Cloud Security Engineer
About The Position
Booz Allen is seeking a hands-on Cloud Security Engineer to help develop and implement cloud-based security architectures for mission-critical Intelligence Community systems. The engineer will evaluate and support the documentation, validation, assessment, and accreditation processes needed to ensure IT systems meet organizational Information Assurance and security requirements. The role includes helping define desired states and risk thresholds, analyzing current-state information for compliance, and advising leaders on translating strategic objectives into doctrine and procedures. The engineer will evaluate applications, software, and specialized utility programs for adherence to software assurance best practices; research current environments and on-premise, cloud-based, and hybrid resources to recommend appropriate security tools and capabilities; and implement cloud security architectures, tools, and processes. The role works with Intelligence Community clients and collaborates with cloud security professionals to help ensure security standards are met. The position is listed as not remote and is associated with McLean, Virginia, with additional locations in Norfolk and Reston, Virginia; Riverdale, Maryland; and Washington, District of Columbia. Applicants must hold an active TS/SCI clearance and be willing to take a polygraph exam.
Requirements
- At least 5 years of experience building and administering cloud environments, including using cloud-native functionality, commercial off-the-shelf (COTS), government off-the-shelf (GOTS), and open-source tools to meet objectives.
- Experience assisting with the development and evaluation of security documentation, including system security plans, contingency plans, security procedures, and continuity of operations plans.
- Experience with security architecture evaluations, guidance development, and troubleshooting.
- Experience with the Risk Management Framework (RMF).
- Experience working in an Agile development environment.
- Knowledge of infrastructure-as-code concepts, such as Terraform, CloudFormation, or Bicep.
- Active TS/SCI clearance and willingness to take a polygraph exam.
- One of the following education and IT-project experience combinations: high school diploma or GED and 7+ years; associate degree and 5+ years; bachelor's degree and 3+ years; or master's degree and 1+ years supporting IT projects and activities.
- Ability to obtain a DoD 8570 IAT Level III certification within 30 days of start date, such as SecurityX, CASP+, CCNP Security, CISA, CISSP, CISSP Associate, GCED, GCIH, or CCSP.
- Ability to obtain a DoD 8570 Cybersecurity Service Provider - Infrastructure Support (CSSP-IS) certification within 30 days of start date, including CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND.
Nice To Haves
- Experience with the software development life cycle (SDLC).
- Excellent team leadership, development, and client relationship skills.
- Excellent interpersonal skills.
- Excellent verbal and written communication skills.
Responsibilities
- Evaluate and support documentation, validation, assessment, and accreditation processes to ensure IT systems meet organizational Information Assurance and security requirements.
- Assist in defining desired states and risk thresholds, and analyze current-state information to assess compliance.
- Advise leaders on codifying strategic objectives into doctrine and procedures.
- Evaluate computer applications, software, and specialized utility programs to determine whether software assurance best practices are followed.
- Research current environments and on-premise, cloud-based, and hybrid resources to recommend tools and capabilities that address security requirements.
- Implement cloud security architectures, tools, and processes.
- Work with Intelligence Community clients to ensure security requirements and standards are met.
Benefits
- Health, life, disability, financial, and retirement benefits.
- Paid leave.
- Professional development.
- Tuition assistance.
- Work-life programs.
- Dependent care.
- Recognition awards for exceptional performance and demonstration of company values.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Education Level
High school or GED
