Cloud Security Engineer

Booz Allen Hamilton•Reston, VA

2d•$99,000 - $225,000•Onsite

About The Position

As a security engineer, you know how to assess and implement requirements that ensure the safety of information systems and protect them against intentional or inadvertent access or destruction. What if you could use your cloud security skills to improve mission critical applications for the Intelligence Community (IC)? We need you to help us develop cloud-based security architectures for some of the IC's most critical systems. As a security engineer on our team, you’ll evaluate and support the documentation, validation, assessment, and accreditation processes necessary to ensure that Information Technology (IT) systems meet the organization’s Information Assurance (IA) and security requirements. You'll assist in defining organizations’ desired state and risk thresholds and analyze actual state information to assess compliance. You'll work with leaders to advise on codifying strategic objectives into doctrine and procedures that can help meet defined objectives. You'll assist with evaluation of computer applications, software, or specialized utility programs to determine if software assurance best practices are followed. You’ll recommend tools and capabilities based on your research of the current environment and knowledge of various on-premise, cloud-based, and hybrid resources to address security requirements. You will implement the cloud security architectures, tools, and processes that you helped to shape and define. Your technical experience will be vital as you work with IC clients to ensure standards are met with security requirements. This is an opportunity to use the latest cloud technologies as you look for ways to secure your customer’s environment while collaborating with tomorrow’s cloud security experts.

Requirements

5+ years of experience building and administering cloud environments, utilizing cloud-native functionality, and COTs, GOTS, and open source tools to meet objectives
Experience with developing and evaluating security documentation, including system security plans, contingency plans, security procedures, and continuity of operations plans
Experience with security architecture evaluations, guidance development, and troubleshooting
Experience with the Risk Management Framework (RMF)
Experience with working in an Agile development environment
Knowledge of Infrastructure code concepts such as Terraform, CloudFormation, or Bicep
Active TS/SCI clearance; willingness to take a polygraph exam
Associate’s degree and 5+ years of experience supporting IT projects and activities, Bachelor’s degree and 3+ years of experience supporting IT projects and activities, or Master’s degree and 1+ years of experience supporting IT projects and activities
Ability to obtain a DoD 8570 IAT Level II Certification such as Security+ CE, CCNA-Security, GSEC, SSCP, CySA+, GICSP, or CND Certification within 30 days of start date

Nice To Haves

Experience with the software development life cycle (SDLC)
Experience with cloud technologies
Possession of excellent team leadership, development, and client relationship skills
Possession of excellent interpersonal skills
Possession of excellent verbal and written communication skills

Responsibilities

Evaluate and support the documentation, validation, assessment, and accreditation processes necessary to ensure that Information Technology (IT) systems meet the organization’s Information Assurance (IA) and security requirements.
Assist in defining organizations’ desired state and risk thresholds and analyze actual state information to assess compliance.
Work with leaders to advise on codifying strategic objectives into doctrine and procedures that can help meet defined objectives.
Assist with evaluation of computer applications, software, or specialized utility programs to determine if software assurance best practices are followed.
Recommend tools and capabilities based on research of the current environment and knowledge of various on-premise, cloud-based, and hybrid resources to address security requirements.
Implement the cloud security architectures, tools, and processes that you helped to shape and define.
Work with IC clients to ensure standards are met with security requirements.