Cloud Security Engineer - Active TS/SCI with CI Poly

ENS Solutions, LLC; Washington, Northern (District of Columbia, KY); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Free Platinum-Level Medical Coverage

401k Contribution from Day 1

PTO + 11 Holidays

Long & Short Term Disability Insurance

Group Term Life Insurance

Tuition & Certification Support

Workers’ Compensation

Relocation Assistance

Job summary

ENS Solutions, LLC is seeking a hands-on security engineer to evaluate and support documentation, validation, assessment, and accreditation for IT systems. You will help define risk thresholds, codify objectives into doctrine, and advise on secure cloud architectures using on-prem, cloud, and hybrid resources.

Required 5+ years in cloud environments, knowledge of RMF, Terraform/CloudFormation/Bicep, and DoD/CSSP-IS related certifications or timelines.

Qualifications

• 5+ years building and administering cloud environments using cloud-native and open source tools.
• Knowledge of Infrastructure as Code concepts such as Terraform, CloudFormation, or Bicep.
• Experience with security documentation, RMF, and Agile development practices.
• Education and work-experience combinations per DoD guidance are acceptable.

Responsibilities

• Evaluate and support documentation, validation, assessment, and accreditation for IT systems.
• Define desired state and risk thresholds; advise on doctrine and procedures.
• Develop and evaluate security architecture and guidance; support RMF processes.
• Work with IC clients to ensure security requirements are met and cloud architectures are secure.

Skills

Cloud experience

RMF knowledge

Agile development

Education

Bachelor's degree

Master's degree

Tools

Terraform

CloudFormation

Bicep

Job description

As a hands-on security engineer on our team, you’ll evaluate and support the documentation, validation, assessment, and accreditation processes necessary to ensure that Information Technology(IT)systems meet the organization’s Information Assurance(IA)and security requirements. You'll assist in defining organizations’desiredstate and risk thresholds and analyze actual state information to assess compliance. You'll work with leaders to advise on codifying strategic objectives into doctrine and procedures that can help meet defined objectives.You’ll assist with evaluation of computer applications,software, or specialized utility programs to determine ifsoftware assurance best practices are followed.You’ll recommend tools and capabilities based on your research of thecurrentenvironment and knowledge of various on-premise, cloud-based, and hybrid resources to address security requirements. You will implement the cloud security architectures, tools, and processes that you helped to shape and define. Your technical experience will be vital as you work with IC clients to ensure standards are met with security requirements. This is an opportunity to use the latest cloud technologies as you look for ways to secure your customer’s environment while collaborating with tomorrow’s cloud security experts.

• 5+ years of hands-on experience building and administering cloud environments, utilizing cloud-native functionality as well as COTs, GOTS, and open source tools to meet your objectives.
• KnowledgeofInfrastructure codeconcepts such as Terraform, CloudFormation, or Bicep
• Experience with developing and evaluating security documentation, including system security plans, contingency plans, security procedures, and continuity of operations plans
• Experience with security architecture evaluations, guidance development, and troubleshooting
• Experience with the Risk Management Framework(RMF)
• Experience with working in an Agile development environment
• HS diploma or GED and 7+ years of experience with supporting IT projects and activities, Associate’s degree and 5+ years of experience supporting IT projects and activities, Bachelor’s degree and 3+ years of experience supporting IT projects and activities, or Master’s degree and 1+ years of experience supporting IT projects and activities.
• Ability to obtain a DoD 8570.01-M Cybersecurity Service Provider - Infrastructure Support (CSSP-IS) Certification, including CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND certification within 30 days of offer accept
• Ability to obtain a DoD 8570 IAT Level III Certification such as SecurityX (formerly CASP+), CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, CCSP certification within 45 days of CSSP-IS date (or offer accept if candidate already has CSSP-IS Cert).

Nice If You Have:

• Experience with thesoftware development life cycle(SDLC)
• Possession of excellent team leadership, development, and client relationship skills
• Possession of excellent interpersonal skills
• Possession of excellent verbal and written communication skills

Essential Network Security (ENS) Solutions, LLC is a service-disabled veteran owned, highly regarded IT consulting and management firm. ENS consults for the Department of Defense (DoD) and Intelligence Community (IC) providing innovative solutions in the core competency area of Identity, Credential and Access Management (ICAM), Software Development, Cyber and Network Security, System Engineering, Program/Project Management, IT support, Solutions, and Services that yield enduring results. Our strong technical and management experts have been able to maintain a standard of excellence in their relationships while delivering innovative, scalable and collaborative infrastructure to our clients.

Why ENS?

• Free Platinum-Level Medical/Dental/Vision coverage, 100% paid for by ENS
• 401k Contribution from Day 1
• PTO + 11 Paid Federal Holidays
• Long & Short Term Disability Insurance
• Group Term Life Insurance
• Tuition, Certification & Professional Development Assistance
• Workers’ Compensation
• Relocation Assistance

Candidate AI Usage Policy

AI tools are an important part of daily work at ENS Solutions, and we are committed to their responsible and ethical use. To ensure a fair and equitable candidate evaluation based on individual skills, knowledge, and experience, candidates are not permitted to use artificial intelligence or other assistive tools during interviews, whether in person or virtual, unless explicit permission has been granted in advance.