System Engineer

Freedom Technology Solutions Group•Herndon, VA

2d•Hybrid

About The Position

Freedom Technology Solutions Group is looking for a Cloud Engineer to accelerate mission delivery and connect mission partners with the power of commercially-driven cloud computing. The team brings multi-cloud solutions to mission environments, supporting cloud services providers (CSPs), and offering cloud services across multiple networks. In this role, the ideal candidate manages security assessment, security compliance, change management, and continuous monitoring responsibilities across four (4) cloud service providers: Amazon Web Services, Google Cloud, Oracle Cloud, and Microsoft Azure. The Contractor shall ensure that all development and modifications to existing Sponsor applications comply with Sponsor's security and architectural policies and regulations. The Contractor shall be required to communicate and collaborate across organizational boundaries, to include other contractor teams. The Contractor shall be required to work with Sponsor staff and contractor personnel as well as external stakeholders. The Sponsor will direct priorities and delegate tasks.

Requirements

Facilitating TEMs with cloud service providers to review cloud service architectures
Active Security Clearance with Polygraph.
Maintaining A&A packages across multiple services/systems in accordance with FIPS-199, NIST 800-53, and CNSS 1253
Designing, implementing, assessing or reviewing systems utilizing cloud technology with AWS, Oracle Cloud, Google Cloud, or Microsoft Azure
Utilizing or reviewing cross domain technology and common architecture designs
Continuous monitoring requirements including scan analysis with tools such as Rapid 7, Nessus, and Qualys
Creating, monitoring, or closing POA&Ms
Utilizing compliance tools such as Xacta 360, Risk Vision, RSA Archer
Common control provider concept within the NIST RMF
Security control assessments including working with SCAs and preparing security packages
Information system security engineering activities
Project management including planning, task tracking, milestone management, and resource coordination
Developing and maintaining program metrics, performance indicators, and compliance status dashboards
Preparing technical reports, program highlights, status briefings, and leadership communications

Nice To Haves

Using the Sponsor's or IC element A&A process
Creating or reviewing A&A body of evidence documentation in a cloud security environment
Identifying, implementing, or reviewing appropriate information security controls
Working in Xacta 360
Experience with Sponsor's A&A tools

Responsibilities

Assess cloud security technologies for security gaps and weaknesses according to industry standards.
Review cloud security body of evidence packages for completeness and accuracy.
Facilitate TEMs with cloud service providers to review cloud service architectures.
Provide project management support including project planning, task tracking, milestone management, and resource coordination.
Manage security assessment, security compliance, change management, and continuous monitoring activities, including associated program management functions, across four (4) CSPs: AWS, Google Cloud, Oracle Cloud, and Microsoft Azure.
Analyze security scan findings and perform risk analysis on the findings.
Collaborate with other internal components and security peers to determine security and potential weaknesses of cloud infrastructure and cloud services.
Advise Sponsor leadership on cloud security services.
Analyze system alerts to determine if a security weakness exists and document risk mitigation procedures.
Sustain and evolve the Sponsor's standard operating procedures to meet Program Objectives.
Develop and maintain program metrics and performance indicators including security assessment completion rates, finding remediation timelines, compliance status dashboards, and other KPIs as directed by the Sponsor.
Respond to Sponsor inquiries and requests for information within established timelines, providing accurate and complete technical and programmatic information.
Prepare periodic program highlights, status reports, and briefing materials for Sponsor leadership.
Support ad hoc taskings from the Sponsor including research, analysis, documentation, and coordination activities.
Maintain regular communications with the Sponsor through scheduled status meetings, written reports, and other communication channels.

Benefits

matching 401k
fully paid medical
Generous paid time off
paid site closure days
Paid training
tuition reimbursement
Referral bonuses
Fully paid life and disability
Annual logo wear allowance
Company sponsored events (game nights, holiday party, summer party, happy hours)