Cloud Security Engineer

Gritter Francona; Washington (District of Columbia); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Health Plan (Medical, Dental & Vision)

Retirement Plan (401k, IRA)

Life Insurance (Basic, Voluntary & AD&

Paid Time Off (Vacation, Sick & Public

Job summary

Gritter Francona is seeking a Junior Cloud Security Engineer to provide comprehensive security engineering and sustainment for CBP cloud environments. You will architect, deploy, and sustain secure cloud and on‑premise resources, ensuring compliance with federal mandates and best practices.

The role emphasizes secure baselines, log management, and continuous monitoring while optimizing costs. Certifications, documentation, and market research to advance security posture are key components of the

Qualifications

• AWS certifications are required or obtainable.
• Minimum 5 years of related security engineering experience.
• Ability to obtain a government clearance if needed.

Responsibilities

• Architect, engineer, deploy, and sustain secure cloud and on‑premise applications and systems.
• Develop, deploy, and maintain secure baselines for all cloud and on‑premise systems.
• Create and maintain SOPs, policies, diagrams, code documentation, and system controls.
• Manage and optimize log collection for monitoring and compliance.
• Improve logging/monitoring to reduce noise and enhance security and performance.
• Support continuous monitoring and availability per federal regulations and policies.
• Monitor cloud expenditures and provide optimization recommendations.
• Administer and secure hybrid‑cloud tool suites and related security devices.
• Conduct market research to identify new security solutions and prevent obsolescence.
• Report cybersecurity incidents per regulations and organizational policies.
• Ensure data retention and security per federal policy and guidelines.
• Support audits across applications, systems, and services.

Skills

Cloud security

Security engineering

Documentation

Log management

Monitoring

Education

AWS Certified Cloud Practitioner

AWS Certified Security – Specialty

5 years related experience

Tools

AWS

Job description

Gritter Francona is looking for a Junior Cloud Security Engineer to provide comprehensive security engineering and sustainment support for U.S. Customs and Border Protections' cloud environments, ensuring optimal coverage, performance, and adherence to security standards and best practices.

• Secure Architecture, Engineering, and Sustainment: Architect, engineer, deploy, and sustain secure, resilient, and cost-effective cloud and on-premise applications and systems. This includes, but is not limited to providing support for existing and transitional cloud environments, and reviewing/approving architectural designs to ensure secure implementation of cloud, hybrid-cloud, and on-premise resources across the enterprise.

• Secure Baseline Management: Develop, deploy, and maintain secure baselines for all CSD cloud and on-premise systems, ensuring adherence to federal mandates, organizational policies, and industry best practices. This includes the development, implementation, and maintenance of administrative, technical, and physical controls and safeguards that adhere to federal regulations, organizational policies, and industry best practices.

• Documentation and Standards Development: Create and maintain comprehensive documentation including, but not limited to, Standard Operating Procedures (SOPs), policies, architectural diagrams, code documentation, security baselines, system controls, and other supporting system documentation.

• Log Management and Monitoring: Ensure the comprehensive collection of all pertinent performance and security logs for all resources and applications to support monitoring, analysis, and compliance with the following, but not limited to, federal policies, regulations, mandates, and industry best practices.

• Log Management and Monitoring Optimization: Continually review and improve logging and monitoring mythologies and capabilities to reduce noise and improve performance, security, and compliance.
• Continuous Monitoring & Availability: Develop, implement, and maintain a robust continuous monitoring capability within accordance to federal regulations and organizational policies. The continuous monitoring activities shall encompass, at a minimum, system availability, performance, security, reporting, and response.
• Cost Optimization: Monitor cloud expenditures and provide federal leadership with actionable recommendations to minimize cloud costs while maintaining operational effectiveness.
• Hybrid-Cloud Tool Suite Administration and Security: Administer, operate, maintain, configure, tune, and secure the CSD's hybrid-cloud monitoring technologies and other relevant CSD tools, devices, application systems, servers, and sensors to mitigate Plans of Action and Milestones (POA&Ms) and reduce risk.
• Cybersecurity Services Optimization: Maintain optimal coverage and performance of the cybersecurity network, applications, and systems, including but not limited to ensuring continuous security and operational efficiency.
• Market Research and Innovation: Conduct market research to identify and evaluate or develop new security solutions, applications, and hardware to prevent obsolescence, enhance productivity, and improve the overall security posture within CBP's enterprise.
• Cyber Incident Reporting: Report all cybersecurity incidents within accordance to federal regulations and organizational policies.
• Data Management: Maintain data retention and security within accordance to federal policy, regulation, mandates, including industry guidelines and best practices.
• Audit Support and Maintenance: Ensure continuous compliance with all federal regulations and organizational policies, and provide comprehensive support for audits of applications, systems, and services to guarantee successful outcomes.

• AWS Certified Cloud Practitioner
• AWS Certified Security – Specialty
• 5 years related experience
• Ability to obtain a government clearance if needed

• Health Care Plan (Medical, Dental & Vision)
• Retirement Plan (401k, IRA)
• Life Insurance (Basic, Voluntary & AD&D)
• Paid Time Off (Vacation, Sick & Public Holidays)
• Short Term & Long Term Disability
• Training & Development