University CUI Infrastructure & Cloud Security Engineer

University CUI Infrastructure & Cloud Security Engineer

Montana State University – Office of Student Engagement

Location:

Bozeman, Montana (Full‑time, On‑site)

Position Number: 4C2772

The University CUI Infrastructure & Cloud Security Engineer will provide full‑scope technical system management and support to Bozeman‑based and remote employees. The role ensures Mil Tech’s DoD and NIST SP800‑171 compliance across all electronic, computer, and physical work information security systems.

• Lead and coordinate university‑wide CUI compliance efforts, aligning with NIST SP800‑171, CMMC Level 2, NIST 800‑53, and other federal guidelines.
• Develop, implement, and maintain security policies, standards, and procedures for safeguarding CUI across all university departments.
• Serve as the primary technical point of contact for CUI‑related security and compliance, including risk assessments, audits, and incident response.
• Collaborate closely with the ISSM to support CMMC Level 2 compliance.
• Act as global administrator for the university’s Azure GCC High tenant, overseeing configuration, access management, and security controls.
• Design, plan, and execute the migration of CUI workloads to the Azure GCC High enclave, ensuring secure and compliant operations.
• Provide ongoing system administration, monitoring, and support for the CUI Azure GCC High environment, including patching, updates, and backup management.
• Offer technical support for university staff, including legacy on‑prem CUI environment, onboarding/offboarding, endpoint device management, and user access provisioning.
• Collaborate with IT, security, and administrative teams to identify vulnerabilities, recommend solutions, and implement mitigating controls.
• Train and educate users on security best practices, CUI handling, and compliance requirements.
• Proactively monitor security alerts, respond to incidents, and coordinate remediation efforts.
• Research and recommend new security technologies and process improvements.
• Maintain up‑to‑date knowledge of regulatory requirements and emerging threats.

• Bachelor’s degree in a technology‑related field or equivalent experience.
• Demonstrated experience with Windows, Linux, and Apple systems administration.
• Hands‑on experience managing cloud environments, especially Azure GCC High.
• Experience with Active Directory, encryption, VPNs, and virtual environments.
• Strong understanding of NIST frameworks (SP800‑171, 800‑53), CUI requirements, CMMC Level 2, and federal compliance standards.
• Proven ability to provide technical support and training to users of varying expertise.

• Advanced degree in cybersecurity or related field.
• Experience in a multi‑campus higher education environment.
• Prior experience as a global admin in Azure GCC High or similar environments.
• Experience with vulnerability management, SIEMs, and incident response.

• Full‑time, on‑site position at Bozeman campus.
• Must meet NIST 800‑53 requirements for access to CUI; ability to obtain DoD Security Clearance may be required.
• Familiarity with NIST 800‑171 and CUI is preferred.
• Position involves access to export‑controlled information; must be a U.S. Person per 22 CFR 120.62.
• May require periodic after‑hours support and infrequent travel.

Contact:
John Williams,
john.williams
25
, 406‑994‑7841

• Resume
• Cover Letter

Montana State University is an equal opportunity employer. MSU does not discriminate against any applicant on the basis of race, color, religion, creed, political ideas, sex, sexual orientation, gender identity or expression, age, marital status, national origin, physical or mental disability, or any other protected class status in violation of any applicable law. In compliance with the Montana Veteran’s Employment Preference Act, MSU provides preference in employment to veterans, disabled veterans, and certain eligible relatives of veterans.

To claim veteran’s preference, please complete the veteran’s preference information located in the Demographics section of your profile.

Posting Date:
January 2, 2026 (applications accepted until an adequate applicant pool is established).

Salary range: $85,000 to $95,000 annually, commensurate with experience, education, and qualifications.

• Excellent verbal and written communication skills.
• Discretion in handling sensitive information and high‑stress incidents.
• Ability to prioritize, multi‑task, and adapt to changing priorities.
• Strong analytical, problem‑solving, and collaboration skills.