Agile IT is a Microsoft‑focused consulting and managed services provider. We help customers modernize and secure Microsoft 365, Azure, Azure Government, and Microsoft GCC High, with a mission to make CMMC Level 2 practical and sustainable through repeatable architectures, evidence automation, and managed operations.
What you’ll work across (our services)
Professional Services – Enablement (fixed‑price projects)
Managed Services – Security & CMMC Compliance for Microsoft cloud and on‑premises systems
Microsoft GCC High Licensing (secure onboarding & lifecycle operations)
Complementary Partner Services (co‑delivered with strategic partners)
If you live and breathe cybersecurity in the Microsoft cloud, Agile IT has a role for you. We are hiring a Microsoft Cloud Solution Architect – Cybersecurity to lead clients through their journey to CMMC Level 2 compliance and other stringent security frameworks. In this pivotal role, you will design and implement robust security architectures leveraging Azure and Microsoft 365 technologies to protect organizations that operate in high-stakes environments (think defense contractors, government agencies, and regulated enterprises). You’ll be the go-to expert on how to secure cloud workloads in Azure Government and GCC High environments, guiding customers to meet and exceed required controls. This position is central to Agile IT’s mission of being the premier Microsoft cloud security and compliance partner. It’s a chance to blend deep technical know-how with a passion for protecting organizations – all while collaborating with a team that values innovation, diligence, and a dash of fun in the process.
Key Responsibilities
CMMC Compliance Leadership: Lead CMMC Level 2 readiness engagements for our clients from start to finish. Conduct in-depth gap analyses against CMMC (and related frameworks like NIST 800-171) to identify gaps in clients’ people, processes, and technology. Develop remediation roadmaps that will bring organizations up to compliance, and clearly communicate the plan to executive stakeholders.
Security Architecture & Implementation: Architect end-to-end security solutions in the Microsoft Cloud to address identified gaps and strengthen clients’ security posture. This includes designing secure configurations for Azure services, Microsoft 365 (Office 365 GCC High), Azure AD/Entra ID, Microsoft Defender suite, Sentinel SIEM, Intune, and other tools to align with CMMC requirements. When necessary, you will also get hands-on to implement or guide the implementation of these solutions alongside our engineering team.
Documentation & Deliverables: Author and review critical security documentation as part of compliance engagements. This includes crafting System Security Plans (SSPs), Plans of Action & Milestones (POA&Ms), network diagrams, control implementation statements, and other evidence required for CMMC certification. Ensure all deliverables are high-quality, accurate, and tailored to each client’s environment.
Client Advisory & Training: Serve as a trusted cybersecurity advisor to our clients. Provide coaching and training to client stakeholders on security best practices and how to prepare for formal CMMC assessments. This might involve running workshops on security processes, guiding them through technologies they need to adopt, or advising leadership on risk management decisions. Your goal is to empower clients to sustain their compliance and security postures long-term.
Remediation Oversight: Oversee the remediation phase of compliance projects by collaborating with Agile IT engineers and the client’s IT team. Track progress on technical remediation tasks (e.g., deploying MFA, tightening access controls, implementing audit log monitoring) and ensure they are completed on schedule. Perform validation testing or reviews to confirm that each gap has been properly closed.
Service Development & Thought Leadership: Contribute to the continual refinement of Agile IT’s cybersecurity and compliance service offerings. Define reusable frameworks or recurring services that help clients maintain compliance (for example, ongoing log monitoring or policy updates as a service). Stay up-to-date with Microsoft cloud security innovations and CMMC program updates, and share knowledge through internal playbooks or external content (blog posts, webinars, speaking events). Your thought leadership helps position Agile IT as an industry leader in cloud security compliance.
Experience: 5+ years of experience in IT security architecture or engineering, with significant exposure to Microsoft cloud technologies. Experience working on compliance initiatives (CMMC, NIST, ISO 27001 or similar) in a consulting or internal lead capacity is highly preferred.
Technical Expertise: Deep knowledge of Microsoft 365 and Azure security capabilities. You should be comfortable with technologies such as Azure AD (Entra ID) security, Conditional Access, Microsoft Defender for Endpoint/Office 365/Cloud Apps, Azure Defender (Defender for Cloud), Sentinel SIEM, Intune (MDM/MAM), and data protection tools like Azure Information Protection or Purview. Experience designing network security for Azure (NSGs, Azure Firewall, VPN/ExpressRoute, etc.) is also important.
Compliance Knowledge: Strong understanding of CMMC 2.0 Level 2 requirements and underlying controls (e.g., practices derived from NIST 800-171). Ability to interpret how those controls map to Microsoft cloud implementations. Familiarity with audit processes or having supported a CMMC or security audit is a plus. Any certifications like CISSP, CISA, CISM, or CMMC-AB assessor training would be beneficial.
Problem-Solving & Communication: Excellent problem-solving skills with the ability to quickly learn new environments and pinpoint security gaps. Equally important are your communication skills – you can write clear policies and reports, and you’re comfortable briefing both engineers and executive audiences on security strategies and statuses.
Consulting Mindset: Prior experience in a customer-facing role (consultant, solutions architect, etc.) is highly desirable. You should be adept at managing multiple clients or projects, setting expectations, and delivering results that meet client needs. You take ownership of outcomes and can work independently, but also thrive in a team that collaborates and shares knowledge.
Education & Certifications: Bachelor’s degree in Computer Science, Cybersecurity, or a related field is preferred, not required. Relevant industry certifications (e.g., Microsoft Certified: Azure Security Engineer, MS-500, CompTIA Security+, or advanced certs like CISSP) will strengthen your candidacy. Above all, a passion for continuous learning in the ever-evolving security field is key.
Compensation & benefits
Competitive executive compensation (base + performance bonus + stock options after first year).
Comprehensive benefits (medical, retirement, PTO, professional development).
Mission‑driven work that directly strengthens the national security supply chain.
