Cybersecurity Cloud SME

ESM • Columbus, OH

2d

About The Position

Enterprise Solutions and Management (ESM) is hiring a Cybersecurity Cloud SME to support an enterprise-level program in a federal environment. The role ensures cloud-hosted IT systems are architected and designed to meet Department of Defense (DoD) cybersecurity requirements. It reviews cloud security policies and recommends improvements to strengthen security and support protection, detection, monitoring, and response capabilities for systems and data. The position applies current cloud security engineering practices and knowledge of emerging threats to support secure deployment of programs and applications, and provides cybersecurity guidance throughout deployment to ensure compliance with DoD standards and requirements. It also advises assessment teams conducting Cybersecurity Vulnerability Assessments (CVAs) for cloud-hosted environments.

The role requires at least two years of experience achieving ATOs in a cloud environment and five years of achieving ATOs for compartment DoD IT systems, as well as a cloud security certification for OCI, AWS, Azure, or GCP. A Secret clearance is required. Physical demands include standing, walking, sitting, verbal communication, handling objects or controls, reaching, stooping, kneeling, bending, crouching, lifting up to 25 pounds, and extensive walking, including stairs. Travel to local or remote office locations may involve public transportation, a personal vehicle, or a Government vehicle. Other duties may be assigned.

Requirements

• At least two years of experience achieving ATOs in a cloud environment such as OCI, AWS, Azure, or GCP.
• At least five years of experience achieving ATOs for compartment DoD IT systems.
• Cloud Security Certification for OCI, AWS, Azure, or GCP.
• Secret clearance.
• Knowledge of cloud security architecture and engineering principles, including designing and implementing cloud-hosted IT systems in accordance with DoD cybersecurity requirements.
• Ability to review cloud security policies, identify gaps, and recommend improvements to security controls and the overall cloud security posture.
• Knowledge of cloud security threats, vulnerabilities, and emerging technologies.
• Ability to assess and support security capabilities for protecting, detecting, monitoring, and responding to threats affecting cloud-hosted systems and data.
• Skill in providing cybersecurity guidance throughout the system deployment lifecycle to ensure compliance with DoD security standards, policies, and requirements.
• Ability to support and advise assessment teams conducting CVAs of cloud-hosted environments and to recommend corrective actions.
• Ability to stand, walk, sit, communicate verbally in person and by telephone, use hands to finger, handle, or feel objects or controls, reach with hands and arms, stoop, kneel, bend, crouch, and lift up to 25 pounds.
• Vision abilities including close vision, distance vision, depth perception, color vision, and the ability to adjust focus.
• Ability to undertake extensive walking, including stairs, and potentially travel to local or remote office locations.

Nice To Haves

• Positive, self-motivated, and proactive approach, with the ability to adapt to change and tolerate stressful situations.
• Ability to communicate effectively with team members, team lead, management, and government customers.
• Ability and desire to research and develop creative solutions to unique problems with minimal supervision.

Responsibilities

• Ensure the architecture and design of cloud-hosted IT systems meet DoD cybersecurity requirements.
• Review cloud security policies and recommend improvements to strengthen security and protection, detection, monitoring, and response capabilities for systems and data.
• Apply current cloud security engineering practices and knowledge of emerging threats to support secure deployment of programs and applications.
• Provide cybersecurity guidance throughout deployment to ensure systems comply with DoD standards and requirements.
• Advise assessment teams on conducting Cybersecurity Vulnerability Assessments (CVAs) for cloud-hosted environments.
• Perform other duties as assigned.

What This Job Offers

• Job Type: Full-time
• Education Level: No Education Listed