University CUI Infrastructure & Cloud Security Engineer

University CUI Infrastructure & Cloud Security Engineer

Position Overview:

The University CUI Infrastructure & Cloud Security Engineer will provide full scope technical work system management and support to Bozeman-based and remote employees. The position will be responsible for ensuring Mil Tech’s DoD and NIST SP800-171 compliance with all aspects and types of electronic, computer, and physical work information security systems.

Security Compliance & CUI Management

• Lead and coordinate university-wide CUI compliance efforts, ensuring alignment with NIST SP800-171, CMMC Lv2, NIST 800-53, and other federal guidelines.
• Develop, implement, and maintain security policies, standards, and procedures for safeguarding CUI across all university departments.
• Serve as the primary technical point of contact for CUI-related security and compliance, including risk assessments, audits, and incident response.
• Collaborate closely with the ISSM to support CMMC Level 2 compliance.

Azure GCC High Tenant Administration

• Act as global administrator for the university’s Azure GCC High tenant, overseeing configuration, access management, and security controls.
• Design, plan, and execute the migration of CUI workloads to the Azure GCC High enclave, ensuring secure and compliant operations.
• Provide ongoing system administration, monitoring, and support for the CUI Azure GCC High environment, including patching, updates, and backup management.

Technical Support & Collaboration

• Provide technical support for university staff, including legacy on-prem CUI environment, onboarding/offboarding, endpoint device management, and user access provisioning.
• Collaborate with IT, security, and administrative teams to identify vulnerabilities, recommend solutions, and implement mitigating controls.
• Train and educate users on security best practices, CUI handling, and compliance requirements.
• Proactively monitor security alerts, respond to incidents, and coordinate remediation efforts.
• Research and recommend new security technologies and process improvements.
• Maintain up-to-date knowledge of regulatory requirements and emerging threats.

• Bachelor’s degree in a technology-related field or equivalent experience.
• Demonstrated experience with Windows, Linux, and Apple systems administration.
• Hands-on experience managing cloud environments, especially Azure GCC High.
• Experience with Active Directory, encryption, VPNs, and virtual environments.
• Strong understanding of NIST frameworks (SP800-171, 800-53), CUI requirements, CMMC Level 2, and federal compliance standards.
• Proven ability to provide technical support and training to users of varying expertise.

• Advanced degree in cybersecurity or related field.
• Experience in a multi-campus higher education environment.
• Prior experience as a global admin in Azure GCC High or similar environments.
• Experience with vulnerability management, SIEMs, and incident response.

• Excellent verbal and written communication skills.
• Discretion in handling sensitive information and high-stress incidents.
• Ability to prioritize, multi-task, and adapt to changing priorities.
• Strong analytical, problem-solving, and collaboration skills.

• This is a full-time, on-site position based at our Bozeman, Montana campus.
• Must meet NIST 800-53 requirements for access to CUI; ability to obtain DoD Security Clearance may be required.
• Familiarity with NIST 800-171 and CUI is preferred.
• Position involves access to export-controlled information; must be a U.S. Person per 22 CFR § 120.62.
• May require periodic after-hours support and infrequent travel.

• Resume
• Cover Letter

Montana State University is an equal opportunity employer. MSU does not discriminate against any applicant on the basis of race, color, religion, creed, political ideas, sex, sexual orientation, gender identity or expression, age, marital status, national origin, physical or mental disability, or any other protected class status in violation of any applicable law.
In compliance with the Montana Veteran’s Employment Preference Act, MSU provides preference in employment to veterans, disabled veterans, and certain eligible relatives of veterans. To claim veteran’s preference, please complete the veteran’s preference information located in the Demographics section of your profile.

Required fields are indicated with an asterisk (*).