Cloud Security Engineer

Booz Allen Hamilton•Washington, DC

1d•$99,000 - $225,000•Onsite

About The Position

As a security engineer, you know how to assess and implement requirements that ensure the safety of information systems and protect them against intentional or inadvertent access or destruction. This role involves developing cloud-based security architectures for critical systems within the Intelligence Community (IC). The security engineer will evaluate and support documentation, validation, assessment, and accreditation processes to ensure IT systems meet Information Assurance (IA) and security requirements. This includes assisting in defining the organization's desired state and risk thresholds, analyzing actual state information for compliance, and advising leaders on codifying strategic objectives into doctrine and procedures. The role also involves evaluating computer applications and software to ensure software assurance best practices are followed, recommending tools and capabilities for security requirements, and implementing cloud security architectures, tools, and processes. The position requires working with IC clients to ensure standards are met with security requirements, utilizing the latest cloud technologies, and collaborating with other cloud security experts. This position is located in Reston, Virginia.

Requirements

5+ years of experience building and administering cloud environments and utilizing cloud-native functionality, COTs, GOTs, and open-source tools to meet objectives
Experience with security architecture evaluations, guidance development, and troubleshooting
Experience with the Risk Management Framework (RMF)
Active TS/SCI clearance; willingness to take a polygraph exam
HS diploma or GED
Ability to obtain a DoD 8570 IAT Level III Certification such as SecurityX, CCNP Security, CISA, CISSP, GCED, GCIH, or CCSP Certification within 30 days of start date
Ability to obtain a DoD 8570 Cybersecurity Service Provider-Infrastructure Support Certification (CSSP-IS), including CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND Certification within 30 days of start date

Nice To Haves

Experience with the software development life cycle (SDLC)
Experience with cloud technologies
Knowledge of multicloud governance and automation such as AWS Control Tower, Azure Landing Zones, or GCP Org Policies
Possession of excellent team leadership, development, and client relationship skills
Possession of excellent interpersonal skills
Possession of excellent verbal and written communication skills

Responsibilities

Evaluate and support the documentation, validation, assessment, and accreditation processes necessary to ensure that Information Technology (IT) systems meet the organization’s Information Assurance (IA) and security requirements.
Assist in defining organizations’ desired state and risk thresholds and analyze actual state information to assess compliance.
Work with leaders to advise on codifying strategic objectives into doctrine and procedures that can help meet defined objectives.
Assist with evaluation of computer applications, software, or specialized utility programs to determine if software assurance best practices are followed.
Recommend tools and capabilities based on research of the current environment and knowledge of various on-premise, cloud-based, and hybrid resources to address security requirements.
Implement the cloud security architectures, tools, and processes that you helped to shape and define.
Work with IC clients to ensure standards are met with security requirements.
Look for ways to secure your customer’s environment while collaborating with tomorrow’s cloud security experts.