Azure Cloud Security & CMMC Compliance Engineer

Job Title: Azure Cloud Security & CMMC Compliance Engineer

Location: Chicago, IL (Hybrid)

Work Schedule: Approximately 20 hours per week.

Work Arrangement: Primarily remote, with one day onsite preferred.

Contract Duration: 6–9 months.

Extension: Potential for contract extension and additional weekly hours.

Job Description

We are seeking a highly technical Azure Cloud Security & CMMC Compliance Engineer with strong hands-on experience in CMMC Level 2 compliance, NIST SP 800-171 remediation, and Microsoft Azure security implementation. The ideal candidate will be responsible for addressing security gaps, resolving Plans of Action and Milestones (POA&Ms), implementing Zero Trust architecture, and collecting technical evidence to support regulatory compliance and audit readiness.

The candidate must possess excellent technical troubleshooting, documentation, and communication skills, with the ability to collaborate effectively with security, infrastructure, and compliance teams.

Key Responsibilities

• Lead technical remediation efforts to achieve CMMC Level 2 and NIST SP 800-171 compliance.
• Review, track, and resolve POA&Ms, including remediation planning, validation, and technical evidence collection.
• Implement and maintain Azure Zero Trust security architecture and identity security controls.
• Configure and manage Microsoft Entra ID governance, access controls, and identity security policies.
• Design and implement Azure network segmentation and secure connectivity using Private Link and Private Endpoints.
• Administer and secure Azure Bastion for controlled administrative access.
• Harden Azure Virtual Desktop (AVD) host pools and implement Data Loss Prevention (DLP) controls.
• Harden Azure virtual machines in accordance with CIS Benchmarks and Department of Defense Security Technical Implementation Guides (DoD STIGs).
• Develop and enforce Azure Policy initiatives to support regulatory requirements and security compliance.
• Configure, monitor, and optimize Microsoft Defender for Cloud and Microsoft Sentinel.
• Implement storage and disk encryption using Azure Key Vault and associated encryption controls.
• Conduct security assessments, identify configuration gaps, and implement corrective actions.
• Develop and maintain technical documentation, security configurations, compliance artifacts, and audit evidence.
• Communicate technical findings, remediation progress, risks, and recommendations clearly to technical and non-technical stakeholders.

Required Qualifications

• Strong hands-on experience with CMMC Level 2 and NIST SP 800-171 compliance and remediation.
• Demonstrated experience resolving POA&Ms and gathering technical evidence for compliance assessments.
• Extensive practical knowledge of Microsoft Azure security services and cloud infrastructure hardening.
• Experience implementing Zero Trust architecture, Microsoft Entra ID governance, and identity and access management controls.
• Hands-on expertise in Azure networking, network segmentation, Private Link, Private Endpoints, and Azure Bastion.
• Experience securing Azure Virtual Desktop environments, including host pool hardening and DLP implementation.
• Knowledge of CIS Benchmarks, DoD STIGs, and secure virtual machine configurations.
• Experience with Azure Policy, Microsoft Defender for Cloud, Microsoft Sentinel, and Azure Key Vault.
• Strong understanding of encryption, security monitoring, vulnerability remediation, and regulatory compliance requirements.
• Excellent written and verbal communication skills, with the ability to explain complex technical concepts and document remediation activities clearly.
• Ability to work independently, prioritize remediation activities, and collaborate with cross-functional teams.

Preferred Certifications

• Microsoft Certified: Azure Security Engineer Associate (AZ-500).
• CyberAB Registered Practitioner (RP) or Registered Practitioner Advanced (RPA).
• Certified Information Systems Security Professional (CISSP).