The application deadline and start date are subject to change based on the status of the contract. Applications will be accepted through expiration date or until the position is filled. If the contract is not awarded, this position may not be filled.
Koniag Government Services is seeking an experienced Principal Cloud Security Engineer to join a dynamic team supporting cloud security architecture, implementation, and continuous monitoring across multiple cloud platforms. The ideal candidate is a technically proficient security professional with hands-on experience securing environments across Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP). This individual will be passionate about cybersecurity, committed to staying current with evolving threats and technologies, and capable of applying their expertise to solve complex, real-world security challenges in a federal government context. The ability to obtain or maintain an active Secret clearance is required to support our government customer.
The Principal Cloud Security Engineer will serve as the lead technical authority and SME for cloud security architecture, governance, and advanced threat defense across multi-cloud enterprise environments, including AWS, Microsoft Azure, and Google Cloud Platform (GCP). In this leadership role, you will define the multi-cloud security vision, architect complex security frameworks, drive tool selection and integration, and ensure robust security postures that align with federal compliance mandates and agency risk tolerances.
As a strategic technical lead, the Principal Engineer will bridge high-level enterprise risk management with hands-on engineering execution. You will mentor engineering teams, partner with agency leadership and System Owners, and lead Assessment and Authorization (A&A) strategies to maintain continuous authorization to operate (ATO) in high-stakes federal cloud environments.
Principal responsibilities will include but are not limited to:- Lead the design, engineering, and execution of scalable, resilient multi-cloud security solutions across AWS, Azure, and GCP that address complex threat vectors, zero-trust paradigms, and stringent federal mandates.
- Drive the strategic evaluation, selection, architectural integration, and optimization of cloud-native and enterprise third-party security platforms (CSPM, CWPP, CIEM, SIEM, and Vulnerability Management).
- Direct the configuration, enforcement, and integration of cloud-native security frameworks (e.g., AWS Security Hub/Config, Azure Defender/Policy, GCP Security Command Center Premium) with enterprise security operations centers (SOC).
- Pioneer "Security as Code" initiatives by integrating automated security controls, guardrails, compliance scanning, and vulnerability checks directly into Infrastructure as Code (IaC) and CI/CD pipelines.
- Oversee the creation, validation, and maintenance of comprehensive Assessment and Authorization (A&A) packages, including System Security Plans (SSPs), Security Assessment Reports (SARs), and continuous authorization artifacts.
- Lead security impact assessments for enterprise-level system architectural changes, evaluating complex risks and defining remediation strategies without impacting operational tempo.
- Establish proactive continuous monitoring, threat hunting, and incident handling protocols across multi-cloud environments utilizing integrated SIEM, SOAR, and telemetry platforms (e.g., Splunk, Sentinel, Qualys).
- Serve as the principal technical liaison to agency leadership, Authorizing Officials (AOs), CISOs, and cross-functional engineering leads to align technical security strategies with mission objectives.
- Mentor senior and mid-level security engineers, establishing operational guidelines, standard operating procedures (SOPs), and engineering baselines across the organization.
Required Education and Experience:
- Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Systems Engineering, or a related field from an accredited college or university. (Master's degree preferred).
- 8+ years of progressive professional experience in cybersecurity, cloud security engineering, network defense, or system architecture, with at least 5+ years dedicated to architecting and securing enterprise cloud environments.
- Proven track record architecting and executing security controls across at least two major cloud service providers (AWS, Azure, GCP).
- Deep expertise with federal security frameworks, including FISMA High/Moderate, FedRAMP, NIST SP 800-53 (Rev. 5), NIST SP 800-37 (RMF), and CMMC.
- Active Secret clearance or higher (Top Secret preferred).
Required Skills and Competencies:- Exceptional written, verbal, and presentation skills, with a proven ability to articulate complex cybersecurity risks and technical architectures to executive leadership, Authorizing Officials, and technical teams.
- Advanced proficiency engineering and hardening enterprise infrastructure across AWS, Azure, and GCP (IaaS, PaaS, and SaaS models).
- Hands-on expertise configuring and scaling enterprise tools including CSPM/CWPP suites, vulnerability management (e.g., Qualys, Tenable), file integrity monitoring (e.g., Tripwire), and enterprise SIEM/SOAR platforms (e.g., Splunk, Microsoft Sentinel).
- Strong experience embedding security testing and guardrails into DevSecOps workflows using Infrastructure as Code (IaC) templates (Terraform, Bicep, CloudFormation) and CI/CD pipelines.
- Deep understanding of zero-trust architecture, enterprise identity federation, privilege management, SAML 2.0, OAuth2, and OIDC across multi-tenant cloud environments.
- Demonstrated ability to author, review, and defend complex SSPs, control worksheets, and POAMs to secure ATO approvals.
- Proven ability to resolve critical technical bottlenecks, address emerging security threats, and drive security automation to reduce operational overhead.
Desired Skills and Competencies:- Industry Certifications (One or more strongly preferred):
- Executive/Architect: CISSP, CCSP, CISM.
- Cloud Provider Specific: AWS Certified Security - Specialty, Microsoft Certified: Cybersecurity Architect Expert (SC-100), Microsoft Certified: Azure Security Engineer Associate (AZ-500), or Google Professional Cloud Security Engineer.
- Master's degree in Cybersecurity, Information Assurance, or Computer Science.
- Experience integrating security operations with GRC platforms (e.g., ServiceNow GRC, eMASS, CSAM).
- Expertise securing containerized workloads and orchestration systems (Kubernetes, EKS, AKS, GKE) and serverless deployment models.
- Applied knowledge of NIST SP 800-207 Zero Trust Architecture principles and implementation strategies across hybrid federal enterprises.
This position is covered under the Service Contract Act. We offer competitive compensation and an extraordinary benefits package including health, dental and vision insurance, 401K with company matching, paid holidays, paid Vacation, paid sick leave and more.
