Cloud Computing Subject Matter Expert (SME)

TekSynap•Springfield, VA

4d•$125,000 - $175,000•Onsite

About The Position

TekSynap is seeking a Cloud Computing SME to join our government project supporting Defense Logistics Agency in Springfield, VA. This position is in support of Defense Logistics Agency (DLA), an agency of the Department of Defense. DLA Information Operations, Enterprise Infrastructure Services (EIS), Information Operations Enterprise Enclave (IOEE), Information Operations Secure Enterprise Enclave (IOSEE) located enterprise wide at multiple DLA locations. This position is intended to support the Enterprise Telecommunications Network and Cloud functions by exercising skills and expertise in telecom engineering and operational support of current and new technologies. TekSynap is a fast-growing high-tech company that understands both the pace of technology today and the need to have a comprehensive well planned information management environment. “Technology moving at the speed of thought” embodies these principles – the need to nimbly utilize the best that information technology offers to meet the business needs of our Federal Government customers.

Requirements

Active Secret Clearance with IT-I eligibility.
Five (5) years of relevant C&A experience, Risk Management Framework (RMF), and NIST C&A experience.
DOD IA experience.
Cloud Computing Security Certification such as CCSP, CCSK, or equivalent.
Active certification meeting DOD 8570.01 IAM lII standards.
Experience in assessing IA/RMF Security Controls and conducting C&A reviews for large, complex Information systems.
US Citizen

Responsibilities

Serves as an Information Assurance and Cloud Computing SME with regards to supporting the DLA implementation of the Department of Defense (DoD) Risk Management Framework (RMF) using DoD and DLA regulations and the Committee for National Security Systems Instruction (CNSSI) 1253 and relevant National Institute of Standards and Technology (NIST) RMF guidance in NIST Special Publication(s) (SP) such as 800-53 and 800-37.
The CCS shall maintain current certification as a Certified Cloud Security Professional and a qualified DoD Information Assurance Manager (IAM).
As an IA SME, the CCS will have experience assessing RMF security controls for compliance to include gathering and citing validating artifacts.
As IA SME, the CCS will be able to recommend security categorization for an information system, identify applicable security controls, write continuity plans and develop continuity test plans, work with DOD Architecture Framework analysts, and research, write, coordinate, and staff required system-level security documents (SOPs, Job Aids, Manuals, Guides).
The CCS will be capable of working independently with substantial cloud computing security knowledge.
The CCS must have the essential skillsets to identify, manage and resolve cloud computing security risks and implement “best practices” as applied within a cloud environment (across all of the different deployment and service models, and derivatives).
The CCS will be well versed in the FedRAMP assessment methodology for security and privacy controls deployed in cloud information systems to include six (6) domain areas.
The six domains include: Architectural Concepts & Design Requirements, Cloud Data Security, Cloud Platform & Infrastructure Security, Cloud Application Security, Operations, Legal & Compliance.