Cloud Security Architect

Booz Allen Hamilton•Arlington, VA

1d•$86,800 - $198,000

About The Position

As a cloud security architect, you know how to assess and implement requirements that ensure the safety of information systems and protect them against intentional or inadvertent access or destruction. This role involves guiding the development of cloud-based security architectures for critical systems, defining, communicating, and implementing security architecture to support mission critical operations. You will recommend tools and capabilities based on research of the current environment and knowledge of various on-premise, cloud-based, and hybrid resources to address the risk management framework (RMF). Your technical expertise will be vital as you work with teams to ensure standards are met with information assurance and security requirements. This is an opportunity to use the latest cloud technologies as you look for ways to secure your customer’s environment. You’ll continue to strengthen your skills in cloud security, RMF, STIGs, ATOs, ATC, eMASS, and AWS while mentoring tomorrow’s cloud security experts. Help us transform and secure warfighter capabilities with cloud technology.

Requirements

4+ years of experience as an Information System Security Officer (ISSO) or Information System Security Engineer (ISSE)
Experience conducting tools assessments and configuration analysis against best practices, vendor specifications, and government security guidelines and requirements
Experience with the implementation, oversight, and maintenance of security configuration, practices, and procedures for systems
Experience implementing controls from NIST 800-53, FedRAMP, RMF, and DoD Information Levels, including applying them to the design and implementation of information technology solutions to achieve an authorization to operate (ATO)
Experience with eMASS
Ability to perform risk analysis
Secret clearance
Bachelor’s degree and 4+ years of experience supporting IT projects and activities, or Master’s degree and 2+ years of experience supporting IT projects and activities
DoD 8570 IAT Level II Certification such as CCNA-Security, CySA+, GICSP, GSEC, Security+ CE, CND, or SSCP Certification

Nice To Haves

Experience with DoD security technical implementation guides (STIGs), checklists, and testing tools, including STIG Viewer, SCAP, and ACAS scanning tool
Experience assessing configuration changes such as new COTS tools or web application upgrades, to system security boundary
Experience drafting tool implementation CONOPS and reviewing tool or capabilities topologies, CONOPS, and vulnerability scans to assess risk
Experience with cyber-related tools such as Ansible, Terraform, Splunk, or STIG Viewer
Knowledge of cloud-native security tools, including HBSS
Knowledge of Zero Trust principles and concepts
Ability to plan and conduct security authorization reviews and assurance case development for initial installation of systems and networks
Ability to work within a collaborative team and a fast-paced dynamic environment
Possession of excellent organizational, presentation, and written and verbal communication skills
AWS, Azure, or GCP Certification

Responsibilities

Define, communicate, and implement security architecture to support mission critical operations.
Recommend tools and capabilities based on research of the current environment and knowledge of various on-premise, cloud-based, and hybrid resources to address the risk management framework (RMF).
Work with teams to ensure standards are met with information assurance and security requirements.
Use the latest cloud technologies to secure the customer’s environment.
Strengthen skills in cloud security, RMF, STIGs, ATOs, ATC, eMASS, and AWS.
Mentor tomorrow’s cloud security experts.