Cloud Security Expert

All Native Group, a division of Ho Chunk Incorporated, is seeking a Cloud Security Expert to support a Federal Agency enterprise data management program. This role secures and hardens the program's cloud infrastructure, with a focus on the configuration management and security of a high-availability AWS OpenSearch cluster and the large-scale data stores it supports. This position supports an active federal contract. Any offer of employment is contingent upon Government approval of the candidate and successful completion of the DEA security clearance process.

Essential Functions

• Provide configuration management and security for a cloud high-availability OpenSearch cluster of 10 or more nodes.
• Implement and maintain security controls across cloud infrastructure supporting enterprise search and data stores.
• Monitor, assess, and remediate security vulnerabilities in the cloud environment.
• Support compliance with federal security requirements and the applicable system security posture.
• Collaborate with application and data engineering teams to embed security throughout the delivery lifecycle.
• Document security configurations, procedures, and incident response actions.
• Support safeguarding of all government equipment, information, and property in accordance with Established Rules of Behavior.
• Support Vulnerability Assessment and Penetration Testing (VAPT), including quarterly testing for scheduled applications.
• Remediate high-severity vulnerabilities within 30 days and medium-severity within 90 days.
• Support DEA's DevSecOps and CI/CD pipeline implementation.
• Implement and test backup and disaster recovery plans for cloud resources.
• Coordinate with DEA TC Information Security, Cloud Services, Engineering, and Operations.

Competencies

• 5+ years of experience in cloud security, cloud infrastructure, or information security engineering.
• Experience with configuration management and security of AWS environments; OpenSearch or ElasticSearch cluster experience strongly preferred.
• Experience securing high-availability, multi-node cloud clusters.
• Working knowledge of FISMA, NIST SP 800-53, NIST SP 800-37 (RMF), FedRAMP, and FIPS 140-3, 199, and 200.
• Experience working in an Agile delivery environment.
• Active security certification required, such as CISSP, CCSP, or AWS Certified Security Specialty.
• Experience supporting federal law enforcement or mission-critical cloud environments.

Supervisory Responsibility

None for this position

Physical Demands 

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job.

• Must be able to remain in a stationary position 75% of the time.
• Occasionally moves about inside the office to access file cabinets, office machinery, etc.
• Constantly operates a computer and other office productivity machinery, such as a calculator, copy machine, and computer printer.
• Expresses or exchanges ideas by means of the spoken word.  Those activities in which they must convey detailed or important spoken instructions to other workers accurately, loudly or quickly.
• Frequently moves standard office equipment up to 25 pounds.
• Must be able to work indoor conditions 90% of the time.

While performing the duties of this job, the employee is regularly required to talk or hear. The employee frequently is required to stand; walk; use hands to finger, handle or feel; and reach with hands and arms.

Position Type/Expected Hours of Work

Work is conducted at DEA facilities in Arlington, VA and Merrifield, VA. This is a full-time position with flexible hours based on mission requirements. 

Travel

Occasional CONUS travel may be required for meetings, conferences, or training.

Education

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field. Experience can be considered in lieu of education.

Compensation and Benefits:

The expected compensation range for this position is $130,000.00 - $152,500.00 per year (annualized hourly rate of pay). We offer comprehensive benefits that allow you to balance work and life. A benefits summary is available from this link: https://jobs.allnativegroup.com/categories/1/benefits/1/employee-benefits

Drug Free Workplace

All Native Group is a Drug Free Workplace. It is our policy that all new hires must successfully complete a pre-employment drug screen as a condition of employment. In addition, all employees are subject to random drug screens throughout the term of their employment with All Native Group.

Security Clearance

Active secret clearance is required

Other Duties

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.