Bull Bear Defense Solutions LLC

Compensation

Full Description

Overview Based out of the Wright-Patterson Air Force Base (WPAFB) community in Dayton, Ohio, Bull Bear Defense Solutions is a dedicated force in IT, cloud, and GRC modernization. Our commitment is clear: to deliver agile, efficient solutions tailored for legacy IT and cloud systems, catering to federal, defense, and commercial sectors. The cornerstone of our success lies in our team of industry-certified consultants, whose vast expertise in IT and cybersecurity ensures that we not only meet but surpass our clients' expectations. At Bull Bear, we stand ready to address the unique challenges of each client, guiding them toward robust, future-ready solutions that elevate their security posture in an ever-evolving digital landscape. Bull Bear Defense Solutions is seeking an experienced Azure Cloud Engineer with hands-on expertise in Microsoft Azure (including Azure Government), cloud networking, ports/protocols/services configuration, and secure enterprise integrations. This role will build and maintain the network and connectivity components that support Risk Management Framework (RMF) activities, ATO certification, and application modernization within a FedRAMP-authorized cloud environment. This position is a hands-on engineering role responsible for implementing, configuring, and troubleshooting network infrastructure in Azure Government, working from architecture and security guidance to deliver a functioning, compliant environment. This position will work day to day with the architecture, security engineering, AI/ML, and DevSecOps teams to build out and validate privacy and security control implementations throughout the EPS lifecycle. Key Responsibilities Azure Network Engineering & Implementation Build and configure Azure network infrastructure, including VNETs, subnets, peering, firewalls, private endpoints, NSGs/ASGs, and routing tables, based on approved architecture and security guidance. Implement ports, protocols, and services (PPS) requirements for applications, integrations, and system components, and keep the supporting documentation current as configurations change. Stand up and maintain DNS, load balancing, VPN, and ExpressRoute connections. Configure network segmentation and access controls that support Zero Trust principles and least privilege in day-to-day operations. RMF, Security Controls, and ATO Support Act as the hands-on network engineer supporting RMF Step 1 through 6 activities, implementing and configuring controls that meet NIST SP 800-53, FISMA, and FedRAMP Moderate requirements. Generate and maintain configuration evidence for SC, AC, IA, AU, IR, and CP control families, and support the cybersecurity team in preparing SSP, SAP, SAR, and POA&M inputs. Work with cybersecurity, data governance, and PM teams to keep network operations secure and audit-ready throughout the system development lifecycle. Azure Cloud Security & Integration Build and maintain secure integrations between application tiers, databases, logging services, CI/CD pipelines, third-party services, and on-prem environments. Monitor and enforce traffic flow so all connectivity stays within FedRAMP-authorized boundaries with no egress to non-approved networks. Implement secure configurations, encryption settings, and identity controls alongside the security engineering team. Application Development & Deployment Support Provide direct network engineering support to application teams deploying services into Azure Government, including connectivity, bandwidth, firewall rules, and endpoint configuration. Participate in Agile ceremonies (Scrum/SAFe) and work with PM/Scrum leadership to keep network tasks on pace with sprint objectives. Troubleshoot connectivity, latency, DNS, load balancing, and service integration issues as they come up. Documentation & Technical Support Maintain accurate architectural documentation, including as-is/to-be network states, configuration baselines, and change records. Support technical evaluations and recommendations on: • Network modernization approaches • Secure cloud migration patterns • FedRAMP-aligned configurations • Performance optimization • Cost management Work collaboratively across engineering, cybersecurity, governance, and operations teams to implement and support solutions end to end. Required Qualifications • 5+ years of experience in network engineering, with at least 2 years working hands-on in Azure or Azure Government • Strong working knowledge of: • VNET configuration, firewalls, routing, private endpoints • Ports, protocols, and service dependency mapping • Zero Trust network segmentation • DNS, load balancing, VPN/ExpressRoute • Network telemetry and logging • Experience supporting RMF, ATO, NIST SP 800-53 Rev. 5, FedRAMP Moderate, and cloud security controls in an operational capacity • Ability to build and maintain technical documentation and diagrams • Experience with incident response support, audit logging, and compliance evidence generation Preferred Qualifications • Azure certifications: AZ-104, AZ-700, AZ-500, or equivalent • CISSP, CCSP, CGRC (CAP), or similar federal cybersecurity certifications • Experience supporting federal or enterprise modernization programs • Familiarity with DevSecOps pipelines, CI/CD, and microservices networking Work Location Remote Work Location: Remote