Title: Multi-Cloud Security Engineer

Location: Reston, VA

Clearance: Current TS/SCI with the ability to obtain and maintain CI Poly

Responsibilities:

• Perform in a Security Engineer, Subject Matter Expert, role responsible for the design, configuration, testing, and deployment, of cloud provider services such as AWS, Azure, Oracle, IBM, Google Cloud, etc. and cloud-based services such as Office 365 in support of the IC
• Apply knowledge of the latest trends in the Cloud Security Engineering industry to support the analytical service contract in the deployment of web services and solutions enabling the automation of data discovery and support higher orders of analysis to implement Cloud Security best practices
• Designs, plans, and integrates cloud computing and virtualization systems using Infrastructure as Code (IaaC) and current cloud-native deployment techniques and tools
• Provide Cloud Security Engineering input to programs throughout the lifecycle to ensure systems meet ICD-503 and Risk Management Framework (RMF) standards
• Use system automation technologies and configuration management technologies such as Saltstack, Chef, Puppet, Ansible, Terraform, CloudFormation or others to create standardized IT environments
• Work with Solution Architects to conduct Proof of Concepts (POCs), and assist in production implementations
• Execute periodically, and on-demand system audits and vulnerability assessments, including user accounts, application access, file system, and external web integrity scans to determine compliance
• Participates in special projects as required to include technology evaluations and produce Analysis of Alternatives and provide Cloud Security SME recommendations
• Assist the agency in designing, implementing, and documenting the security controls of the system to enable the agency to achieve initial authorization
• Support the iterations of new capabilities and cloud services via change management and continuous monitoring
• Assist customers of the network in leveraging the security controls provided so they can rapidly deploy their applications

Requirements:

• Bachelor's Degree and 10 years' experience an additional 4 years' experience can be substituted in lieu of a degree
• Must possess current DoD 8570 IASAE Level II certification
• Exposure to big data solutions in cloud environments such as SageMaker
• Excellent communication skills, verbal and written, with the ability to influence and collaborate with leadership, peers, and team members
• Extensive hands-on experience with cloud architecture/engineering, services, migration, and security to include AWS/Azure Commercial, Secret, and TS/SCI regions
• Experience with Office 365
• Experience with Cloud-based Computer Network Defense (CND)
• Experience with Networking in Cloud and on-prem environments
• Experience with cloud automation and scripting (Auto-scale, Azure Resource Management, Scripting, PowerShell)
• Experience assessment and authorization practices and processes under ICD 503 Risk Management Framework (RMF) and implementing NIST 800-53 security controls for U.S. Government networks and applications
• Current active TS/SCI clearance, with the ability to obtain and maintain a CI polygraph

Equal Opportunity Employer/Veteran/Disabled