Azure Government

Azure Government Engineer Jobs

3 jobs found

Today

Systems Engineer – Microsoft 365 Security & Compliance / Endpoint Security Engineer (GCC)

Leidos Washington, DC

Washington, DC

Today

$108k - $195k/yr Full time Senior Azure Azure Government

Apply Now

Job Description

Leidos is seeking a Senior Systems Engineer to secure and maintain compliance of Microsoft 365 and enterprise endpoints within a GCC tenant, leading governance, identity and device security, incident response, and risk management.

Responsibilities

Lead the development, implementation, and ongoing management of M365 security policies, standards, and technical guardrails aligned to federal requirements and organizational controls.
Own governance for data protection capabilities including document classification, labeling, retention, and Data Loss Prevention using Microsoft Purview.
Define and enforce email security policies such as encryption, sensitivity labeling, and secure mail flow to reduce unauthorized disclosure.
Implement and maintain email encryption solutions (S/MIME and/or Microsoft Information Protection) to protect confidentiality of email communications.
Administer and monitor anti-spam, anti-phishing, and anti-malware protections to defend against evolving threats.
Engineer and validate device-compliance based Conditional Access policies across Windows, macOS, and mobile platforms.
Investigate and remediate Conditional Access failures, identity anomalies, and external/guest access issues, including M365 B2B trust and secure partner collaboration requirements.
Design, test, and deploy Intune configuration and compliance policies for Windows, macOS, and iOS/iPadOS, including Enrollment Status Pages and OOBE workflows.
Develop remediation scripts (PowerShell and platform scripts) to close compliance gaps and enforce security baselines.
Coordinate enterprise rollout of urgent vulnerability mitigations and validated vendor fixes.
Support vulnerability reviews and baseline rebuilds.
Establish and operate a risk management approach to identify, assess, and mitigate security risks across the M365 ecosystem.
Support ATO control assessment activities by drafting implementation statements, collecting artifacts, and providing evidence aligned to audit and logging requirements.
Lead integration and operational management of Microsoft Defender and Microsoft Sentinel for threat detection, alerting, and response across M365.
Build and maintain SIEM integrations and ingestion pipelines for third-party logs (e.g., M365, collaboration and identity systems), including Azure Function Apps.
Tune audit retention, analytic rules, and alert logic to improve signal quality and investigation readiness.
Provide Tier 3 troubleshooting for device compliance failures, identity and access incidents, telemetry gaps, and OS or application protection issues.
Partner with cross-functional teams to align security solutions with business objectives, deliver technical leadership, and support enterprise syncs and operational reviews.
Stay current on Microsoft 365 security and compliance updates, industry trends, and emerging capabilities, driving improvements to security posture and operational efficiency, including the use of GCC Copilot where appropriate.

Requirements

Expert-level Intune engineering across Windows, macOS, iOS, and iPadOS.
Advanced PowerShell for remediation, automation, and OS image manipulation.
Deep experience with Microsoft Defender (XDR, Endpoint, Cloud Apps).
Hands-on with Sentinel SIEM, Function Apps, and cross-platform telemetry pipelines.
Strong understanding of CAP architecture and identity risk enforcement.
Experience with ATO control evidence, compliance mapping, and audit support.
Growth mindset and willingness to learn emerging security domains.
Strong cross-team collaboration with Cyber, Operations, Enterprise Architecture, ICAM, and Communications.
Excellent communication including clear summaries, user-impact translation, and documentation.
High reliability, ownership, and situational awareness during high-severity events.

Technologies

Microsoft 365 (GCC)
Microsoft Purview
Exchange Online
Entra ID
Conditional Access
Microsoft Intune
Microsoft Defender
Microsoft Sentinel
Azure Function Apps
Azure Log Analytics
PowerShell
S/MIME
Microsoft Information Protection
Graph API operations
Okta connectors
Jamf

Benefits

Competitive compensation
Health and Wellness programs
Income Protection
Paid Leave
Retirement

Day in the Life

Morning: Review Sentinel incidents, Defender telemetry gaps, and compliance drift; respond to overnight CAP failures, Slack EMM issues, or OS update regressions; join device and enterprise standups.
Midday: Build and test remediation scripts for CVE fixes, NTLM disablement, or compliance corrections; deploy or test Intune configuration profiles, ESP changes, or app protection updates; troubleshoot support cases with Microsoft Purview DSPM, Copilot logs, or Okta connectors.
Afternoon: Conduct cross-team investigations of external-user access anomalies and Teams forensics; validate CAP behaviors across platforms on test devices; work on ATO evidence packages and documentation.
End of Day: Update Jira tasks, Confluence documentation, and change requests; provide status updates on active investigations, mitigations, and test results.

View full job page →

1mo ago

Senior Cybersecurity Engineer

One Federal Solution Washington, DC

Washington, DC

1mo ago Closed

Full time Senior Azure Azure Cloud

This position is no longer accepting applications (closed Jul 21, 2026).

Job Description

One Federal Solution is seeking a Senior Cybersecurity Engineer to provide technical direction and lead planning across cybersecurity, cloud engineering, agile DevSecOps, AI/ML, and Zero Trust initiatives within federal mission environments. This onsite role in Washington, DC requires translating architectures into actionable plans and coordinating across contractor and stakeholder teams to deliver secure, compliant systems.

The position emphasizes turning complex security architectures into practical execution steps while guiding multi-disciplinary teams toward measurable outcomes in support of federal objectives.

Responsibilities

Provide overall technical direction across cybersecurity task areas, ensuring alignment with program goals and risk posture.
Lead technical planning and execution across cybersecurity, cloud engineering, agile DevSecOps, AI/ML, and Zero Trust initiatives, coordinating schedules, milestones, and cross-team dependencies.
Apply Federal, DHS, and IC cybersecurity architectures, standards, and technologies to guide design, implementation, and compliance.
Translate cybersecurity architectures, standards, technologies, and emerging practices into concrete technical plans, roadmaps, and measurable outcomes.
Oversee implementation of technical plans across contractor and stakeholder teams, ensuring quality, security, and timely delivery within federal requirements.

Requirements

Minimum 10 years of demonstrated cybersecurity engineering experience for projects of similar size and scope.
Knowledge of Federal, DHS, and IC cybersecurity architectures, standards, and technologies, with practical application in federal environments.
Knowledge of emerging cybersecurity practices and trends, including evolving threat landscapes and defensive strategies.
Active Top Secret/SCI clearance.
Mandatory certifications in AWS, CISSP, and Scrum practices, all in good standing at award and throughout the period of performance.

Technologies

Amazon Web Services (AWS)
Google
Microsoft Azure
Microsoft Office 365

View full job page →

1mo ago

Cybersecurity Engineer

Booz Allen Arlington, VA

Arlington, VA

1mo ago Closed

$87k - $198k/yr Full time Aws Govcloud Azure Government Cloud

This position is no longer accepting applications (closed Jul 3, 2026).

Job Description

Booz Allen seeks a Cybersecurity Engineer to operate, secure, and monitor cloud infrastructure while translating DoD requirements to technical teams and helping design cloud-based security for critical systems.

Responsibilities

Operate, secure, and monitor cloud infrastructure, including system hardening, patching, and vulnerability management.
Interpret DoD requirements from stakeholders and ensure technical solutions meet those standards.
Assist in developing cloud-based security architectures for mission-critical systems.

Requirements

5+ years of experience securing cloud infrastructure and applications in AWS GovCloud and Azure GCCH.
5+ years of experience with Authority to Operate (ATO) and DoD Cloud SRG requirements.
2+ years of experience with CMMC authorizations.
Knowledge of centralized logging, boundary defense, web application firewalls, system patching, RBAC, and vulnerability scanning.
Knowledge of compensating controls for a variety of use cases.
Secret clearance.
Bachelor’s degree.
DoD 8570 IAT Level II or IAT Level III certification.

Technologies

AWS GovCloud
Azure GCCH
PowerShell
Bash
Python

Benefits

Health benefits
Life insurance
Disability benefits
Financial benefits
Retirement benefits
Paid leave
Professional development
Tuition assistance
Work-life programs
Dependent care
Recognition awards program

The Opportunity

Secure cloud environments while supporting cloud adoption for large DoD software programs.
As a cloud security architect, assess and implement requirements to safeguard information systems against unauthorized access or destruction.
Leverage cloud security skills to strengthen one of the DoD's largest software factories.
Develop cloud-based security architectures for highly critical systems.
Operate, secure, and monitor cloud infrastructure, including hardening, patching, and vulnerability management.
Translate stakeholder DoD requirements to technical teams and verify compliance.
Apply cutting-edge cloud technologies to secure customer environments.
Advance automation of security events, cloud security, and zero-trust concepts while bolstering critical infrastructure.
Contribute to transforming and securing software delivery for a multirole warfighter ecosystem.

Nice If You Have

Experience with scripting languages, including PowerShell, Bash, or Python.
Experience documenting security assessments for diverse assessors.
Experience in cross-domain solutions.
Experience in multi-cloud deployments.
Knowledge of cybersecurity risk management processes and DoD security tools.
Knowledge of governance, risk, and compliance strategies and tools.
Trelix, ENS, and Tenable certifications.
AWS or Azure certifications.

Clearance

Secret clearance is required; eligibility to access classified information may be required.

Compensation

Projected compensation range: $86,800 to $198,000 USD per year.
Salary is determined by location, education, knowledge, skills, and experience, plus contract-specific factors.
Benefits include health, life, disability, financial, retirement, paid leave, professional development, tuition assistance, work-life programs, and dependent care.
Full-time and part-time employees working at least 20 hours per week on a regular basis are eligible for benefit programs; others may have access to select offerings.
Posting closes within 90 days from the posting date.

Identity Statement

As part of the hiring process, you may undergo identity verification using biometric and artificial intelligence measures. Interviews and assessments may require you to be on camera, and Booz Allen may capture your image to verify identity and prevent fraud.

Candidate AI Usage Policy

AI tools may be used in daily work at Booz Allen, but a fair candidate process is maintained by requiring explicit permission for using AI or other tools to assist with responses during interviews.

Work Model

Remote: Occasional in-person work at Booz Allen or customer facilities may be required.
Hybrid: Regular in-office presence at Booz Allen facilities with potential visits to customer facilities.
Onsite: Primary work at a Booz Allen office or customer facility, with collaboration on-site as required.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to disability, protected veteran status, or any other status protected by applicable law.

View full job page →

Azure Government Engineer Jobs

Systems Engineer – Microsoft 365 Security & Compliance / Endpoint Security Engineer (GCC)

Senior Cybersecurity Engineer

Cybersecurity Engineer

Get Azure Government Engineer Jobs alerts