Cloud Security Engineer

Booz Allen Hamilton; Charlottesville (VA); On-site; USD 99,000 - 225,000; Full time

Job summary

A leading technology firm is seeking a Cloud Security Engineer to define and implement cybersecurity architecture for AWS and Azure environments. The ideal candidate will have 4+ years of experience in securing computer systems and utilizing cloud technologies. A Top Secret clearance is required. The compensation range for this position is between $99,000 and $225,000 annually, depending on qualifications and experience.

Qualifications

• 4+ years of experience securing computer systems and performing DoD authorization.
• Experience with Cloud technologies, including AWS and Azure.
• Ability to obtain DoD certification within 90 days of hire.

Responsibilities

• Define cybersecurity architecture for cloud environments.
• Collaborate within an Agile team to implement cloud solutions.
• Support authorization activities for multiple networks.

Skills

Securing computer systems

Developing a body of evidence for RMF

Cloud technologies (AWS, Azure)

Incident monitoring and endpoint security

Scripting (PowerShell, Bash)

DevSecOps framework support

Top Secret clearance

Education

High School diploma or GED

Tools

Microsoft Sentinel

PowerShell

Bash

GIT

GitLab

Red Hat Enterprise Linux (RHEL)

Job description

Job Number: R0237288

Cloud Security Engineer

The Opportunity:

Define, communicate, and implement cybersecurity architecture and administration processes for Amazon Web Services (AWS) and Microsoft Azure cloud environments across multiple network domains. Collaborate across our cloud infrastructure delivery team and with stakeholders using an Agile process to design, implement, verify, and continuously monitor cloud solutions across multiple domains. Develop Risk Management Framework (RMF) Body of Evidence artifacts, including system security plans and cybersecurity concept of operations documents for Cloud environments in alignment with existing RMF packages. Support assessment and authorization activities to achieve and maintain Authority to Operate (ATO) on multiple networks. Evaluate enhancements to Cloud environments against RMF controls and DoD Security Technical Implementation Guidance (STIG) requirements. Support data capture and configuration within tools to enable achievement of the organization's Assessment and Authorization (A&A) objectives. Work without considerable direction. Mentor and supervise team members, as needed.

Join us. The world can't wait.

You Have:

• 4+ years of experience securing computer systems, performing DoD authorization activities, developing a body of evidence for RMF, and writing security plans
• 4+ years of experience with secure IT architecture and computing hardware and software
• Experience working with Cloud technologies, including AWS, Azure, or Infrastructure as a Service
• Experience with Microsoft Sentinel and Defender for incident monitoring and endpoint security
• Experience with scripts, PowerShell, and Bash to provide automated scanning or monitoring solutions
• Experience supporting security reviews of software and system releases within a DevSecOps framework and supporting recurring path-to-production software and system release activities
• Experience with terminology, processes, and regulations of IT system A&A for the RMF
• Top Secret clearance
• HS diploma or GED
• Ability to obtain DoD Directive 8570 or 8140 Series IAT Level II Certification within 90 days of hire date

Nice If You Have:

• Experience assessing and authorizing network connections between on-premise and cloud
• Experience in planning, implementing, and managing continuous monitoring solutions and working within an Agile-based project management framework
• Experience with Red Hat Enterprise Linux (RHEL) or Windows system administration
• Experience with code management tools such as GIT or GitLab in a team setting
• Experience with the Army, DoD, or Intelligence Community (IC) Information Assurance (IA) or Information Systems
• Experience in Information System Security Engineer (ISSE) or Information System Security Officer (ISSO) roles
• Knowledge of terminology and federal regulations related to the specification, development, acquisition, and maintenance of IT systems
• Ability to work independently and as an integrated member of a project team
• Possession of excellent verbal and written communication skills
• TS/SCI clearance

Clearance:

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Top Secret clearance is required.

Compensation

Salary at Booz Allen is determined by various factors, including but not limited to location, the individual's particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $99,000.00 to $225,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen's total compensation package for employees. This posting will close within 90 days from the Posting Date.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.