• Providing expert oversight to maintain continuous compliance through monitoring, validating, and enforcing operational security to ensure EDSO's confidentiality, integrity, and availability
• Modifying and implementing secure network connectivity between Amazon Web Services and the USMC
• Evaluating and remediating potential security risks, where identified
• Evaluating and remediating potential cloud, network, host, application, identity, firewall, load-balancing,WAF, and CI/CD pipeline security risk
• Supporting DevSecOps pipeline administration, including secure code integration, configuration management, software deployment, vulnerability scanning, dependency scanning, secrets management, and CI/CD security controls
• Supporting Cloud and network logging, alerting, monitoring, incident response, vulnerability remediation, and continuous compliance activities
• Coordinating with platform engineers, network engineers, system administrators, developers, mission owners, and customer-support personnel to validate cyber security controls; maintain operational security; resolve cyber security incidents; support system changes; and sustain secure, reliable, and available IL6 cloud services
• Provides operations and customer support for all services, to include, but not limited to:
  • Operating System Maintenance
  • VPC Configuration
  • Infrastructure as Code Tools
  • Amazon Web Services (AWS)
  • SCCA Network Components (Cisco Routers and F5 devices)
  • SCCA firewall (Palo Alto)
  • Identity and Access Management - Active Directory (AD)
  • Multi-Factor Authentication
  • Intrusion Detection and Intrusion Prevention System (IDS/IPS)
  • Assured Compliance Assessment Solution (ACAS)
  • Microsoft Defender
  • Windows Server Update Services (WSUS)
  • Online Certificate Status Protocol (OCSP)

#LI-LL1

FILLING THIS POSITION IS CONTINGENT UPON FUNDING

• BS degree in engineering, physical science, physics, network security, computer science
• 10 years of experience in relevant technical field, to include: technology analysis and assessment, design definition, development of systems specification, systems analysis, systems architecture, systems/equipment integration, test & evaluation criteria
• Experience with DevSecOps practices, secure CI/CD pipelines, configuration management, infrastructure as code, and secure software-delivery processes
• Experience with cloud automation, and infrastructure-as-code tools (Ansible, Terraform, CloudFormation, Lambda)
• Experience with Python, JSON
• Experience supporting secure cloud networking, network segmentation, routing, firewall policies, and cloud connectivity
• Experience with Risk Management Framework (RMF), Security Technical Implementation Guides (STIGs), continuous monitoring, vulnerability management, and cyber security compliance
• Experience developing cyber security documentation, operational procedures, security-control evidence, remediation plans, risk registers, and technical reports
• Ability to identify operational cyber security risks, assess potential mission impact, recommend mitigation measures, and track remediation through closure
• Amazon Web Services (AWS) experience
• Five years of technical experience in cyber engineering, network infrastructure, networking, server virtualization, object-oriented programming, software development, software configuration, software installation, or cloud transition, and cyber security
• Desire to work in a secure lab environment
• Holds an CompTIA Security+ or higher certification

• Experience with container security
• Experience supporting GitLab security capabilities, including code scanning, dependency scanning, secrets management, runner security, auditing, and CI/CD pipeline controls
• Experience with cloud security logging, monitoring, alerting, incident response, threat detection, and security-event analysis
• Experience reviewing and validating cloud, network, firewall, WAF, load-balancing, and identity-and-access-management configurations
• Network experience
• SAFe (Scaled Agile Framework) Experience
• Recognized expert who has demonstrated industry and/or public service (e.g., federal, state, or local)
• leadership in Information Technology services
• Experience may be concurrent

SRC IS A CONTRACTOR FOR THE U.S. GOVERNMENT, THIS POSITION WILL REQUIRE U.S. CITIZENSHIP AS WELL AS, A U.S. GOVERNMENT SECURITY CLEARANCE AT THE SECRET LEVEL WITH TOP SECRET ELIGIBILITY

• Travel one week per quarter to Charleston, SC or Stafford, VA