Information Technology Strategies, Inc. is a government IT solutions provider servicing commercial and government initiatives in various parts of the United States. We are currently seeking a Cloud Computing Specialist to work for our company.
Summary:
- Must have a current U.S. Government SECRET / IT-II Clearance. (Sponsorship will not be provided)
- Will serve as an Information Assurance and Cloud computing authority with regards to Certification and Accreditation (C&A) and a broad coverage of the application of the National Institute of Standards and Technology (NIST) Risk Management Framework (RMF) standards and guidance as outlined in the NIST Special Publication(s) (SP) 800-53 and 800-37 (Current versions).
- Must be willing and able to travel to the client site in Washington, DC approximately 25% annually.
Requirements:
- Must have a current U.S. Government SECRET / IT-II Clearance. (Sponsorship will not be provided)
- Must hold an active certification as a Certified Cloud Security Professional.
- Must hold one of the following certifications: CCNA Security, CySA+, GICSP, GSEC, CompTIA Security+ CE, SSCP, CASP CE, CCNP Security, CISA, CISSP, GCED, GCIH.
- Must currently have or be willing to obtain one of the following certifications: Oracle Cloud Infrastructure (OCI) Foundations 2020 Certified Associate, Oracle Certified Associate (OCA), Oracle WebLogic Server 12c Administrator, Oracle Java SE 8 Programmer I, Oracle Enterprise Manager 12c Essentials (OEM 12c), Oracle Business Intelligence Publisher (BIP) 12c R1: Fundamentals, Oracle Planning 202x Certified Implementation Specialist (CIS), and Oracle Identity Governance 12c: Essentials.
- Must have 5+ years of relevant C&A experience.
- Must have 5+ years of Risk Management Framework (RMF) and NIST C&A experience.
- Must have previous experience with DOD IA.
- Must have previous experience assessing IA Controls and conducting C&A reviews for large, complex Information systems.
- Must be able to work independently with substantial cloud computing security knowledge.
- Must be able to identify, manage and resolve cloud computing security risk and implement “best practices” as applied within a cloud environment (across all the different deployment and service models, and derivatives).
- Must have deep knowledge of FedRAMP assessment methodology of security and privacy controls deployed in cloud information systems to include six (6) domain areas. The six domains include:
- Architectural Concepts & Design Requirements
- Cloud Data Security
- Cloud Platform & Infrastructure Security
- Cloud Application Security
- Operations
- Legal & Compliance
- Must be willing and able to travel to the client site in Washington, DC approximately 25% annually.