What You Will Do

The work we do at Los Alamos National Laboratory (LANL) matters to our country and the world! The Innovative Customer Experience (ICE) Division is looking for a dynamic leader.  You will be responsible for implementing, managing, and optimizing security controls across our Azure cloud environment. You will work closely with IT teams, DevOps, and cloud architects to secure our infrastructure, applications, and data on Microsoft Azure. You’ll leverage your expertise in Azure security services and best practices to protect against cyber threats and ensure compliance with regulatory standards.
ICE division consists of more than 350 talented Solution Architects, Computer Systems Professionals, and Computer System Technician employees who provide the varied Laboratory organizations with Information Technology experts who design, build, and support their mission-driven technical needs, on the unclassified and classified networks through several different service touchpoints. In addition, optimize the use of information technology, ensure seamless delivery and operation of IT services by monitoring system performance, applying configuration management practices, creating processes and standards for selection and implementation.

• Experience with designing and implementing cloud-native solutions, focusing on scalability, cost efficiency, and security in Azure.
• Experience in Incident Response & Threat Detection.
• Experience monitoring, investigating, and responding to security incidents within Azure environments using native tools ( such as, Azure Security Center, Sentinel). 
• Proven hands on experience working with Microsoft Azure services (such as VMs, Azure Functions, App Services, Storage, Networking, AKS, etc.)
• Strong understanding of network security concepts (VPNs, firewalls, load balancers).

Desired Qualifications:

• Experience with security in multi-cloud environments (Azure + AWS).
• Knowledge of DevOps and CI/CD security best practices.
• Strong experience with Azure security services (e.g., Azure Security Center, Azure Sentinel, Azure Key Vault, Azure Firewall). 
• Experience with identity and access management (IAM) in Azure AD. 
• Additional certifications such as CISSP and CISM desired.

Work Location: The work location for this position has the potential for remote work. Remote work is defined as working offsite that is greater than 2 hours of the Laboratory location. Reporting onsite may be periodically necessary. All work locations are at the discretion of management.

Where You Will Work

• PPO or High Deductible medical insurance with the same large nationwide network
• Dental and vision insurance
• Free basic life and disability insurance
• Paid maternity and parental leave
• Award-winning 401(k) (6% matching plus 3.5% annually)
• Learning opportunities and tuition assistance
• Flexible schedules and time off (paid sick, vacation, and holidays)
• Onsite gyms and wellness programs
• Extensive relocation packages (outside a 50 mile radius)

Clearance:  Q (Position will be cleared to this level).  Selected applicants will be subject to a background investigation conducted by or on behalf of the Federal Government, and must meet eligibility requirements* for access to classified matter. This position requires a Q clearance. and obtaining such clearance requires US Citizenship except in extremely rare circumstances. Dependent upon the position, additional authorization to access classified information may be required, which may or may not be available to dual citizens.  Receipt of a Q clearance and additional access authorization ultimately is a decision of the Federal Government and not of Triad.

*Eligibility requirements:  To obtain a clearance, an individual must be at least 18 years of age; U.S. citizenship is required except in very limited circumstances. See DOE Order 472.2 for additional information.

New-Employment Drug Test: The Laboratory requires successful applicants to complete a new-employment drug test and maintains a substance abuse policy that includes random drug testing.  Although New Mexico and other states have legalized the use of marijuana, use and possession of marijuana remain illegal under federal law. A positive drug test for marijuana will result in termination of employment, even if the use  was pre-offer.
 
Regular position: Term status Laboratory employees applying for regular-status positions are converted to regular status.

Internal Applicants: Regular appointment employees who have served the required period of continuous service in their current position are eligible to apply for posted jobs throughout the Laboratory. If an employee has not served the required period of continuous service, they may only apply for Laboratory jobs with the documented approval of their Division Leader. Please refer to Policy Policy P701 for applicant eligibility requirements.

Equal Opportunity: Los Alamos National Laboratory is an equal opportunity employer. All employment practices are based on qualification and merit, without regard to protected categories such as race, color, national origin, ancestry, religion, age, sex, gender identity, sexual orientation, marital status or spousal affiliation, physical or mental disability, medical conditions, pregnancy, status as a protected veteran, genetic information, or citizenship within the limits imposed by applicable federal, state and local laws and regulations.

The Laboratory is also committed to making our workplace accessible to individuals with disabilities and will provide reasonable accommodations, upon request, for individuals to participate in the application and hiring process. To request a disability accommodation, email applyhelp@lanl.gov or call (505) 664-6947, opt. 3.