SAP NS2 Senior Cloud Security Engineer-TS​/SCI poly Onsite - Chantilly, VA

SAP NS2 Senior Cloud Security Engineer – TS/SCI with Polygraph – Onsite, Chantilly, VA

Active TS/SCI with Polygraph Required

Must be a U.S. citizen with active TS/SCI clearance with Polygraph.
NS2 does not offer visa sponsorship for this role.

All internal candidates must have manager’s approval to transfer.

The Senior Cloud Security Engineer will lead the development of stand‑alone implementations of SAP products and solutions that meet our client’s complex needs. This is a full‑time, onsite‑only position based in Chantilly, VA. The candidate should be hands‑on and possess deep knowledge of cloud‑based systems and security principles, able to work with minimal supervision, comprehend the complexities of cloud environments, and communicate cloud design and architecture concepts to both technical and non‑technical stakeholders.

• Develop and implement cloud‑based security policies, standards, and procedures.
• Maintain role‑based access controls for cloud components, users, and applications.
• Implement security controls such as encryption, access controls, and identity management to protect cloud assets.
• Deep understanding of cloud security technologies: firewalls, intrusion detection/prevention systems, vulnerability scanners, and log analysis tools.
• Strong technical skills in software architecture, cloud computing, and excellent written and public communication skills.
• Design & architecture skills – experience designing software applications for products and solutions.
• Expertise with Infrastructure as Code tools (Cloud Formation, Terraform, Ansible, Chef).
• Experience with AWS management tools (Cloud Watch, Cloud Trail).
• Understanding of data serialization languages such as JSON and YAML.
• Proven system administration experience.
• 5+ years with Linux (various distributions) and strong UNIX shell scripting knowledge.
• 5+ years native cloud backend and frontend development (node.js, Spring Boot, Spring Cloud, Angular, etc.).
• Expertise in cloud‑native architecture and development: microservices, event‑driven, CQRS.
• Experience designing scalable, multi‑tenant SaaS applications within large service‑oriented architectures.
• Knowledge of SaaS architecture from experience.
• Experience in AWS, Azure, and/or GCP environments.
• Develop and deploy applications on Docker containers.
• Experience with Kubernetes, Helm, Kustomize, ArgoCD for microservice orchestration.
• Knowledge of Cloud Foundry architecture and development methodology.
• Implement Agile practices in software development.
• Expert knowledge of full‑stack cloud‑native technologies (Cloud Foundry, Kyma, Azure, AWS, etc.).
• Dev Ops experience establishing flawless pipelines; knowledge of Azure Dev Ops is a plus.
• Collaboration with Product Managers, Architects, Project Management, Scrum Masters, Developers, and Dev Ops for successful delivery.
• Expertise on product standards such as security and performance incorporated into design.
• Ability to obtain DoD 8570 certification (e.g., CASP, CISSP) within 6 months of hire.
• Relevant cloud provider certifications.

• Strong knowledge of SAP processes and experience in enterprise software development.
• Industry recognized systems administration certification.
• Good knowledge of SAP Business Technology Platform (BTP) and services.
• SAP full‑stack experience with S/4
  
  HANA implementations or BTP extensions/integrations.
• Understanding of core security concepts of BTP.

• Systems administration and/or cloud certifications a plus.
• Knowledge of Splunk or similar SIEM platform.
• BA/BS degree required (CS, Cyber Security, Info Security, Eng, IT); MA/MS preferred.
• Top Secret clearance with Polygraph.

Target annual combined range: $131,000 – $271,600 USD. Actual offer based on education, skills, experience, scope, location, and other factors.

Qualified applicants will receive consideration for employment without regard to age, race, religion, national origin, ethnicity, gender (including pregnancy, childbirth, etc.), sexual orientation, gender identity, protected veteran status, disability, or any other status protected by law.