Senior Microsoft Cloud Security EngineerArchitect (On-Site)
McLean, MD - USA
Job Summary
Who Are We
Groundswell is a premier technology integrator and solution provider resolutely committed to solving the most complex challenges facing federal agencies today. Our name Groundswell represents our commitment to be an unstoppable seismic change in government. Ours is a small company culture with big company reach and results. Are you ready to be audacious be bold and drive change at a rapid pace Join us where well make a greater impact together.
What Youll do:
Groundswell is seekinganexperienced hands-on CybersecuritySpecialistto serve as the senior on-site technicalsupportfor cybersecurity operations Microsoft Azure Government Microsoft 365 GCC High cloud infrastructure identity endpoint security networking and incident response.
This rolewill serve asanescalation point for complex security and infrastructure issuesand to helpstrengthen Groundswells internal cyber capabilitiessupportingthe companys ongoing compliancewith CMMC level 2. The position willberesponsiblefor investigations configuration troubleshooting control implementation and high-impact issue resolution.
Theindividual contributorposition works closely withsmall internal operations teamand External Supplier teams.
Key Responsibilities
Owncybersecurity operationsto includeincident responseinvestigationsresponse threat identificationthreatcontainment recovery root-cause analysis and post-incident improvements.
escalation point for complex security cloud identity endpoint network Azure Virtual Desktop and infrastructure issues.
Administer privileged access and identity controls including Conditional Access multifactor authentication service principals Privileged Identity Management least privilege separation of duties and time-limited elevation.
MaintainCiscoMerakienvironment including firewalls switches wireless access points VLANs access-control lists segmentation logging site connectivity outage response and recovery documentation.
vulnerability and configuration management using Tenable Microsoft Defender Microsoft Secure Score vendor advisories and threat-intelligence sources. Prioritize findings based on severity exploitability exposure asset criticality known exploitation operational risk and CUI impact; coordinate remediation documentexceptionsand residual risk and confirm corrective actions are effective.
Lead AvePoint backup and recovery for Microsoft 365 GCC High including monitoring jobs resolving failures testing restores andmaintainingrecovery practices for Exchange SharePoint OneDrive and Teams.
Serve as a technical subject matter expert for CMMC Level 2 and related certification programs bymaintainingthe System Security Plan Plans of Action and Milestonesetc
Provide seniorescalation support while preserving the Helpdesks responsibility for routine ticket intake and normal user support and mentor Helpdesk personnel in incident recognition evidence preservation escalation troubleshooting and documentation.
Prepare review implement and document technical changesin supportofCMMI-SVC ISO 9001 ISO/IEC 20000-1 ISO/IEC 27001 UK Cyber Essentials and CMMC requirements.
Required Qualifications:
Bachelors degree in cybersecurity computer science information systems engineering network engineering or a related technical field.
10yearyearsexperience in cybersecurity operations cloud security infrastructure engineering network engineering incident response or a related field.
Direct hands-on experience with Microsoft GCC High Azure Government Department of Defense cloud environments or a comparable regulated Microsoft environment.
Advanced production experience with Microsoft Sentinel Defender XDR Entra ID Intune Purview Exchange Online SharePoint Online Teams Azure networking Azure Virtual Desktop KQL and PowerShell.
Hands-on experience administering enterprise network infrastructure and resolving complex cloud identity endpoint and network issues.
Demonstrated experience producing technical evidence for audits or assessments remediating security findingsvalidatingcorrective actions and explaining technical risks and controls to technical and nontechnical audiences
Ability to lead incident response under pressure remain personally hands-on exercise discretion with CUI and sensitive records manage competing priorities and work effectively witha variety of customers
US Citizenship required for clearance purposes.
Location: position is full time on-site in our Mclean VA office.
Preferred Qualifications:
Microsoft Cybersecurity Architect Expert Microsoft Security Operations Analyst Associate or Microsoft Azure Security Engineer Associate certification.
Demonstrated experience leading AvePoint backup and recovery security automation or large-scale operational improvement in a regulated Microsoft Government cloud environment.
Advanced Cisco networking experience including CCNP Enterprise or Cisco Meraki Solutions Specialist certification.
Skills:
Certification:
Why Youll Never Want to Leave:
- Comprehensive medical dental and vision plans
- Flexible Spending Account
- 4% 401K Match (immediate vesting)
- Paid Time Off
- Tuition reimbursement certification programs and professional development
- Flexible work schedule
- On-site gym and childcare option
The salary range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for any applicable geographic differential associated with the location at which the position may be filled. At Groundswell it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is:
$116724.00 - $209019.00
NOTE:Groundswell does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of Groundswell and Groundswell will not be obligated to pay a placement fee.
Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race color religion sex sexual orientation gender identity national origin age pregnancy genetic information disability status as a protected veteran or any other protected category under applicable federal state and local laws.
Read a copy of the Companys Non-Discrimination Policy Statement.
Additional Resources:
Disability Accessibility Accommodation: If you are an individual with a disability and would like to request a reasonable accommodation as part of the employment selection process please contact us ator.
Required Experience:
Senior IC
About Company
Groundswell is a highly specialized systems integrator leveraging world-class talent and SaaS intellectual property to help government entities enhance service delivery and achieve strategic objectives.