ResponsibilitiesThis Cloud Security Engineer is needed to assist in the planning, building, management, and continuous security improvement of the DC3 Cloud Environment in support of a Department of War customer. The position supports mission-focused cybersecurity activities, including cloud security engineering, cyber threat analysis, digital forensics support, and protection of national-security systems and data.
The Cloud Security Engineer will address the cybersecurity of cloud deployments by ensuring that cloud design, configuration, implementation, data controls, monitoring, logging, networking, storage, and overall architecture comply with applicable Department of War regulations, the Risk Management Framework (RMF), Security Technical Implementation Guides (STIGs), and other applicable security requirements.
The engineer will configure, integrate, and maintain tools that identify, scan, prioritize, and remediate vulnerabilities in production deployments and Continuous Integration/Continuous Delivery (CI/CD) pipelines. The position will apply appropriate cybersecurity controls and collaborate with cloud architecture, development, operations, and security teams to ensure cloud environments are properly designed, hardened, monitored, and secured throughout the system lifecycle.
Responsibilities
- Support the planning, design, implementation, hardening, and management of secure cloud environments.
- Assess and implement cybersecurity controls across cloud infrastructure, applications, networks, storage, identity services, and data-management components.
- Ensure cloud deployments comply with applicable Department of War cybersecurity requirements, RMF controls, STIGs, and security best practices.
- Support Authorization to Operate (ATO) and Continuous ATO activities, including development and maintenance of required security documentation and evidence.
- Configure and maintain tools for vulnerability scanning, assessment, remediation tracking, and continuous monitoring.
- Integrate cybersecurity tooling into CI/CD pipelines used by development teams to deploy cloud-based solutions.
- Support secure AWS cloud migration activities.
- Implement and maintain cloud logging, monitoring, alerting, observability, and security-information capabilities.
- Collaborate with architecture and engineering teams to secure cloud networking, storage, Kubernetes environments, containers, and infrastructure-as-code deployments.
- Support identity and access management (IAM), least-privilege access, authentication, authorization, and privileged-access security controls.
- Apply risk-analysis methods and best practices to determine the scope, severity, and treatment of identified cybersecurity risks.
Qualifications
Required Qualifications
- Proficiency in cybersecurity principles and technologies, including firewalls, intrusion detection systems (IDS), and security information and event management (SIEM) platforms.
- Knowledge of RMF, STIGs, ATO and Continuous ATO processes, associated documentation, and risk-scoping best practices.
- Experience with cloud platforms, including AWS and Azure.
- Experience supporting AWS cloud migrations.
- Knowledge of cloud networking, storage, architecture, data controls, monitoring, and logging.
- Experience with cloud observability toolsets.
- Understanding of version-control systems, including Git, and their integration with CI tools such as GitLab CI.
- Experience configuring and integrating cybersecurity tools within CI/CD pipelines.
- Familiarity with Kubernetes environments, container security, and Kubernetes package-management tools such as Helm.
- Basic understanding of Linux administration and programming or scripting languages, including Java, Python, and C#.
- Understanding of infrastructure and configuration as code tools, including Ansible and Terraform.
- Experience with IAM solutions, including Azure Entra ID, AWS IAM, and Keycloak.
- Active Top Secret clearance with SCI eligibility.
Education & Experience Requirements
- Minimum of 10 years with AS/AA; Minimum of 8 years with BS/BA; Minimum of 6 years with MS/MA; Minimum of 3 years with PhD. However, four (4) years of additional experience can be considered in lieu of a Bachelor’s degree.
Required Certification
- Active CompTIA Security+ certification — must remain current.
Preferred Certifications
Candidates should possess one or more of the following preferred certifications:
- AWS Certified Security – Specialty
- (ISC)² Certified Cloud Security Professional (CCSP)
- CompTIA SecurityX/CASP+
- Certified Information Systems Security Professional (CISSP)
- CISSP–Information Systems Security Engineering Professional (CISSP-ISSEP)
- Microsoft Certified: Azure Security Engineer Associate (AZ-500)
- CISSP–Information Systems Security Architecture Professional (CISSP-ISSAP)
- Microsoft Certified: Azure Fundamentals (AZ-900)
Target Salary Range$135,000 - $216,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.
