Senior Cloud Security Engineer
Job Description
Senior Cloud Security Engineer role focused on defining cloud cybersecurity architecture, supporting Agile delivery, and automating authorization workflows for CATO.
Responsibilities
- Define, communicate, and implement cybersecurity architecture and administration processes for cloud environments across multiple network domains.
- Collaborate with the cloud infrastructure delivery team and stakeholders using an Agile process to support design, implementation, verification, and continuous monitoring of cloud solutions across multiple domains.
- Automate cyber processes to support Continuous Authorization to Operate (CATO).
- Evaluate cloud environment enhancements against Risk Management Framework (RMF) controls and DoD Security Technical Implementation Guidance (STIG) requirements.
- Perform work with minimal direction.
- Mentor and supervise team members, as needed.
Requirements
- 8570 or 8140 Series IAT Level II certification plus a cloud certification: AWS Certified Cloud Practitioner or Azure Fundamentals.
- 8+ years of experience securing computer systems, conducting DoD authorization activities, and writing security plans for secure IT architecture and computing hardware and software.
- 8+ years of experience with cloud technologies, including AWS, Microsoft Azure, or Infrastructure as a Service (IaaS).
- 4+ years of experience with Intelligence Community (IC) cybersecurity or information systems.
- 2+ years experience automating tasks in cloud environments using scripting tools such as Bash, PowerShell, Python, AWS, or Azure CLI.
- Experience with cloud-native tools to automate CATO objectives and support RMF IT system Assessment and Authorization (A&A) terminology, processes, and regulations.
- Experience supporting security assessment of software and system releases in a DevSecOps framework (for example, CI/CD pipelines).
- Experience with code management tools such as Git for Infrastructure-as-Code (IaC).
Technology Focus
- Amazon Web Services (AWS)
- Microsoft Azure
- Infrastructure as a Service (IaaS)
- Bash, PowerShell, Python
- AWS Command Line Interface (CLI), Azure Command Line Interface (CLI)
- CI/CD pipelines
- Git
- Infrastructure-as-Code (IaC)
Bonus Points
- Experience planning, implementing, and managing continuous monitoring solutions and working within an Agile-based project management framework.
- Experience with Agile processes and tools such as Jira and Confluence.
- Experience with Linux or Windows system administration.
- Experience in ISSE or ISSO roles.
- Experience developing Body of Evidence artifacts for A&A under frameworks including NIST SP 800-Series, DoD RMF, and ICD 503.
- Knowledge of terminology and federal regulations related to specification, development, acquisition, and maintenance of IT systems.
Security Clearance
- Active TS with SCI eligibility is required.
Location & Compensation
- Springfield, VA (onsite)
- USD 124,000 - 246,400 per year
- Minimum experience: 8 years