Your Role on the TeamUnder the direction of the Director, AI, Cloud & Client Solutions, the Cloud Compliance Engineer applies advanced cloud engineering and security compliance expertise to independently administer and secure federal research compliant enclaves, meeting regulatory and security requirements that evolve over time. Resolves highly complex issues related to protection of Controlled Unclassified Information (CUI), cloud workload onboarding, and regulatory compliance, where the work demands in-depth evaluation of shifting technical, security, and policy factors. Recommends and selects the methods, tools, and controls needed to maintain continuous compliance and keep the environment secure as those requirements change.
What It Takes to be SuccessfulRequired:- In-depth knowledge of cloud infrastructure administration, with hands-on AWS experience across compute, storage, networking, and IAM.
- Advanced knowledge of federal research grant control frameworks including their security requirements and their practical application to cloud environments.
- Demonstrated experience with Infrastructure as Code tools such as Terraform or CloudFormation, and configuration management tools such as Ansible or Chef.
- Advanced knowledge of computer security tools, best practices, and policies, including securing server-based software and cloud workloads.
- Experience with identity and access management, network segmentation, encryption, and logging/monitoring controls needed to protect Controlled Unclassified Information.
- Demonstrated experience with system hardening, vulnerability management, and remediation of security findings.
- Ability to create compliance documentation such as System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), and control assessments.
- Interpersonal and communication skills sufficient to work with both technical and non-technical program/compliance personnel.
- Demonstrated organizational skills to manage multiple onboarding efforts and competing priorities.
- Ability to write clear, concise technical and compliance documentation.
- Experience in a regulated or federally funded research computing environment.
- Experience with CI/CD and automation tools such as GitHub Actions or Jenkins.
- Familiarity with vulnerability scanning and SIEM tools
- Adhere to OIT's cultural values: Collaboration, Respect, Trust, Transparency, Quality, Inclusiveness, Customer Centricity, and Learning and Growth.
- Bachelor's degree in related area and / or equivalent experience / training
- A minimum of 5 years of experience administering cloud infrastructure in AWS.
Preferred:- AWS Certified SysOps Administrator
- Solutions Architect Associate
- A minimum of 5 years of experience supporting a regulated or compliance-driven environment (e.g., NIST800-171, FedRAMP, HIPAA, PCI-DSS).
Special Conditions:- May require on call support after hours or on weekends.
Total RewardsIn addition to the salary range listed below, we offer a wealth of benefits to make working at UCI even more rewarding. These benefits may include medical insurance, sick and vacation time, retirement savings plans, and access to a number of discounts and perks. Please utilize the links listed here to learn more about our compensation practices and benefits.
The expected pay range for this recruitment is $111,300- $161,200 (Annual).
