Cloud Cyber Security Engineer, SME

Position Summary

Command Cyber Solutions seeks a skilled Cloud Cyber Security Engineer with experience in securing cloud environments, focusing on the implementation of Secure Cloud Computing Architecture (SCCA) and Trusted Cloud Credential Management (TCCM) processes. The ideal candidate will have hands-on experience with at least one Cloud Service Provider (CSP) such as Oracle Cloud Infrastructure (OCI), Azure, or AWS, and a strong understanding of DoD security requirements.

This role involves securing cloud infrastructure, ensuring compliance with DoD security frameworks, and managing cloud access and identity. You will play a key role in maintaining the security posture of the environment and collaborating with teams to ensure continuous monitoring, auditing, and policy enforcement.

Clearance:
Active Secret Clearance required

Location:
Hill Air Force Base, Utah

Employment Type:
Full Time - Regular

Salary Range: $,000 (DOE)

• Implement and manage Secure Cloud Computing Architecture (SCCA) controls, including Virtual Data Center Security Stack (VDSS) and Boundary Cloud Access Point (BCAP).
• Work with DoD teams to ensure cloud environments are compliant with DoD security frameworks, including NIST, STIGs, and FedRAMP+.
• Manage and enforce Trusted Cloud Credential Management (TCCM) practices for secure identity access and cloud credential management.
• Configure and maintain cloud security services for monitoring, alerting, and logging using tools like Solar Winds, ELK, and native CSP security features.
• Support cloud onboarding and migration, ensuring security best practices are adhered to during the transition.
• Collaborate with cross-functional teams to ensure Zero Trust principles are implemented effectively in the cloud environment.
• Assist in preparing and maintaining documentation for ATO processes, including mapping inherited controls and contributing to eMASS submissions.
• Provide guidance on cloud security best practices and mentor junior team members in cloud security management.

Education Required:

• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or a related field (or equivalent experience).

Certification Required:

• CompTIA Security+
• DoD-approved cloud security certifications (e.g., AWS Certified Security Specialty, Microsoft Certified: Azure Security Engineer) preferred.

Experience Required:

• 5+ years of experience in cloud security with hands-on experience in at least one CSP (OCI, Azure, or AWS).
• Experience in implementing and managing security controls in cloud environments, including identity and access management (IAM), logging, and monitoring.
• Experience with security incident management, vulnerability assessments, and cloud compliance processes.

Knowledge:

• Solid understanding of DoD cloud security requirements, including NIST 800-53, STIGs, and FedRAMP+.
• Proficiency with automation tools such as Terraform, Ansible, and Power Shell for managing cloud configurations.

Skills:

• Strong troubleshooting and problem-solving skills in cloud environments.
• Excellent communication and collaboration skills.

Abilities:

• Problem-solving and decision-making ability: able to anticipate risks, resolve issues quickly, and adapt strategies to meet evolving project demands.
• Ability to think strategically to manage security-related tasks, updates, and deadlines, measurable by timely and complete execution of assigned activities.

• This position is performed in a professional environment, remote/home office setting, or on-site government facility, as required by the contract.
• Standard work schedule is Monday through Friday, during normally scheduled business hours, with occasional evening or weekend work to meet critical deadlines.
• Work involves extensive computer and secure network use, including periods of prolonged sitting, data entry, and screen time.
• The role requires working independently with minimal supervision, while also collaborating virtually or in person with CCS teams, subcontractors, and government stakeholders.
• Occasional travel may be required for customer meetings,…