AWS Cloud Engineer

Pacific Northwest National Laboratory•Richland, WA

4h•Onsite

About The Position

This position requires 5 days a week onsite work in Richland, WA or Seattle, WA. The role involves applying engineering and technical principles to the design and development of computer networks, cyber security infrastructure, telecommunications, information technology systems and tools, and database systems. The engineer will analyze, install, integrate, modify, and support all associated systems, networks, software, and databases, and plan and conduct projects after analysis of functional and operational requirements. The role may involve consulting with and leading cross-functional teams. Key responsibilities include classifying data by sensitivity, identifying and assessing security risks and vulnerabilities, encrypting data, implementing strong authentication and access controls, deploying intrusion detection/prevention systems, using role-based access control and principle of least privilege, monitoring user access and activity, ensuring regulatory compliance, implementing data retention policies and audit trails, protecting individual data with anonymization or pseudonymization, obtaining consent for data processing, providing transparency, training employees in security best practices, and continuously monitoring security posture and updating policies. The position also requires participation in peer reviews, making key contributions in setting technical direction, and developing and optimizing capabilities at the division level with an external reputation. The ideal candidate brings strong troubleshooting skills, outside-the-box thinking, an understanding of process and culture in high-performing organizations, and thrives in a fast-paced, high-tech environment focused on results. A lifelong learner devoted to continuous improvement, the candidate should possess a fearless, positive attitude consistent with PNNL values of Courage, Integrity, Impact, Collaboration, and Creativity.

Requirements

BS/BA and 5 years of relevant experience -OR- MS/MA or higher and 3 years of relevant experience -OR- PhD and 1 year of relevant experience -OR- AA and 14 years of relevant experience -OR- HS/GED and 16 years of relevant experience
Demonstrated experience applying theoretical/fundamental computer science concepts through the design, development, configuration, implementation, and maintenance of computer infrastructure and networks
U.S. Citizenship
Ability to obtain and maintain a federal security clearance.
Must be able to demonstrate non-use of illegal drugs, including marijuana, for the 12 consecutive months preceding completion of the requisite Questionnaire for National Security Positions (QNSP).
Must pass a drug test prior to commencing employment.

Nice To Haves

Experience working in a complex Enterprise environment
AWS Certified CloudOps Engineer - Associate (SOA-C03)
Experience managing AWS cloud environments using AWS Organizations, CloudFormation Stack and StackSets, and Service Control Policies
Experience in task automation using PowerShell, Bash, Python, or other languages
Knowledge of Cloud environments such as Microsoft Azure, Amazon AWS, Google Cloud Platform
Demonstrated ability to self-direct, prioritize, and manage multiple tasks and priorities
Strong interpersonal skills with ability to collaborate effectively in cross-functional teams
Demonstrated ability to solve challenging technical problems with innovative solutions
Customer service oriented and approachable
Exceptional communicator with both technical and nontechnical audiences
Familiarity with virtualization technologies
Familiar with Tenable Security Center/Nessus
Familiar with configuration baselines (DISA STIGs)
Active Clearance and ability to maintain such clearance

Responsibilities

Applies engineering and technical principles to the design and development of computer networks, cyber security infrastructure, telecommunications, information technology systems and tools, and database systems.
Analyzes, installs, integrates, modifies, and supports all associated systems, networks, software, and databases.
Plans and conducts projects after analysis of functional and operational requirements.
Classify data by sensitivity and maintain an inventory of stored data.
Identify and assess security risks and vulnerabilities.
Encrypt data at rest and in transit.
Implement strong authentication and access controls.
Deploy intrusion detection/prevention systems and keep software updated.
Use role-based access control and principle of least privilege.
Monitor user access and activity.
Ensure compliance with relevant regulations.
Implement data retention policies and audit trails.
Protect individuals' data with anonymization or pseudonymization.
Obtain consent for data processing and provide transparency.
Train employees in security best practices and raise awareness.
Monitor security posture continuously and update policies as needed.
Participate in peer reviews and provide feedback.
May consult with and lead cross-functional teams.
Established local reputation with specialization in at least one S&E domain.
Making key contributions in setting technical direction.
Develops and optimizes capabilities at the division level, along with developing external reputation.
Making key contributions in setting technical direction.