Network Security)

RedMatter Solutions LLC•Washington, DC

About The Position

The Senior Cloud & Cybersecurity Engineer will serve as a key technical SME supporting the Federal Housing Finance Agency (FHFA) across cloud architecture, identity services, and network security. This role replaces a former senior engineer who provided advanced AWS architectural support, Ping Federate administration, Palo Alto firewall management, Cortex XDR operations, and cross-team troubleshooting across Cyber, Cloud, Network, and ICAM domains. This position is responsible for maintaining, improving, and modernizing critical cybersecurity infrastructure, handling complex incidents, and ensuring operational continuity for systems that directly support FHFA’s mission.

Requirements

7–10+ years of experience in Cybersecurity, Cloud Engineering, or Identity Services
Strong hands-on experience with AWS networking, load balancers, IAM, EC2, and monitoring
Experience with Ping Federate, SAML, OIDC, and certificate management
Advanced knowledge of Palo Alto firewalls, Panorama, Global Protect, Cortex XDR
Familiarity with Linux server administration, package repositories, and update issues
Ability to work across cloud, network, and identity teams in a troubleshooting role
Experience supporting Splunk integrations and log forwarding
Experience documenting system configurations, creating SOPs/runbooks
Ability to lead technical modernization efforts and train junior staff

Nice To Haves

AWS Solutions Architect certification
Terraform or CloudFormation experience
Knowledge of NIST, TIC, and federal cybersecurity controls

Responsibilities

Lead AWS architecture, operations, and modernization across Prod/QA/Test
Manage AWS load balancers (ALB/NLB), networking, IAM, EC2, CloudWatch, and Splunk integrations
Support Disaster Recovery processes and ensure reliable AWS console/root access pathway
Transition manual tasks to Infrastructure-as-Code (Terraform/CloudFormation)
Administer Ping Federate environments (Test/QA/Prod), onboard new apps, and manage certificate renewal
Coordinate with app owners, certificate authorities, and SQL database teams
Manage Palo Alto NGFW, Panorama, security policies, rule optimizations, and Global Protect client upgrades
Support Cortex XDR agent deployment, packaging, troubleshooting, and SOC coordination
Maintain security tool access, Secret Server entries, and resolve Scuba/365 Global Admin issues
Perform advanced troubleshooting during outages, routing failures, and authentication issues
Work across multiple teams including Cloud, Network, ICAM, SOC, and Security Tools
Create documentation, runbooks, operational SOPs, and reduce single-point-of-failure risk