Cybersecurity Cloud SME

Join Enterprise Solutions & Management Corporation to support an enterprise-level federal program as a Cybersecurity Cloud SME in Richmond, VA 23220 (onsite). This role focuses on helping cloud-hosted IT systems align with Department of Defense (DoD) cybersecurity requirements through engineering guidance, security posture improvements, and assessment support, including Cybersecurity Vulnerability Assessments (CVAs). The position offers a USD 108,000 - 128,000 per year salary range and calls for 5+ years of relevant experience.

Responsibilities

• Ensure the architecture and design of cloud-hosted IT systems meet DoD cybersecurity requirements.
• Review cloud security policies, identify improvement areas, and recommend updates to strengthen security and support protection, detection, monitoring, and response capabilities for systems and data.
• Apply current cloud security engineering practices and account for emerging threats to support secure deployment of programs and applications.
• Provide cybersecurity guidance throughout the deployment process to maintain compliance with DoD standards and requirements.
• Advise assessment teams on how to conduct Cybersecurity Vulnerability Assessments (CVAs) for cloud-hosted environments.

Requirements

• Knowledge of cloud security architecture and engineering principles to design and implement cloud-hosted IT systems in accordance with DoD cybersecurity requirements.
• Ability to review cloud security policies, identify gaps, and recommend improvements to strengthen security controls and overall cloud security posture.
• Knowledge of cloud security threats, vulnerabilities, and emerging technologies to support secure deployment and operation of cloud-hosted systems and applications.
• Ability to assess and support security capabilities for protecting, detecting, monitoring, and responding to threats affecting cloud-hosted systems and data.
• Skill in providing cybersecurity guidance across the system deployment lifecycle to ensure compliance with DoD security standards, policies, and requirements.
• Ability to support and advise assessment teams in conducting CVAs for cloud-hosted environments to identify weaknesses and recommend corrective actions.
• Two (2) years of experience achieving ATOs in a cloud environment (OCI, AWS, Azure, GCP).
• Five (5) years of achieving ATOs for compartment DoD IT systems.
• Computing Environment certification: Cloud Security Certification (OCI, AWS, Azure, GCP).

Technology Focus

• OCI
• AWS
• Azure
• GCP

Desired KSA

• Positive, self-motivated, proactive approach with the ability to adapt to change and tolerate stressful situations.
• Effective communication with team members, team lead, management, and government customers.
• Ability and desire to research and develop creative solutions to unique problems with minimal supervision.

Security Clearance

Minimum clearance: Secret

Physical Requirements

• Required to stand, walk, and sit; communicate verbally in person and by telephone; use hands to finger, handle, or feel objects or controls; reach with hands and arms.
• Regularly required to stoop, kneel, bend, crouch, and lift up to 25 pounds.
• Specific vision abilities required: close vision, distance vision, depth perception, color vision, and ability to adjust focus.
• Extensive walking, including stairs, throughout offices and between buildings.
• May require use of public transportation, personal or Government vehicle to drive to local and/or remote office locations.

Additional requirements: Other duties as assigned.