Cloud Security Engineer

Responsible for identifying cloud security risks and recommending corrective security and technology improvements to help secure GSA cloud systems.

Responsibilities

• Develop and maintain a security engineering framework, processes, and supporting guidelines integrated into the GSA IT System Development Lifecycle (SDLC) to deliver security engineering and security consulting as a formal program capability.
• Embed security across IT architecture using a multidisciplinary approach, including system and cloud architecture, secure API integration, required key technical controls, and code quality.
• Design and implement integrated projects so multiple software, hardware, communications, process, and integration components function as a single secure system that delivers proposed business capabilities.
• Pilot security solutions, procure required hardware/software, implement the solutions, and formally assess security features against GSA IT Security requirements.
• Review and approve Security Architectures before system build begins, including architecture, infrastructure, and code.
• Provide technical guidance to restructure or re-architect GSA networks, improving secure placement and configuration of network tools and appliances to protect sensitive Government data.
• Design, develop, and integrate software or process interfaces to resolve complex and evolving IT security issues.
• Ensure new technologies are implemented using IT Security Engineering standards and integrated with agency strategic IT and IT security architecture, with no security gaps.
• Provide security consulting and engineering support for GSA IT systems and emerging IT and IT security initiatives, including:
  • Cloud computing
  • Bring-your-own-device (BYOD)
  • Virtual Desktop Infrastructure
  • Mobile devices and Mobile Computing Platforms
  • Remote Access Systems
  • Active Directory
  • System Virtualization
  • Physical access control systems (building security)
  • Identity and access management solutions

Requirements

• US Citizenship or National (Residents of American Samoa and Swains Island)
• Meet all eligibility requirements within 30 days of the closing date
• Register with Selective Service if you are a male born after 12/31/1959
• Direct Deposit of salary check to a financial organization required
• Undergo and pass a background investigation at the Tier 2 level
• If not a GSA employee, identity and work status eligibility must be verified; uses Department of Homeland Security e-Verify, and any discrepancies must be resolved as a condition of continued employment
• Complete a financial disclosure report to verify no conflict or appearance of conflict
• Serve a one-year probationary period, if required
• Political appointee considerations: OPM must authorize offers for current or former political appointees; disclose if currently or within the last 5 years you were a political Schedule A, Schedule C, or NonCareer SES employee in the Executive Branch; failure to disclose can result in disciplinary action including removal
• Have IT-related experience showing each of the 9 competencies and one year specialized experience equivalent to GS-13 level as described in IT Specialist Competency requirements
• Specialized experience in information technology security work and validating security control implementations in cloud-native environments, including:
  • Analyzing output from automated scanning and assessment tools
  • Planning, developing, or maintaining an organization-wide information security program
  • Implementing and evaluating security controls across enterprise systems and cloud-based environments
  • Conducting security reviews such as system assessments and vulnerability identification (and related correc… as applicable)
• Resume must not exceed two pages

Technologies

• Amazon Web Services (AWS)
• Linux Operating Systems (Red Hat Enterprise Linux, CentOS, Ubuntu)
• Ansible, Chef, Puppet
• Jenkins
• Git, Gerrit
• Java, C++, C#, ASP .NET, VB
• APEX, Node, Go, Python, PERL, PHP, RoR
• Active Directory
• Cloud computing
• Bring-your-own-device (BYOD), Virtual Desktop Infrastructure, Remote Access Systems
• System Virtualization
• Identity and access management solutions
• Mobile devices, Mobile Computing Platforms
• Physical access control systems (building security)
• Secure API integration
• Cryptography, hash functions, key material handling
• Continuous integration/automation tools

Benefits

• Health insurance (choose from a wide range of plans)
• Life insurance coverage with several options
• Sick leave and vacation time, including 11 paid holidays per year
• Thrift Savings Plan (similar to a 401(k) plan)
• Transit and child care subsidies
• Flexible spending accounts
• Long-term care insurance
• Training and development

Open To

• The public
• U.S. Citizens, Nationals or those who owe allegiance to the U.S.

Clarification from the Agency

• Public notice issued under Direct Hire Authority (DHA) to recruit talent for occupations with severe shortage of candidates or critical hiring need
• Current civil service employees may receive new appointments if selected under this DHA
• DHA information: https://www.opm.gov/policy-data-oversight/hiring-information/direct-hire-authority/

How You Will Be Evaluated

• Evaluated based on how well you meet the qualifications above
• Application evaluated against basic qualifications including specialized experience and/or education requirements (if applicable)
• Applications will not be rated or ranked
• Veterans' Preference not applicable to direct hire recruitment procedures
• Incomplete applications or missing required supporting documentation may result in not being considered
• Falsification of background, education, and/or experience may result in non-selection or dismissal
• SME Resume Review: Subject Matter Experts review resumes using a pass/fail process
• ICTAP/CTAP: selection priority and well-qualified definition based on meeting at least 3 out of 5 KSA’s listed (supported by the resume)
• You may preview questions for this vacancy

Required Documents

• Submit all required documents before the closing date
• Resume: must not exceed two pages (see Qualifications section for resume requirements)
• If ICTAP/CTAP eligible: submit (a) proof of eligibility including agency notice; (b) SF-50; (c) most recent performance appraisal
• If current or former political appointee: submit SF-50

How To Apply

• Submit a complete online application and required documents before 11:59 pm Eastern Time on the closing date
• Resumes exceeding two pages will not be accepted by USAJOBS and may prevent the application from advancing
• If you click Return to USAJOBS or get timed out before confirmation, the application will not be submitted and cannot be considered

Education

• No substitution of education for experience at the GS-14 level

Location: Lakewood, CO (onsite)

Salary: USD 127,829 - 187,093 per year

Minimum Experience: 1 years

Citizenship/Eligibility Notes: US Citizenship or National; must meet all eligibility requirements within 30 days of the closing date