Azure Cybersecurity Architect - FedRAMP / ATO

Type of Requisition:

Regular

Clearance Level Must Currently Possess:

None

Clearance Level Must Be Able to Obtain:

None

Public Trust/Other Required:

MBI (T2)

Job Family:

Cyber and IT Risk Management

Job Qualifications:

Skills:

Cloud Security Architecture, Cybersecurity, Federal Risk and Authorization Management Program (FedRAMP), Microsoft Azure

Certifications:

None

Experience:

8 + years of related experience

US Citizenship Required:

No

Job Description:

Advance your career while impacting our national security in cyber as a Cybersecurity Architect at GDIT. Here, technologists have many paths to grow a meaningful career supporting cyber missions and operations across the federal government.

As a Cybersecurity Architect, the work you’ll do at GDIT will be impactful to the mission of providing access to healthcare. We are seeking an experienced Azure Security Architect to design, implement, and maintain secure cloud solutions in a Health Program FedRAMP-regulated environment. This role requires expertise in Microsoft Sentinel, Defender for Cloud, and Defender for Endpoint, with direct experience supporting FedRAMP Authorization to Operate (ATO) processes.

This role is fully remote!

This role has a targeted start date towards the end of 2025/early 2026.

Responsibilities:

• Architect and implement Azure security solutions aligned with FedRAMP controls and ATO requirements.
• Configure and manage Microsoft Sentinel for SIEM/SOAR capabilities, including incident detection and automated response.
• Deploy and tune Microsoft Defender for Cloud, Endpoint, and Identity to meet continuous monitoring and threat detection requirements.
• Define and enforce Zero Trust security architecture and Azure AD/Entra access management policies.

​

Required Qualifications:

• Bachelor’s degree in computer science, Cybersecurity, Information Systems, or related field (Master’s preferred)
• 8+ years of experience in cloud security architecture, with emphasis on Azure
• Direct experience with FedRAMP compliance and ATO process lifecycle
• Ability to obtain and maintain a Public Trust

• Hands-on expertise with: 
• Microsoft Sentinel (SIEM/SOAR design, rule tuning, incident workflows)
• Microsoft Defender (Cloud, Endpoint, Identity, Intune)
• Zero Trust and Azure AD/Entra Conditional Access
• Terraform / ARM templates for secure automation
• Strong knowledge of Azure networking, encryption, identity, and logging/monitoring

Preferred Qualifications:

• Microsoft Certified: Azure Security Engineer Associate, Microsoft Certified: Azure Solutions Architect Expert, Microsoft Certified: Cybersecurity Architect Expert
• Security certifications: CISSP, CISM, CCSP, or equivalent
• Experience with FedRAMP High, Azure Government (GovCloud), or CMMC environments
• Familiarity with Healthcare regulations including HIPAA
• Familiarity with CIS Benchmarks, DISA STIGs, and NIST 800-53 frameworks
• Excellent communication skills for stakeholder engagement, audit interaction, and cross-functional collaboration
• Ability to map security controls to FedRAMP requirements and translate them into technical implementations
• Experience leading security architecture for enterprise cloud environments in regulated industries
• Strong problem-solving skills with the ability to design secure, scalable, and compliant Azure environments.
• Experience with compliance-driven data governance solutions, especially Purview.

#GDITFedHealthJobs

The likely salary range for this position is $134,300 - $181,700. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.

Scheduled Weekly Hours:

40

Travel Required:

None

Telecommuting Options:

Remote

Work Location:

Any Location / Remote

Additional Work Locations:

Total Rewards at GDIT:

Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post