Azure Security Subject Matter Expert (SME) - ERP International
Laurel, MD
About the Job
ERP International is seeking a highly experienced Azure Security SME to support the Defense Information Systems Agency (DISA) in implementing cloud infrastructure for a software modernization project. The primary focus will be on securing and accrediting Azure FISMA High cloud DevSecOps environments. The ideal candidate will have a strong background in cloud security, compliance with DoD regulations, and hands-on experience with Azure.
Job Location: On customer site ( Ft. Meade, MD) with telework options.
Be the Best! ERP International is honored to be named a 2024 Top Workplace by The Washington Post! 5 Years Running
ERP Offers Employees:
* Competitive Salaries & Benefits!
* Health Advocate & Concierge Services!
* Unlimited Job- Related Training & Development!
* Employee Recognition & Incentive Programs!
* Employee Appreciation & Company Sponsored Events!
* Opportunity to work with leading edge technology!
* Community Outreach & Charity Work!
Connect With Us! Apply on-line today and discover more about this exceptional employment opportunity. www.erpinternational.com
At ERP International, we believe that diversity fuels success and creates a stronger team. We are dedicated to creating a diverse and inclusive workforce where individuals of all races, genders, ages, religions, and identities can thrive. Our culture empowers all employees “to be the best” and bring their authentic selves to work, share their perspectives, and make an impact. Our commitment to diversity and inclusion, and to fostering an environment where diverse ideas are celebrated and voices are heard, is central to who we are.
ERP International is an EEO and Affirmative Action Employer of Females/Minorities/Veterans/Individuals with Disabilities.
ERP International is committed to providing veteran employment opportunities to our service men and women.
Pay Range: $155,000 - $200,000
The salary range for this position is determined based on a variety of factors, including but not limited to, experience, qualifications, skill level, and location. The final salary offer will fall within this range and will be commensurate with the candidate’s background and the specific demands of the role.
About ERP International, LLC: ERP is a nationally respected provider of health, science, and technology solutions supporting clients in the government and commercial sectors. We provide comprehensive enterprise information technology, strategic sourcing, and management solutions to DoD and federal civilian agencies in 40 states. Founded in 2006, ERP is headquartered in Laurel, MD and maintains satellite offices in Montgomery, AL and San Antonio, TX - plus project locations nationwide.
Responsibilities:Responsibilities:
- Design, implement, and manage security controls for cloud infrastructure, with a primary focus on Azure, ensuring alignment with DoD security requirements and best practices.
- Develop and enforce security policies, procedures, and standards to protect cloud-based assets and data.
- Conduct security assessments and vulnerability analysis of cloud environments, identifying and mitigating risks.
- Implement identity and access management (IAM) controls, including multi-factor authentication (MFA), role-based access control (RBAC), and least privilege principles.
- Monitor and respond to security incidents, ensuring timely resolution and documentation of all activities.
- Collaborate with cloud architects, DevOps teams, and developers to integrate security into the CI/CD pipeline and infrastructure as code (IaC) practices.
- Ensure compliance with federal regulations, including FISMA, NIST, FIPS, and RMF, by developing and maintaining security documentation and artifacts.
- Support future project phases involving AWS by designing and implementing security measures across both Azure and AWS environments.
- Stay current with emerging threats, vulnerabilities, and security trends, applying this knowledge to enhance the security posture of cloud environments.
- Provide guidance and training to technical teams on cloud security best practices and compliance requirements.
- Other duties as assgined.
- Clearance Requirements:
- DoD Security Clearance of Secret or higher
- Education:
- Bachelor’s degree in Computer Science, Information Technology, or a related field. Equivalent work experience may be considered.
- Experience:
- 7+ years of experience in cybersecurity, with at least 3 years focused on cloud security in Azure.
- Demonstrated experience securing cloud environments in Azure, including the design and implementation of security controls in a classified DoD or FISMA High environment
- Experience working in a federal or DoD environment, with a strong understanding of DoD, FISMA, NIST, and RMF compliance requirements.
- Proven track record of managing security in complex, multi-cloud environments.
- Skills:
- Expertise in Azure security tools and services, such as Azure Security Center, Azure Sentinel, and Azure Policy.
- Strong knowledge of cloud security frameworks, identity and access management (IAM), and encryption techniques.
- Experience with security automation and integration within CI/CD pipelines.
- Strong analytical and problem-solving skills, with the ability to assess risks and implement effective mitigation strategies.
- Excellent communication skills, with the ability to convey complex security concepts to technical and non-technical stakeholders.
- Preferred Skills:
- Relevant security certifications, such as Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP), or Microsoft Certified: Azure Security Engineer Associate.
- Knowledge of container security, including securing Kubernetes clusters and Docker containers.
- Familiarity with advanced threat detection and incident response techniques in cloud environments.
- Experience with automation tools like Terraform or Ansible for security policy enforcement.
