Cloud Security Engineer

Leidos

1d•Remote

About The Position

Join our innovative Medical Telehealth Support Contract team, where you'll play a vital role in delivering cutting-edge remote healthcare services to Military Health System beneficiaries. As part of this dynamic program, you'll collaborate with top professionals to enhance patient care through advanced telehealth technologies and streamlined processes. We're looking for passionate individuals who are ready to make a real impact, ensuring patients receive the best care no matter where they are. With a focus on excellence, security, and innovation, this is your chance to be at the forefront of healthcare's digital transformation. If you're driven by quality and a commitment to patient safety, this opportunity is your next career move. The Cloud Security Engineer will design, implement, and maintain security solutions in an AWS GovCloud environment integrated with Salesforce and IVR capabilities. The ideal candidate will have expertise in securing cloud-based infrastructures, including AWS services such as IAM, AWS Shield, CloudTrail, and VPC configurations, while ensuring compliance with government regulations such as FedRAMP, FISMA, and NIST 800-53. This role requires hands-on experience with Salesforce security best practices, including Shield Encryption and Event Monitoring, as well as securing IVR systems like Amazon Connect. The Cloud Security Engineer will collaborate with cross-functional teams to identify vulnerabilities, implement hardened solutions, and maintain the security posture of mission-critical systems supporting 24x7 operations. Strong analytical skills, a proactive approach to risk management, and a commitment to delivering secure and scalable solutions are essential for success in this role.

Requirements

Bachelors degree (or equivalent work experience) with 4+ years experience supporting environments in AWS and/or Salesforce.
Experience with Salesforce based solutions.
Experience with AWS cloud infrastructure.
Experience with Networking (e.g. AWS VPC, DNS, CIDR/Routing).
Experience implementing compliance with government regulations such as FedRAMP, FISMA, and NIST 800-53.
Strong problem-solving skills and ability to work in a fast-paced environment.
Strong analytical and critical thinking abilities.
Ability to work independently and as part of a team.
Proficient in navigating electronic systems, computer programs, and virtual service platforms.
Requires a separate, quiet, private, confidential space to work from as well as having access to your own reliable high-speed internet hard wired to your home or apartment (coax or fiber from the Internet Service Provider (ISP) to your home. Using a hot spot from a mobile device (tethering) or high latency ISP is not acceptable.
Must be an U.S. citizen, speak fluent English, and able to maintain and retain suitability investigation and clearance as required.

Nice To Haves

Experience with Salesforce security practices.
Experience with AWS GovCloud
Experience with IVR solutions like Amazon Connect (IVR) and other common AWS services (VPC, S3, EC2, IAM, Cloudwatch, Cloudformation) is a plus.
Experience with securing real time audio/video streams (WebRTC, SRTP).
Experience supporting and building AWS environments using infrastructure as code (IaC) tools such as Terraform, AWS CloudFormation.
Proficiency in a scripting language and/or a structured programming language.
Experience with security concepts like TLS, PKI, x509, along with tools like ACAS, OWASP, SonarQube.
Experience with security controls and auditing.
Experience supporting pipeline driven deployments leveraging CI/CD pipeline (e.g. Gitlab, Jenkins) along with version control systems (e.g., Git)
Experience with Agile techniques (Scrum, Kanban) and Atlassian tools like Jira and Confluence.
Veteran/military retiree and/or military spouse or Experience working with and/or for military communities.
Experience in or supporting a Contact Center, Military/Veteran services, or healthcare environment.
Come break things (in a good way). Then build them smarter. We're the tech company everyone calls when things get weird. We don’t wear capes (they’re a safety hazard), but we do solve high-stakes problems with code, caffeine, and a healthy disregard for “how it’s always been done.”

Responsibilities

Oversee the security and compliance of an AWS GovCloud and Salesforce-based environment, ensuring system reliability and protection for mission-critical operations.
Design, deploy, and manage scalable, secure, and cost-effective AWS cloud infrastructure solutions, with a focus on implementing robust security measures.
Automate security configurations and changes to environments using tools such as Terraform, CloudFormation, and scripting languages (e.g., Bash, Python).
Develop and maintain CI/CD pipelines (e.g., GitLab) to integrate security checks and ensure secure development, testing, and Production releases in a 24x7 environment.
Collaborate with cross-functional teams to identify vulnerabilities, implement hardened solutions, and ensure compliance with government regulations such as FedRAMP, FISMA, and NIST 800-53.
Participate in Agile sprint and release-level activities, providing security expertise during technical exchange meetings to support program objectives.
Mentor team members on cloud security best practices, sharing knowledge and processes with Development, Product, and Test teams.
Maintain secure integrations with external systems, including EHR APIs (FHIR), Identity and Authorization tools (e.g., Okta), and other third-party solutions.
Work closely with the cybersecurity team to develop, deploy, and maintain authorized solutions that meet DoD Security Technical Implementation Guides (STIGs) requirements.
Conduct system audits, monitor security logs, and troubleshoot issues to ensure system health and compliance across all environments.
Reconfigure and manage software installations and license catalogs while maintaining secure configurations in Development, Test, and Production environments.
Create and enforce consistent security structures and documentation utilized across the program.
Stay updated on advancements in AWS security services and recommend improvements to enhance the security posture of existing systems.