Build, configure, and administer Azure Virtual Machines supporting DEOS, including OS hardening (e.g., DISA STIGs/SRGs), patching, baseline configuration, and performance tuning.
Develop, maintain, and operate Azure Automation Runbooks to support secure operations and compliance (e.g., automated patching, configuration enforcement, log collection, backup/restore, and response actions).
Provide consultative technical guidance to DEOS engineering and operations teams on secure design patterns, Zero Trust principles, identity and access management, and boundary protections.
RMF / ATO and DISA/DoD Compliance Support
Support DISA/DoW Risk Management Framework (RMF) activities for DEOS systems, ensuring security requirements are engineered into designs and implementations from the outset.
Contribute to and maintain RMF/ATO artifacts (SSP, SAR, POA&M, diagrams, implementation statements) specific to DEOS Azure‑hosted components.
Map and implement DISA STIGs, DoD Cloud Computing SRG, and relevant eMASS controls across Azure VMs and associated services.
Identify, document, and communicate security risks or compliance gaps to DEOS leadership and customer stakeholders, recommending practical mitigations.
Secure Operations & Incident Response Coordination
Coordinate incident response for security and operational incidents impacting DEOS and the Cybersecurity Threat Hunt team.
Participate in incident triage, technical analysis, and root‑cause investigations.
Direct technical containment, eradication, and recovery activities (e.g., isolate or revoke credentials), in coordination with the DEOS incident manager and DISA stakeholders.
Capture lessons learned and drive assist in updates to runbooks, playbooks, detection rules, and hardening baselines to reduce recurrence.
Consultative Customer and Stakeholder Engagement
Engage with GDIT, DEOS and DISA security, engineering, and operations counterparts to clarify requirements, constraints, and risk posture for DEOS services.
Provide consultancy‑style briefings and technical input to change boards, engineering reviews, and security forums on proposed changes, risks, and mitigations.
Support responses to DISA/DoW data calls, audits, inspections, and technical reviews related to DEOS cybersecurity and system integrity.
