HHS - Cloud Security Engineer/Architect

cFocus Software IncorporatedRockville, MD
3dRemote

About The Position

cFocus Software seeks a Cloud Security Engineer/Architect to join our program supporting the Department of Health and Human Services (HHS) This position is remote. This position requires the ability a Public Trust clearance.

Requirements

  • Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field.
  • Minimum 7–10 years of experience in cybersecurity with at least 4 years in cloud security engineering or architecture.
  • Hands-on experience securing AWS and/or Azure environments.
  • Strong knowledge of cloud-native security services, IAM, encryption, and networking.
  • Experience supporting federal cloud environments and compliance frameworks.
  • Strong written and verbal communication skills.

Nice To Haves

  • AWS Certified Security – Specialist, Microsoft Azure Security Engineer Associate, CCSP, or CISSP

Responsibilities

  • Design and implement secure cloud architectures aligned with Zero Trust principles and federal standards.
  • Provide security engineering and architectural guidance for AWS, Azure, and other approved cloud platforms.
  • Implement and manage cloud security controls including IAM, network segmentation, encryption, and logging.
  • Support secure cloud onboarding, system migrations, and modernization initiatives.
  • Integrate cloud environments with SOC, SIEM, vulnerability management, and incident response tooling.
  • Conduct cloud risk assessments and threat modeling for new and existing cloud services.
  • Support FedRAMP-authorized cloud services and validate shared responsibility models.
  • Implement and maintain CSPM, CWPP, and CIEM solutions.
  • Develop cloud security architecture diagrams, design documents, and implementation plans.
  • Ensure compliance with NIST SP 800-53, NIST SP 800-37, NIST SP 800-210, and HHS cloud policies.
  • Support continuous monitoring, logging, and audit readiness for cloud systems.
  • Collaborate with system owners, ISSOs, DevSecOps teams, and federal stakeholders.
  • Provide guidance on container, serverless, and API security in cloud-native environments.
  • Support incident response and forensics activities involving cloud workloads.
© 2024 Teal Labs, Inc
Privacy PolicyTerms of Service