Infrastructure & Security Engineer

Job not on LinkedIn

🔥 0 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Solutions for Information Design, Inc.

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2003

💼 Consulting

⚖️ Legal

🏥 Healthcare

Consulting • Legal • Healthcare

Solutions for Information Design, Inc. is a company dedicated to strengthening the workforce by expanding pathways and increasing recognition of skills and abilities. The company develops cutting-edge solutions to meet the evolving needs of a changing talent marketplace, with particular focus on military service members, veterans, and their families. Their expertise includes research, reporting, implementation, application and software development, management consulting, and counseling support services. SOLID is committed to creating solutions and tools to help service members and veterans transition to civilian employment while promoting equity in hiring practices. They have been recognized for their dedication to veteran hiring and professional development, including receiving the Department of Labor’s HIRE Vets Platinum Medallion and becoming a Virginia Values Veterans Certified Company.

📋 Description

• Design, implement, administer, and improve secure, scalable, resilient, and supportable infrastructure across corporate and program environments • Manage cloud services, servers, virtual machines, networks, firewalls, identity platforms, endpoints, VPN services, backups, collaboration platforms, and monitoring tools • Perform provisioning, configuration, patching, upgrading, monitoring, troubleshooting, backup validation, capacity planning, and systems administration • Develop scripts, automation, and repeatable processes for deployment, configuration, monitoring, evidence collection, and administration • Maintain system documentation, inventories, diagrams, configuration records, operating procedures, and IT service management processes • Support disaster recovery, business continuity, and Continuity of Operations planning, documentation, testing, and corrective actions • Evaluate technologies and coordinate with vendors and service providers to improve performance, security, reliability, service quality, and cost effectiveness • Implement, maintain, assess, and document cybersecurity controls • Support RMF activities, including control implementation, assessment, authorization, and continuous monitoring • Develop and maintain ATO packages, security plans, control implementation statements, diagrams, configuration evidence, POA&Ms, and related artifacts • Perform system hardening and manage vulnerability identification, prioritization, remediation, validation, and reporting • Review scans, alerts, logs, and configuration findings; coordinate corrective actions and support incident investigation, containment, remediation, and lessons learned • Coordinate security assessments, penetration testing, tabletop exercises, internal audits, and customer or third-party reviews • Support secure handling of CUI, PII, and other sensitive information, including Zero Trust, least privilege, MFA, IAM, endpoint security, and permission reviews • Evaluate technologies, system changes, and integrations for security and compliance impacts • Gather and analyze requirements and translate them into practical infrastructure and security solutions • Collaborate with software engineers and DevOps personnel to incorporate security into development, deployment, integration, and CI/CD processes • Communicate technical risks, constraints, recommendations, and alternatives to technical and nontechnical stakeholders • Perform other related duties as organizational and program needs require

🎯 Requirements

• Bachelor's degree in computer science, information technology, cybersecurity, engineering, or related discipline • Equivalent combination of education, certifications, training, and experience may be considered • Seven or more years of progressively responsible experience in IT infrastructure, systems engineering, cloud administration, cybersecurity, or closely related field • Experience designing, implementing, administering, and securing enterprise infrastructure • Hands-on experience with Microsoft Azure or Azure Government, Microsoft 365 and Entra ID, AWS or AWS GovCloud, virtualization, networking, endpoint management, backup, and monitoring technologies • Experience implementing or assessing controls under NIST SP 800-53, NIST SP 800-171, RMF, CMMC, FedRAMP, FISMA, or comparable federal cybersecurity requirements • Experience developing or maintaining ATO documentation, security control evidence, POA&Ms, and audit-ready technical documentation • Strong troubleshooting, scripting or automation, communication, and stakeholder engagement skills • Strong knowledge of enterprise infrastructure, cloud computing, systems administration, networking, IAM, endpoint management, vulnerability management, and cybersecurity fundamentals • Working knowledge of IaaS and PaaS services, logging and monitoring, storage, backup, virtualization, firewalls, switching, routing, VPN technologies, and endpoint security • Ability to develop clear, accurate, and audit-ready technical and cybersecurity documentation • Experience with PowerShell, Python, or comparable scripting and automation technologies • Familiarity with infrastructure as code, configuration management, and DevSecOps practices • Ability to diagnose complex technical problems, identify root causes, implement sustainable solutions, and manage competing priorities independently • Excellent organizational, analytical, communication, technical writing, and documentation skills • United States citizenship • Current CompTIA Security+ (or higher) certification at time of hire • Ability to obtain and maintain a government security clearance • Ability to satisfy applicable DoD 8140 qualification requirements • Ability to support occasional maintenance, incident response, or system restoration activities outside normal business hours • Preferred: experience with DoD ATO, Azure Government, AWS GovCloud, NIPRNet, Terraform, Bicep, CloudFormation, Ansible, security scanning, EDR, SIEM, cloud security posture management, automated compliance tools, CMMC assessments, NIST SP 800-171, CISSP, or Microsoft Certified Azure certifications