Cloud Security Engineer
On-siteReston, Virginia, United States
Job Summary
Evaluate and support documentation, validation, assessment, and accreditation processes to ensure IT systems meet Information Assurance and security requirements. Assist in defining desired states, risk thresholds, and compliance analyses while working with leaders to codify strategic objectives into doctrine. Implement cloud security architectures, tools, and processes by recommending capabilities based on research of on-premise, cloud-based, and hybrid resources. Analyze actual state information to assess compliance and ensure software assurance best practices are followed for computer applications and specialized utility programs. Collaborate with IC clients to verify standards are met with security requirements while utilizing the latest cloud technologies to secure customer environments. This on-site role requires an existing TS/SCI with CI polygraph and 5+ years of cloud environment experience.
Required Qualifications
- Existing/active TS/SCI with CI polygraph
- No remote work (must work on site)
- 5+ years of experience building and administering cloud environments, utilizing cloud-native functionality, and COTs, GOTS, and open source tools to meet objectives
- Experience with developing and evaluating security documentation, including system security plans, contingency plans, security procedures, and continuity of operations plans
- Experience with security architecture evaluations, guidance development, and troubleshooting
- Experience with the Risk Management Framework (RMF)
- Experience with working in an Agile development environment
- Knowledge of Infrastructure code concepts such as Terraform, CloudFormation, or Bicep
- Associate's degree and 5+ years of experience supporting IT projects and activities, Bachelor's degree and 3+ years of experience supporting IT projects and activities, or Master's degree and 1+ years of experience supporting IT projects and activities
- Ability to obtain a DoD 8570 IAT Level III Certification such as SecurityX (formerly CASP+), CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, CCSP certification within 30 days of start date
- Ability to obtain a DoD 8570 Cybersecurity Service Provider - Infrastructure Support Certification (CSSP-IS), including CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND Certification, within 30 days of start date
- Experience with the software development life cycle (SDLC)
- Experience with cloud technologies
Desired Qualifications
- Possession of excellent team leadership, development, and client relationship skills
- Possession of excellent interpersonal skills
- Possession of excellent verbal and written communication skills
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.