Cloud Security Expert

Ho-Chunk, Inc.•Fairfax, IA

3d•$130,000 - $152,500•Onsite

About The Position

All Native Group, a division of Ho-Chunk, Inc., is seeking a Cloud Security Expert to support a federal agency enterprise data management program. The role secures and hardens the program’s cloud infrastructure, with a focus on configuration management and security for a high-availability AWS OpenSearch cluster and the large-scale data stores it supports. The position supports an active federal contract. Any employment offer is contingent on government approval of the candidate and successful completion of the DEA security clearance process. An active secret clearance is required. The position is conducted at DEA facilities in Arlington, Virginia, and Merrifield, Virginia. It is full-time, with flexible hours based on mission requirements. Occasional travel within the continental United States may be required for meetings, conferences, or training. The expected compensation range is $130,000–$152,500 per year. A bachelor’s degree in cybersecurity, information technology, computer science, or a related field is required, though experience may be considered in lieu of education.

Requirements

At least 5 years of experience in cloud security, cloud infrastructure, or information security engineering.
Experience with configuration management and security of AWS environments.
Experience securing high-availability, multi-node cloud clusters.
Working knowledge of FISMA, NIST SP 800-53, NIST SP 800-37 (RMF), FedRAMP, and FIPS 140-3, 199, and 200.
Experience working in an Agile delivery environment.
An active security certification, such as CISSP, CCSP, or AWS Certified Security Specialty.
Active secret security clearance.
Bachelor’s degree in cybersecurity, information technology, computer science, or a related field; experience may be considered in lieu of education.
Successful completion of a pre-employment drug screen; employees are also subject to random drug screens.
Ability to remain stationary 75% of the time, work indoors 90% of the time, operate a computer and other office productivity machinery, and occasionally move standard office equipment weighing up to 25 pounds.
Ability to talk, hear, stand, walk, use hands to handle or feel objects, reach with hands and arms, and convey detailed spoken instructions.

Nice To Haves

OpenSearch or Elasticsearch cluster experience is strongly preferred.
Experience supporting federal law enforcement or mission-critical cloud environments.

Responsibilities

Provide configuration management and security for a high-availability cloud OpenSearch cluster of 10 or more nodes.
Implement and maintain security controls across cloud infrastructure supporting enterprise search and data stores.
Monitor, assess, and remediate cloud-environment security vulnerabilities.
Support compliance with federal security requirements and the applicable system security posture.
Collaborate with application and data engineering teams to embed security throughout the delivery lifecycle.
Document security configurations, procedures, and incident response actions.
Safeguard government equipment, information, and property in accordance with established Rules of Behavior.
Support Vulnerability Assessment and Penetration Testing (VAPT), including quarterly testing for scheduled applications.
Remediate high-severity vulnerabilities within 30 days and medium-severity vulnerabilities within 90 days.
Support DEA’s DevSecOps and CI/CD pipeline implementation.
Implement and test backup and disaster recovery plans for cloud resources.
Coordinate with DEA TC Information Security, Cloud Services, Engineering, and Operations.