Cloud Architect

Acuity INC•, DC

23h

About The Position

Looking to make a difference, to help keep people safe, or even to save lives through your work with technology? Join Acuity’s team of experts to have an impact on our government’s critical missions. Acuity, Inc. is a consulting firm that supports federal agencies in the areas of IT Modernization, Data Enablement, and Hyperautomation. We are currently hiring for a Cloud Architect!

Requirements

At least 8 (eight) years of professional experience in IT/network engineering, security engineering, system administration or security operations.
At least one of the following certifications: CISSP, CSSP, CCSK, GIAC, CEH
Experience with Microsoft Azure Cloud, Hashicorp Terraform, Powershell and Azure CLI
Implement and manage various communication and collaboration tools, such as: Jira, Confluence, Azure DevOps Server, and Microsoft Team Foundations Server (TFS) for CI/CD
Strong analytical skills with solid verbal and written communication skills
Shows initiative, presents ideas to overcome challenges, self-starter
Positive attitude, willingness to learn and apply, team player
Active DOD/DSS SECRET security clearance or higher or the ability to get an interim Secret clearance quickly. Offer will be contingent on Interim clearance approval.

Nice To Haves

Experience with one or more of: MS Azure, AWS, Google Cloud, or ServiceNow
Experience deploying and operating tools such as: Tenable Nessus, Splunk, OSSEC, AWS services, Barracuda NextGen firewalls.
Master’s degree in information systems, cybersecurity or related fields
Experience with FISMA, FedRAMP, and NIST SP 800-53

Responsibilities

Determine customer business requirements and applicable regulations, security policy and standards that provide foundation for design.
Engineering and designing solutions on clouds such as MS Azure that manage risk and meet relevant security regulations, controls and policy.
Determine how to leverage services from cloud providers and identify gaps that must be met through other tools, software, or 3rd party services.
Implement tools/services ranging from OS hardening, ACL/NACL flow control, web application firewalls, SIEM (e.g, Splunk), intrusion detection, and vulnerability management.
Implement the design installing, configuring and testing cloud services and associated 3rd party services and software.
Participate in assessment of system security controls to validate control implementation and identify weaknesses.
Use tools such as discovery, vulnerability assessment and policy audit tools to evaluate systems for vulnerabilities. Review results and implement fixes or risk mitigation.
Identifying new and innovative ways to use existing tool sets to automate security management, monitoring and related processes to reduce risk and costs.