and related security artifacts
• Work with cybersecurity personnel, system owners, government stakeholders, and assessors to prepare systems for authorization and address assessment findings
• Implement and document security controls under NIST SP 800-53, NIST SP 800-171, DoD RMF, and other applicable federal cybersecurity frameworks
• Implement and maintain Azure security configurations, identity and access controls, multifactor authentication, RBAC, least-privilege access, network segmentation, encryption, and secure configuration baselines
• Configure and maintain Microsoft Entra ID, Microsoft Defender for Cloud, Azure Policy, and comparable security technologies
• Perform system hardening and manage vulnerability identification, prioritization, remediation, validation, and reporting
• Review security scans, alerts, logs, and configuration findings; investigate potential security issues and support incident response and remediation
• Maintain audit-ready technical documentation and continuous monitoring evidence
• Coordinate security assessments, penetration testing, tabletop exercises, internal audits, and customer or third-party reviews
• Support secure storage, processing, and transmission of CUI, PII, and other sensitive data
• Evaluate proposed Azure services, infrastructure changes, and integrations for security, compliance, operational, and architectural impacts
• Collaborate with software engineering, DevOps, and cybersecurity teams to design and maintain Azure environments supporting application development, testing, deployment, and production operations
• Support integration of infrastructure provisioning, configuration management, security validation, and monitoring into CI/CD pipelines and automated deployment workflows
• Gather and analyze operational, business, cybersecurity, and technical requirements and translate them into Azure infrastructure and security solutions
• Coordinate with cybersecurity personnel and program stakeholders to align infrastructure designs, deployments, and system changes with RMF and ATO requirements
• Evaluate Azure technologies, platform services, and architectural approaches to improve reliability, scalability, security, maintainability, and cost effectiveness
• Coordinate with internal departments, government customers, vendors, and external service providers regarding cloud infrastructure requirements, system changes, technical issues, and compliance activities
• Communicate technical risks, operational constraints, architectural recommendations, and alternative solutions to technical and nontechnical stakeholders

Infrastructure & Security Engineer

Cloud Infrastructure, Security Engineer