Cloud Security Engineer

US Office of the Chief Information Officer; Lakewood (CO); On-site; USD 128,000 - 187,000; Full time

Benefits offered by this job

Health insurance

Life insurance

11 paid holidays per year

Thrift Savings Plan

Transit and child care subsidies

Flexible spending accounts

Training and development

Job summary

Cybersecurity Jobs in Lakewood, CO seeks a security engineer to identify cloud security risks and guide corrective security and technology improvements for GSA cloud systems. The role focuses on integrating security into SDLC and IT architecture.

You will design, pilot, and validate security controls, review architectures, and provide guidance across cloud, BYOD, VDI, remote access, and IAM. A strong background in IT security and experience with AWS, Linux, and secure API integration is required.

Qualifications

• US Citizenship or National required, with 30 days to meet eligibility.
• Experience implementing security controls in cloud-native environments.
• Resume must not exceed two pages and familiarity with DHS e-Verify is a plus.

Responsibilities

• Develop and maintain a security engineering framework integrated into the SDLC.
• Embed security across IT architecture including cloud and API integration.
• Design and implement integrated projects delivering secure systems.
• Pilot security solutions, procure hardware/software, and assess security features.
• Review and approve Security Architectures before builds begin.
• Provide technical guidance to restructure or re-architect networks for security.

Skills

Security engineering

Cloud security

IT security program management

Risk assessment

Education

Bachelor's degree in a related field

Tools

AWS

Linux

Ansible

Jenkins

Git

Gerrit

Java

C++

Active Directory

CI/CD tools

Job description

Responsible for identifying cloud security risks and recommending corrective security and technology improvements to help secure GSA cloud systems.

Responsibilities

• Develop and maintain a security engineering framework, processes, and supporting guidelines integrated into the GSA IT System Development Lifecycle (SDLC) to deliver security engineering and security consulting as a formal program capability.
• Embed security across IT architecture using a multidisciplinary approach, including system and cloud architecture, secure API integration, required key technical controls, and code quality.
• Design and implement integrated projects so multiple software, hardware, communications, process, and integration components function as a single secure system that delivers proposed business capabilities.
• Pilot security solutions, procure required hardware/software, implement the solutions, and formally assess security features against GSA IT Security requirements.
• Review and approve Security Architectures before system build begins, including architecture, infrastructure, and code.
• Provide technical guidance to restructure or re-architect GSA networks, improving secure placement and configuration of network tools and appliances to protect sensitive Government data.
• Design, develop, and integrate software or process interfaces to resolve complex and evolving IT security issues.
• Ensure new technologies are implemented using IT Security Engineering standards and integrated with agency strategic IT and IT security architecture, with no security gaps.
• Provide security consulting and engineering support for GSA IT systems and emerging IT and IT security initiatives, including:
  • Cloud computing
  • Bring-your-own-device (BYOD)
  • Virtual Desktop Infrastructure
  • Mobile devices and Mobile Computing Platforms
  • Remote Access Systems
  • Active Directory
  • System Virtualization
  • Physical access control systems (building security)
  • Identity and access management solutions

Requirements

• US Citizenship or National (Residents of American Samoa and Swains Island)
• Meet all eligibility requirements within 30 days of the closing date
• Register with Selective Service if you are a male born after 12/31/1959
• Direct Deposit of salary check to a financial organization required
• Undergo and pass a background investigation at the Tier 2 level
• If not a GSA employee, identity and work status eligibility must be verified; uses Department of Homeland Security e-Verify, and any discrepancies must be resolved as a condition of continued employment
• Complete a financial disclosure report to verify no conflict or appearance of conflict
• Serve a one-year probationary period, if required
• Political appointee considerations: OPM must authorize offers for current or former political appointees; disclose if currently or within the last 5 years you were a political Schedule A, Schedule C, or NonCareer SES employee in the Executive Branch; failure to disclose can result in disciplinary action including removal
• Have IT-related experience showing each of the 9 competencies and one year specialized experience equivalent to GS-13 level as described in IT Specialist Competency requirements
• Specialized experience in information technology security work and validating security control implementations in cloud-native environments, including:
  • Analyzing output from automated scanning and assessment tools
  • Planning, developing, or maintaining an organization-wide information security program
  • Implementing and evaluating security controls across enterprise systems and cloud-based environments
  • Conducting security reviews such as system assessments and vulnerability identification (and related correc… as applicable)
• Resume must not exceed two pages

Technologies

• Amazon Web Services (AWS)
• Linux Operating Systems (Red Hat Enterprise Linux, CentOS, Ubuntu)
• Ansible, Chef, Puppet
• Jenkins
• Git, Gerrit
• Java, C++, C#, ASP .NET, VB
• APEX, Node, Go, Python, PERL, PHP, RoR
• Active Directory
• Cloud computing
• Bring-your-own-device (BYOD), Virtual Desktop Infrastructure, Remote Access Systems
• System Virtualization
• Identity and access management solutions
• Mobile devices, Mobile Computing Platforms
• Physical access control systems (building security)
• Secure API integration
• Cryptography, hash functions, key material handling
• Continuous integration/automation tools

Benefits

• Health insurance (choose from a wide range of plans)
• Life insurance coverage with several options
• Sick leave and vacation time, including 11 paid holidays per year
• Thrift Savings Plan (similar to a 401(k) plan)
• Transit and child care subsidies
• Flexible spending accounts
• Long-term care insurance
• Training and development

Open To

• The public
• U.S. Citizens, Nationals or those who owe allegiance to the U.S.

Clarification from the Agency

• Public notice issued under Direct Hire Authority (DHA) to recruit talent for occupations with severe shortage of candidates or critical hiring need
• Current civil service employees may receive new appointments if selected under this DHA
• DHA information: https://www.opm.gov/policy-data-oversight/hiring-information/direct-hire-authority/

How You Will Be Evaluated

• Evaluated based on how well you meet the qualifications above
• Application evaluated against basic qualifications including specialized experience and/or education requirements (if applicable)
• Applications will not be rated or ranked
• Veterans' Preference not applicable to direct hire recruitment procedures
• Incomplete applications or missing required supporting documentation may result in not being considered
• Falsification of background, education, and/or experience may result in non-selection or dismissal
• SME Resume Review: Subject Matter Experts review resumes using a pass/fail process
• ICTAP/CTAP: selection priority and well-qualified definition based on meeting at least 3 out of 5 KSA’s listed (supported by the resume)
• You may preview questions for this vacancy

Required Documents

• Submit all required documents before the closing date
• Resume: must not exceed two pages (see Qualifications section for resume requirements)
• If ICTAP/CTAP eligible: submit (a) proof of eligibility including agency notice; (b) SF-50; (c) most recent performance appraisal
• If current or former political appointee: submit SF-50

Education

• No substitution of education for experience at the GS-14 level

Location: Lakewood, CO (onsite)

Salary: USD 127,829 - 187,093 per year

Minimum Experience: 1 years

Citizenship/Eligibility Notes: US Citizenship or National; must meet all eligibility requirements within 30 days of the closing date