Cloud Security Engineer

Cloud Security Engineer

The Opportunity:

Define, communicate, and implement cybersecurity architecture and administration processes for Oracle Cloud Infrastructure (OCI), Amazon Web Services (AWS) and Microsoft Azure cloud environments across multiple network domains. Collaborate across our cloud infrastructure delivery team and with stakeholders using an Agile process to design, implement, verify, and continuously monitor cloud solutions across multiple domains.

Develop Risk Management Framework (RMF) Body of Evidence artifacts, including system security plans and cybersecurity concept of operations documents for Cloud environments in alignment with existing RMF packages. Support assessment and authorization activities to achieve and maintain Authority to Operate (ATO) on multiple networks. Evaluate enhancements to Cloud environments against RMF controls and DoD Security Technical Implementation Guidance (STIG) requirements. Support data capture and configuration within tools to enable achievement of the organization’s Assessment and Authorization (A&A) objectives.

Work without considerable direction. Mentor and supervise team members, as needed.

• 6+ years of experience securing computer systems and infrastructure, performing DoD authorization support activities, and developing a body of evidence for RMF
• 6+ years of experience with secure IT architecture and computing hardware and software
• Experience working with Cloud technologies, including AWS, Azure, GCP, Oracle, or Infrastructure as a Service
• Experience with vulnerability management, incident monitoring, log analysis, and endpoint security
• Experience with Red Hat Enterprise Linux (RHEL) or Windows system administration
• Experience supporting security reviews of software and system releases within a Dev Sec Ops  framework and supporting recurring path-to-production software and system release activities
• Experience with terminology, processes, and regulations of IT system A&A for the RMF
• Secret clearance
• HS diploma or GED
• DoD 8570 or 8140 IAT Level II Certification

• Experience assessing and authorizing network connections
• Experience planning, implementing, and managing continuous monitoring solutions and working within an Agile-based project management framework
• Experience with scripts, Power Shell, and Bash to provide automated scanning or monitoring solutions
• Experience with code management tools such as Git or Git Lab in a team setting
• Experience with the Army, DoD, or Intelligence Community (IC) Information Assurance (IA) or Information Systems
• Experience in Information System Security Engineer (ISSE) or Information System Security Officer (ISSO) roles
• Knowledge of terminology and federal regulations related to the specification, development, acquisition, and maintenance of IT systems
• Ability to work independently and as an integrated member of a project team
• Possession of excellent verbal and written communication skills
• TS/SCI clearance

All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.