Cloud Security Engineer with Security Clearance

Koniag Technology Solution, a Koniag Government Services company, is seeking an experienced Cloud Security Engineer to join a dynamic team supporting cloud security architecture, implementation, and continuous monitoring across multiple cloud platforms. The ideal candidate is a technically proficient security professional with hands-on experience securing environments across Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP). This individual will be passionate about cybersecurity, committed to staying current with evolving threats and technologies, and capable of applying their expertise to solve complex, real-world security challenges in a federal government context.

The ability to obtain or maintain an active Secret clearance is required to support our government customer. We offer competitive compensation and an extraordinary benefits package including health, dental and vision insurance, 401K with company matching, flexible spending accounts, paid holidays, three weeks paid time off, and more. The Cloud Security Engineer will be responsible for the security aspects of cloud system design, security tool and service analysis and selection, and subsequent implementation across AWS, Microsoft Azure, and Google Cloud Platform (GCP).

This individual will configure tools and services to meet the business requirements, policy mandates, and security risk tolerance of our government customers. The Cloud Security Engineer will also document how required security controls are satisfied through cloud service and tool implementations to support Assessment and Authorization (A&A) activities. Principal responsibilities will include but are not limited to:
* Engineer and design security solutions across cloud platforms including AWS, Microsoft Azure, and GCP that manage risk and meet relevant security regulations, controls, and policies.
* Implement security designs by installing, configuring, and testing cloud-native services, associated third-party services, and security software across multi-cloud environments.
* Determine how to effectively leverage native security services from cloud providers and identify gaps that must be addressed through additional tools, software, or third-party services.
* Implement and manage security tools and services including OS hardening, cloud-native security features (e.g., AWS Config, Azure Security Center, GCP Security Command Center), vulnerability management tools such as Qualys, intrusion detection tools such as Tripwire, and SIEM solutions such as Splunk.
* Develop and maintain processes and procedures for the operation and use of implemented security tools and services.
* Prepare Assessment and Authorization (A&A) documentation including System Security Plans (SSPs), security control worksheets, and other supporting artifacts.
* Participate in the assessment of system security controls to validate proper implementation and identify weaknesses or gaps in compliance posture.
* Perform continuous monitoring of cloud environments using implemented solutions and tools to detect and respond to security events.
* Conduct security impact assessments of proposed changes to cloud environments to identify adverse shifts in security risk posture or compliance standing.
* Identify new and innovative ways to leverage existing toolsets to automate security management, monitoring, and related processes in order to reduce risk and operational costs.
* Collaborate with cross-functional technical teams, system owners, and business analysts to reconcile security requirements with operational needs.
* Contribute to technical documentation including architecture diagrams, security design documents, and detailed data flows.

Education and Experience :
* Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related IT or security field from an accredited college or university.
* 5+ years of professional experience in IT/network engineering, security engineering, system administration, or security operations.
* Demonstrated experience with FISMA, FedRAMP, and NIST SP 800-53 security frameworks and control families.
* Active Secret…