Senior DevSecOps Engineer

Overview

Element 84 is a woman-owned small business that works with public, private, and non-profit sector clients to develop geospatial data processing pipelines and build software that helps answer big questions about our health, our infrastructure, and our changing planet. We solve challenging problems across a wide range of industries, with a focus on cloud-based geospatial data processing, remote sensing, and Earth science systems.

Our headquarters is located in Alexandria, VA and we have a satellite office in Philadelphia, PA. Element 84 also supports a large remote workforce from a variety of other states.

You are curious about the world, are constantly learning, driven to lead (formally or informally), and have a strong work ethic. You’re interested in solving impactful problems in science, medicine, and other projects that have a societal good. You can work independently or with a team, prioritize your projects, and be effective without micromanagement.

You care about writing. Our team is remote and written communication is essential. In addition to caring about a well-crafted email and a succinct conference abstract, you understand that good writing is good design and engineering.

We are seeking a highly skilled and experienced Senior Dev Sec Ops  Engineer to join our team. In this role, you will be a key contributor to securing our client’s cloud infrastructure and applications across AWS, Azure, and Google Cloud Platform (GCP). You will be responsible for ensuring compliance with federal security standards and integrating security best practices into our development and operations processes.

This is a senior-level position that requires in-depth technical knowledge and the ability to work independently under the general direction of our client’s Cybersecurity Organization.

• Cloud Security Engineering:
  Design, implement, and maintain secure cloud solutions across AWS, Azure, and GCP to meet mission and compliance requirements.
• Security Documentation:
  Assist in developing and maintaining essential security artifacts, including System Security Plans (SSPs), Security Assessment Reports (SARs), and Plans of Action and Milestones (POA&Ms).
• Architectural Analysis:
  Analyze complex cloud and system architectures to identify security risks and recommend effective mitigation strategies.
• Control Implementation:
  Apply and document security controls based on NIST 800-53 and NIST 800-171 standards.
• Dev Sec Ops  Integration:
  Collaborate with all functional areas of the team to embed security into CI/CD pipelines and automate security checks.
• Vulnerability & Incident Support:
  Assist in cloud-based incident response and lead vulnerability remediation efforts.
• Cloud Security Best Practices:
  Provide expert guidance on cloud security best practices, including encryption, access controls, identity management, and data protection.
• Security Tooling & Evaluation:
  Evaluate, recommend, and implement cloud-native and third-party security tools.
• Risk & Change Management:
  Participate in design reviews, risk assessments, and change control processes to ensure the security of new systems and changes.
• Continuous Monitoring:
  Lead annual security assessments and ongoing monitoring activities to maintain a strong security posture.
• Stakeholder Guidance:
  Advise Information System Owners (ISOs) on system security and compliance matters.
• Tenant Oversight:
  Oversee security posture for cloud infrastructure and monitor tenant security control implementation.
• Interconnection Security Agreements (ISAs):
  Support the development and maintenance of ISAs between tenants and Cloud Computing Services.

• Education:
  
  Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field.
• Industry Certification: AWS Associate-level certification is required. If not currently held, the candidate must successfully obtain this certification within 6 months of their start date.
• Experience:
  
  A minimum of 8 years of experience in information security, with significant experience in a cloud environment.
• Technical Knowledge:
  Deep understanding of cybersecurity principles, intrusion…