Cloud Security Engineer

Booz Allen Hamilton is looking for a hands-on Cloud Security Engineer to support cloud-based security architecture work and reinforce IT systems for Intelligence Community mission-critical applications. In this role, you will help evaluate and support documentation, validation, assessment, and accreditation activities using RMF, then implement cloud security architectures, tools, and processes that meet organizational security requirements.

Role and focus

• Support cloud security architecture development and implementation for on-premise, cloud-based, and hybrid environments.
• Assist with security documentation and evaluation efforts that help IT systems meet Information Assurance (IA) and security requirements.
• Contribute to validation and accreditation processes aligned to Risk Management Framework (RMF).

Responsibilities

• Evaluate and support documentation, validation, assessment, and accreditation processes to ensure IT systems meet organization IA and security requirements.
• Assist in defining desired-state targets and risk thresholds, then analyze actual-state information to assess compliance.
• Partner with leaders to advise on codifying strategic objectives into doctrine and procedures that support defined objectives.
• Evaluate computer applications, software, and specialized utility programs to determine whether software assurance best practices are followed.
• Research the current environment and recommend tools and capabilities across on-premise, cloud-based, and hybrid resources to address security requirements.
• Implement cloud security architectures, tools, and processes you helped shape and define.

Required qualifications

• 5+ years of experience building and administering cloud environments, using cloud-native functionality and COTs, GOTS, and open-source tools to meet objectives.
• Experience assisting with development and evaluation of security documentation, including system security plans, contingency plans, security procedures, and continuity of operations plans.
• Experience with security architecture evaluations, guidance development, and troubleshooting.
• Experience with the Risk Management Framework (RMF).
• Experience working in an Agile development environment.
• Knowledge of infrastructure-as-code concepts such as Terraform, CloudFormation, or Bicep.
• Active TS/SCI clearance and willingness to take a polygraph exam.
• Education and experience combinations: HS diploma or GED with 7+ years; Associate’s degree with 5+ years; Bachelor’s degree with 3+ years; or Master’s degree with 1+ year supporting IT projects and activities.
• Ability to obtain a DoD 8570 IAT Level III Certification within 30 days of start date, such as SecurityX, CASP+, CCNP Security, CISA, CISSP, CISSP Associate, GCED, GCIH, or CCSP.
• Ability to obtain a DoD 8570 Cybersecurity Service Provider - Infrastructure Support Certification (CSSP-IS) within 30 days of start date, including CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND.

Technologies

• Terraform
• CloudFormation
• Bicep
• Risk Management Framework (RMF)

Nice to have

• Experience with the software development life cycle (SDLC).
• Excellent team leadership, development, and client relationship skills.
• Excellent interpersonal communication and verbal and written communication skills.

Clearance and security notice

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information. TS/SCI clearance is required.

Work model and location

• Location: McLean, VA (onsite)

Work model requirements may include remote, hybrid, or onsite expectations based on the role and customer site needs. Employees working virtually are generally expected to have cameras on during meetings.

Compensation

The projected compensation range for this position is $99,000.00 to $225,000.00 (annualized USD). This posting will close within 90 days from the Posting Date.

Benefits

• Health, life, disability, financial, and retirement benefits
• Paid leave
• Professional development
• Tuition assistance
• Work-life programs
• Dependent care
• Paid leave and recognition awards program acknowledging employees for exceptional performance and superior demonstration of company values

Identity verification and interview policy

• Complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud.
• You are expected to be on camera during interviews and assessments.
• Booz Allen Hamilton may take your picture to verify your identity and prevent fraud.
• Use of AI or other tools to assist with responses during interviews is prohibited unless permission is explicitly provided.

Non-discrimination

All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran, or any other status protected by applicable federal, state, local, or international law.