Multi-Cloud Security & Compliance Engineer

Accenture Federal Services•Washington, DC

10d•$133,700 - $165,200

About The Position

Responsible for securing our Oracle Cloud Infrastructure (OCI) and Google Cloud Platform (GCP) environments. This role involves establishing and enforcing a unified security posture across OCI and GCP, overseeing permissions boundaries with Zero-Trust in mind, configuring centralized security monitoring, and ensuring all cloud deployments meet stringent federal compliance and security requirements, including FedRamp HIGH, FISMA and NIST 800-53.

Requirements

5+ years in cloud security engineering, enterprise security architecture, or compliance programs.
3+ years of experience leading technical teams to achieve objectives and outcomes.
Proven ability to establish and maintain a unified security posture across multiple cloud service providers.
Experience configuring and managing centralized cloud-native logging, anomaly detection, and security monitoring solutions.
Skilled in implementing and managing vulnerability scanning workflows for compute instances and container images.
Experience implementing security controls for cloud databases, including data masking, risk assessment, and activity auditing.
Bachelor's Degree in computer science, engineering, accounting/finance, information systems, or technical discipline.

Responsibilities

Establish and enforce an integrated security posture spanning both GCP and OCI environments.
Define security guardrails, standard configurations, and baseline security controls to ensure consistency across all cloud workstreams.
Manage and maintain identity federation between cloud environments, ensuring seamless, secure authentication and authorization flows.
Implement and optimize IAM policies, role structures, and least‑privilege access controls across multi‑cloud deployments.
Configure and operate centralized security monitoring solutions (e.g., GCP Security Command Center) to unify threat detection, vulnerability visibility, and compliance tracking across clouds.
Integrate logs, alerts, and telemetry into enterprise monitoring systems to enable proactive incident response.
Ensure all deployments meet Department of Veterans Affairs (VA) compliance and security requirements, including relevant federal standards and program‑specific directives.
Partner with security, governance, and audit teams to validate adherence to VA policies throughout delivery lifecycle stages.
Identify vulnerabilities, policy deviations, and architectural risks across cloud platforms.
Recommend and implement remediation actions, ensuring continuous improvement of security posture.
Work closely with cloud engineering teams (OCI Migration, GCP Foundations, Data & AI) to embed secure‑by‑design principles throughout architectures and deployments.
Provide subject matter expertise during design reviews, threat modeling discussions, and release planning.