Job Description
We are seeking a Cyber Security Engineer with a strong security focus to support our CMMC Level 2 certification effort under DFARS. The right candidate will own assigned NIST SP 800-171 control domains, drive Microsoft security platform operations, and help protect a hybrid environment spanning on-premises infrastructure and cloud services including Azure, Defender, Sentinel, and Hyper-V.
This position is a US based (Orlando, FL), and is an in-office role (no hybrid or remote). Essential Job Functions: CMMC Level 2 / Cybersecurity Compliance - Support CUI / FCI scoping activities, including identifying systems, users, data flows, enclaves, cloud services, endpoints, and third-party services in scope for CMMC Level 2.
- Maintain assessment-ready evidence mapped to NIST SP 800-171 control domains and CMMC assessment requirements in the System Security Plan (SSP).
- Identify, track, and remediate gaps via the Plan of Action & Milestones (POA&M).
- Support C3PAO third-party assessment preparation; build and maintain assessment-ready evidence packages including screenshots, configuration exports, policy references, ticket records, vulnerability scan results, audit logs, training records, and control implementation narratives.
- Maintain audit logging, log integrity, and SIEM operations.
- Conduct periodic vulnerability scans and coordinate remediation with the team.
- Assist in developing and enforcing security policies, procedures, and user awareness training.
- Ensure security-relevant changes are documented, approved, tested, and traceable through the ITSM or change management process.
Microsoft Security Platform Operations - Administer and tune Microsoft Sentinel - build and maintain analytics rules, workbooks, and incident response playbooks.
- Manage Microsoft Defender for Endpoint, Identity, and Office 365 - configure policies, investigate alerts, and drive remediation.
- Maintain Azure security posture including Entra ID (Azure AD), Conditional Access, PIM, and role-based access controls.
- Support and manage Hyper-V virtualization environments including VM provisioning, snapshots, and performance monitoring.
- Leverage Microsoft Purview for data classification, sensitivity labeling, and compliance reporting.
Infrastructure & Systems Administration - Administer and harden Windows Server, Active Directory, and Group Policy environments.
- Maintain network security posture including firewall rules, VLANs, and access control configurations.
- Maintain asset inventory, software inventory, secure configuration baselines, and change control evidence for servers, endpoints, network devices, cloud services, and security tools.
- Support endpoint management and patch compliance using enterprise ITSM and endpoint management tooling.
- Provide Tier 2/3 escalation support for security-relevant endpoint, identity, access, and infrastructure issues.
- Support ERP and line-of-business application integrations from an IT infrastructure and security perspective as needed.
Security Operations - Monitor security alerts across Microsoft Sentinel and Defender, investigate incidents, and escalate per defined IR procedures.
- Support DFARS 252.204-7012 cyber incident response obligations, including evidence preservation, incident documentation, escalation, and coordination with leadership and external partners.
- Manage privileged access, MFA enforcement, and identity governance across on-premises and cloud environments.
- Assist with endpoint detection and response (EDR) configuration and hardening baselines.
- Participate in tabletop exercises and contribute to business continuity and DR planning.
- Support backup, recovery, business continuity, and disaster recovery controls, including backup monitoring, restore testing, retention validation, and protection of backup data from unauthorized modification or deletion.
- Coordinate with external MSPs, CMMC consultants, C3PAOs, auditors, software vendors, and managed security providers to support remediation, evidence collection, and assessment readiness.
Requirements
Qualifications: Required
- 3+ years of experience in systems administration or IT infrastructure, with demonstrated hands-on security responsibilities and willingness to grow into CMMC control ownership.
- Demonstrated knowledge of NIST SP 800-171 or CMMC Level 2 requirements.
- Hands-on experience with Windows Server, Active Directory, and Group Policy.
- Working knowledge of Microsoft Defender (Endpoint, Identity, or O365) and Microsoft Sentinel.
- Familiarity with Microsoft Azure and Entra ID administration.
- Experience with Hyper-V or equivalent enterprise virtualization platform.
- Understanding of network security fundamentals: firewalls, VLANs, DNS, DHCP.
- Strong documentation skills - SSP/POA&M experience a significant plus.
Preferred
- CompTIA Security+, CySA+, or SSCP certification (or actively pursuing).
- Microsoft certifications: SC-200, AZ-500, SC-300, SC-400 a strong plus.
- Familiarity with enterprise ITSM platforms and endpoint management tooling.
- Familiarity with DoD SPRS reporting and GRC tools.
- Prior experience working in a Defense Industrial Base (DIB) environment.
- Exposure to ERP security scoping (Infor CloudSuite or similar).
Management reserves the right to assign or reassign duties and responsibilities to this job at any time.
EOE, including disability/vets
Job Tags
Work at office