{"schemaVersion":"jobsearcher.job.v1","id":"bd3ef4eb87ea03cdab27bb3e","url":"https://jobsearcher.com/jobs/bd3ef4eb87ea03cdab27bb3e","canonicalUrl":"https://jobsearcher.com/jobs/bd3ef4eb87ea03cdab27bb3e","title":"Cloud Security Engineer - Public Sector, IT Operations","description":"Job Summary:\n\nThe Cloud Security Engineer is responsible for planning, implementing, upgrading, and monitoring security-based measures for the protection of the organization’s cloud-based digital platforms and related data. This role may be charged with analyzing and revising existing cloud infrastructure and implementing new and enhanced security related designs and methodologies. In addition, this position is familiar with and helps institute best practices that meet or exceed FedRAMP, NIST, and Cybersecurity Maturity Model Certification (CMMC). The Cloud Security Engineer focuses on the secure configuration and deployment of services within Microsoft GCC High and other platforms to support business operations, and ensures high performance and reliability of technology services that support the firm's mission.\n\nJob Duties:\n\nCollaborates with Public Sector and BDO National IT teams on standards, configuration recommendations, and best practices for the secure management of Microsoft 365 GCC High services, including Office, Entra ID, Intune, Defender, and Purview\nInstitutes policies for identity, device, and access management using Zero Trust principles and security baselines\nReviews results from configuration management/testing, profiling, and assessment tooling to address vulnerabilities, misconfigurations, and/or access risks\nImplements, maintains, and monitors backup and disaster recovery strategies for M365 environment\nParticipates in the Change Control Board\nMonitors for and investigates emerging cyber threats in BDO Public Sector cloud environment, and works with staff on recommending and implementing defensive actions\nContributes to System Security Plans (SSPs), Plan of Action & Milestones (POA&Ms), and other artifacts for audit readiness\nPerforms maintenance and enhancements on existing security alerts to reduce false positives\nLeads the remediation efforts of vulnerabilities within cloud resources\nLeads the Incident Response Team which includes monitoring for and determining Indicators of Compromise\nCollaborates with security operations professionals to analyze triaged security alerts to determine the appropriate escalation and remediation paths\nDesigns and implements security related technologies such as MFA, FIDO2, endpoint detection and response (EDR), and mobile device management (MDM) within a GCC High tenant\nAligns enterprise IT planning with cybersecurity risk management strategies using NIST SP 800-171 and other applicable frameworks\nPerforms and reports phishing testing and develops necessary training\nEscalates critical issues to management\nDocuments and maintains policies and procedures\nOther duties as required\n\nSupervisory Responsibilities:\n\nDirects day-to-day activities/workload of staff, as needed\n\nQualifications, Knowledge, Skills, and Abilities:\n\nEducation:\n\nHigh school diploma or GED, required\nBachelor's degree in Cloud Computing, Information Technology, Information Science, Informatics, or Information Systems, preferred\n\nExperience:\n\nThree (3) or more years of experience providing IT systems security support or incident response, required\n\nLicense/Certifications:\n\nSC-100 – Microsoft Certified Cybersecurity Architect Expert, preferred\nAZ-305 – Azure Solutions Architect Expert, preferred\nAZ-500 – Azure Security Engineer Associate, preferred\n\nSoftware:\n\nProficiency with Microsoft Intune, Entra ID/Azure AD, Microsoft 365 Admin Center, and Microsoft Defender for Endpoint, required\nProficiency with Microsoft Office Suite, preferred\nProficiency with Power BI, Apple Business Manager, and MacOS and iOS management via Intune, preferred\n\nLanguage:\n\nN/A\n\nOther Knowledge, Skills, and Abilities:\n\nStrong verbal and written communication skills\nExcellent interpersonal and customer relationship skills\nCapacity to work in a deadline-driven environment while handling multiple complex projects/tasks simultaneously with a focus on details\nCapable of successfully multi-tasking while working independently or within a group environment\nFamiliar with various regulatory policies (PCI, HIPAA, GLBA and other statutory regulations) as they relate to data security and IT policies, procedures, and standards\nBasic awareness of PCI-DSS, ISO 2700x, FISMA, and other industry recommended security frameworks\nStrong understanding of security breach detection and mitigation\nAbility to rely on extensive experience and judgment to plan and accomplish goals\nCapable of working well under pressure while dealing with unexpected issues in a professional manner\nCapacity to communicate and interact with all levels of employees and management\nAbility to interact and build consensus among people\nAbility to work after standard business hours and travel, as needed\nAbility to design capabilities to find solutions to less common and more complex system problems\n\nIndividual salaries that are offered to a candidate are determined after consideration of numerous factors including but not limited to the candidate’s qualifications, experience, skills, and geography.\n\nNational Range: $105,000 - $120,000\nMaryland Range: $105,000 - $120,000\nNYC/Long Island/Westchester Range: $105,000 - $120,000\nAt BDO, how we show up matters. We build strong relationships by supporting one another, our clients, and our communities with care, curiosity, and a commitment to helping one another grow and succeed. Here, you’ll find meaningful work, leaders invested in your success, and opportunities to build a career around what matters most to you.\n\nOur purpose is to be the people our clients count on to grow with confidence and achieve what matters most. Our values guide how we bring that purpose to life each day. Together, they shape how we work with one another, serve our clients, and create meaningful impact.\n\nBDO provides assurance, tax, and advisory services to clients across the U.S. and around the world. No matter your role, you’ll be part of a team helping clients navigate complexity and move forward with clarity.\n\nWe are proud to be an ESOP company, offering participants a stake in the firm’s success through beneficial ownership and a unique opportunity to enhance their financial well-being. As a qualified retirement plan, the ESOP is a meaningful addition to our comprehensive compensation and Total Rewards benefits* offerings. It also reinforces an ownership mindset that strengthens our connection to one another, our clients, and the future we’re building together.\n\nLearn more about our benefits: BDO Total Rewards encompass more than traditional benefits. Click here to find out more !\n\n*Benefits may be subject to eligibility requirements.\n\nEqual Opportunity Employer, including disability/vets\nClick here to find out more !","company":"Bdo","rawCompany":"bdo","city":"Orlando","state":"FL","isRemote":false,"isActive":false,"createdAt":"2026-09-11T10:51:09.754Z","occupations":[{"code":"15-1299.05","title":"Information Security Engineers","slug":"information-security-engineers"},{"code":"15-1299.08","title":"Computer Systems Engineers/Architects","slug":"computer-systems-engineers-architects"},{"code":"15-1212.00","title":"Information Security Analysts","slug":"information-security-analysts"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"541513","title":"Computer Facilities Management Services","slug":"computer-facilities-management-services"},{"code":"541519","title":"Other Computer Related Services","slug":"other-computer-related-services"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"Cloud Security Engineer - Public Sector, IT Operations","description":"Job Summary:\n\nThe Cloud Security Engineer is responsible for planning, implementing, upgrading, and monitoring security-based measures for the protection of the organization’s cloud-based digital platforms and related data. This role may be charged with analyzing and revising existing cloud infrastructure and implementing new and enhanced security related designs and methodologies. In addition, this position is familiar with and helps institute best practices that meet or exceed FedRAMP, NIST, and Cybersecurity Maturity Model Certification (CMMC). The Cloud Security Engineer focuses on the secure configuration and deployment of services within Microsoft GCC High and other platforms to support business operations, and ensures high performance and reliability of technology services that support the firm's mission.\n\nJob Duties:\n\nCollaborates with Public Sector and BDO National IT teams on standards, configuration recommendations, and best practices for the secure management of Microsoft 365 GCC High services, including Office, Entra ID, Intune, Defender, and Purview\nInstitutes policies for identity, device, and access management using Zero Trust principles and security baselines\nReviews results from configuration management/testing, profiling, and assessment tooling to address vulnerabilities, misconfigurations, and/or access risks\nImplements, maintains, and monitors backup and disaster recovery strategies for M365 environment\nParticipates in the Change Control Board\nMonitors for and investigates emerging cyber threats in BDO Public Sector cloud environment, and works with staff on recommending and implementing defensive actions\nContributes to System Security Plans (SSPs), Plan of Action & Milestones (POA&Ms), and other artifacts for audit readiness\nPerforms maintenance and enhancements on existing security alerts to reduce false positives\nLeads the remediation efforts of vulnerabilities within cloud resources\nLeads the Incident Response Team which includes monitoring for and determining Indicators of Compromise\nCollaborates with security operations professionals to analyze triaged security alerts to determine the appropriate escalation and remediation paths\nDesigns and implements security related technologies such as MFA, FIDO2, endpoint detection and response (EDR), and mobile device management (MDM) within a GCC High tenant\nAligns enterprise IT planning with cybersecurity risk management strategies using NIST SP 800-171 and other applicable frameworks\nPerforms and reports phishing testing and develops necessary training\nEscalates critical issues to management\nDocuments and maintains policies and procedures\nOther duties as required\n\nSupervisory Responsibilities:\n\nDirects day-to-day activities/workload of staff, as needed\n\nQualifications, Knowledge, Skills, and Abilities:\n\nEducation:\n\nHigh school diploma or GED, required\nBachelor's degree in Cloud Computing, Information Technology, Information Science, Informatics, or Information Systems, preferred\n\nExperience:\n\nThree (3) or more years of experience providing IT systems security support or incident response, required\n\nLicense/Certifications:\n\nSC-100 – Microsoft Certified Cybersecurity Architect Expert, preferred\nAZ-305 – Azure Solutions Architect Expert, preferred\nAZ-500 – Azure Security Engineer Associate, preferred\n\nSoftware:\n\nProficiency with Microsoft Intune, Entra ID/Azure AD, Microsoft 365 Admin Center, and Microsoft Defender for Endpoint, required\nProficiency with Microsoft Office Suite, preferred\nProficiency with Power BI, Apple Business Manager, and MacOS and iOS management via Intune, preferred\n\nLanguage:\n\nN/A\n\nOther Knowledge, Skills, and Abilities:\n\nStrong verbal and written communication skills\nExcellent interpersonal and customer relationship skills\nCapacity to work in a deadline-driven environment while handling multiple complex projects/tasks simultaneously with a focus on details\nCapable of successfully multi-tasking while working independently or within a group environment\nFamiliar with various regulatory policies (PCI, HIPAA, GLBA and other statutory regulations) as they relate to data security and IT policies, procedures, and standards\nBasic awareness of PCI-DSS, ISO 2700x, FISMA, and other industry recommended security frameworks\nStrong understanding of security breach detection and mitigation\nAbility to rely on extensive experience and judgment to plan and accomplish goals\nCapable of working well under pressure while dealing with unexpected issues in a professional manner\nCapacity to communicate and interact with all levels of employees and management\nAbility to interact and build consensus among people\nAbility to work after standard business hours and travel, as needed\nAbility to design capabilities to find solutions to less common and more complex system problems\n\nIndividual salaries that are offered to a candidate are determined after consideration of numerous factors including but not limited to the candidate’s qualifications, experience, skills, and geography.\n\nNational Range: $105,000 - $120,000\nMaryland Range: $105,000 - $120,000\nNYC/Long Island/Westchester Range: $105,000 - $120,000\nAt BDO, how we show up matters. We build strong relationships by supporting one another, our clients, and our communities with care, curiosity, and a commitment to helping one another grow and succeed. Here, you’ll find meaningful work, leaders invested in your success, and opportunities to build a career around what matters most to you.\n\nOur purpose is to be the people our clients count on to grow with confidence and achieve what matters most. Our values guide how we bring that purpose to life each day. Together, they shape how we work with one another, serve our clients, and create meaningful impact.\n\nBDO provides assurance, tax, and advisory services to clients across the U.S. and around the world. No matter your role, you’ll be part of a team helping clients navigate complexity and move forward with clarity.\n\nWe are proud to be an ESOP company, offering participants a stake in the firm’s success through beneficial ownership and a unique opportunity to enhance their financial well-being. As a qualified retirement plan, the ESOP is a meaningful addition to our comprehensive compensation and Total Rewards benefits* offerings. It also reinforces an ownership mindset that strengthens our connection to one another, our clients, and the future we’re building together.\n\nLearn more about our benefits: BDO Total Rewards encompass more than traditional benefits. Click here to find out more !\n\n*Benefits may be subject to eligibility requirements.\n\nEqual Opportunity Employer, including disability/vets\nClick here to find out more !","datePosted":"2026-09-11T10:51:09.754Z","dateModified":"2026-09-11T10:51:09.754Z","hiringOrganization":{"@type":"Organization","name":"Bdo","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Orlando","addressRegion":"FL","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"bd3ef4eb87ea03cdab27bb3e"},"url":"https://jobsearcher.com/jobs/bd3ef4eb87ea03cdab27bb3e"}}