Type of Requisition:Pipeline
Clearance Level Must Currently Possess:Secret
Clearance Level Must Be Able to Obtain:Secret
Public Trust/Other Required:None
Job Family:Cyber and IT Risk Management
Job Qualifications:Skills:Microsoft Azure, Plan of Action and Milestones (POA&M), Security Vulnerability Assessments
Certifications:None
Experience:10 + years of related experience
US Citizenship Required:Yes
Job Description:Information Security Analyst Duties and Responsibilities:- Design, implement, and maintain secure cloud architectures within Azure Government Secret classified environments
- Enforce zero trust principles, role-based access control (RBAC), and identity federation (e.g.,Azure AD B2B/B2C with CAC/PIV)
- Configure and manage security controls such as Microsoft Defender for Cloud, Key Vault, Azure Policy, NSGs, and Private Endpoints
- Automate compliance and security operations using PowerShell, Terraform, or ARM templates
- Integrate SIEM/SOAR tools (e.g., Microsoft Sentinel for IL6) for continuous monitoring, logging, and incident response
- Conduct vulnerability assessments and implement remediations aligned to NIST 800-53, DoD STIGs, and JSIG
- Collaborate with mission owners, compliance teams, and developers to ensure secure DevSecOps pipelines
- Support Authority to Operate (ATO) processes by generating security documentation, control evidence, and supporting audits
- Navigate federal systems through the authorization process to achieve and maintain Authority to Operate (ATO)
- Work with the ISSO, Program and DOC ITD IA teams to maintain the necessary security authorizations
- Develop comprehensive System Security Plans (SSPs) documenting all implemented NIST 800-53 controls
- Coordinate security assessments with third-party assessors
- Manage Plans of Actions & Milestones (POA&Ms) for addressing identified vulnerabilities
- Ensure continuous monitoring plans meet agency requirements
- Prepare authorization packages for government review
- Maintain ongoing compliance through change management processes
- Serve as the liaison between technical teams and authorizing officials
- Translate security requirements into actionable tasks
- Ensure all documentation meets the rigorous standards required for federal information systems
Information Security Analyst Requirements and Qualifications:- Bachelor's degree in information systems security; master's degree or equivalent professional experience in information security is preferred
- Active Secret clearance
- 5+ years in cloud security, including 2+ in Azure Government or DoD environments
- Strong knowledge of Azure-native security tools, IL6 data handling, and cloud networking
- Proficient in scripting (PowerShell, Python, or Bash) and Infrastructure as Code (ARM, Bicep, Terraform)
- Experiences with DoD SRG, FedRAMP High, JSIG, and ICD 503 compliance frameworks
- Hands-on experience with classified enclaves, hardened images, and enclave-to-enclave connectivity
- Comprehensive knowledge of corporate Systems/Solutions Architecture processes and trends
- Strong leadership, organizational, and communication skills
- Secret Clearance to start
- Knowledge of Agile software development process
Required Technical Skills:- SCAP, STIG, Patching, eMASS, and related RMF tools
- Cybersecurity, Systems Administration, implementation of RMF tools and processes
- Experience with gaining an ATO for systems and working the systems through the assessment and authorization process
- Experience working with IP networking, networking protocols and understanding of security related technologies including encryption, IPsec, PKI, VPNs, firewalls, proxy services, DNS, electronic email and access-list
- Excellent communication skills
- Experience working in Agile software development teams
- Experience with secure development, coding and engineering practices
- Experience with Cybersecurity, Information Security, and Information Technology Security processes, protocols, and procedures.
Experience- 10 years of relevant experience
- * may vary based on technical training, certification(s), or degree
- Experience with Cloud Security
- Experience working with leading firewall, network scanning and authentication technologies
- Experience working with internet, web, application and network security techniques
- Experience in Agile methodology
- Experience in Jira to support development team in agile environment
- Experience working in Federal or State government environments
- Ability to work independently and remotely
Certification: Active DoD 8570 IAT Level II Certification (Security+, CISSP, CISM)
Travel Required: Little to no travel anticipated (may be required upon customer request)
Location: On-site 3 days a week at minimum.
US Citizenship: U.S. Citizenship required
The likely salary range for this position is $83,927 - $113,549. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.
Scheduled Weekly Hours:40
Travel Required:Less than 10%
Telecommuting Options:Hybrid
Work Location:USA DC Washington
Additional Work Locations: 
