Cloud Security Engineer (Architect) - Office of the Chief Information Officer

GSA; Lakewood (CO); On-site; USD 115,000 - 141,000; Full time

Benefits offered by this job

Health insurance

Life insurance

Paid holidays

Thrift Savings Plan (TSP)

Transit subsidies

Job summary

GSA is seeking a Cloud Security Engineer to identify risks and provide corrective security and technology recommendations to secure cloud systems. The role supports the Office of the Chief Information Security Officer with security engineering across architectures and environments while aligning with the agency's SDLC processes.

Responsibilities include developing the security engineering framework, reviewing architectures, and delivering technical guidance and consulting across IT initiatives

Qualifications

• Specialized IT security experience is required.
• Experience applying security controls across cloud and enterprise environments.
• Familiarity with security engineering standards and best practices.

Responsibilities

• Developing and maintaining the security engineering framework integrated into the GSAIT SDLC.
• Assessing security features and efficacy of proposed solutions against IT Security requirements.
• Reviewing and approving proposed Security Architectures before system build.
• Providing technical guidance on restructuring networks to maximize protection.
• Delivering security consulting and engineering support for IT systems and initiatives.

Skills

Cloud security

SDLC security

Security architecture

Security consulting

Job description

Summary

As a Cloud Security Engineer, you will be responsible for identifying risks and making corrective security and technology recommendations to secure GSA cloud systems.

Location of position

The Office of the Chief Information Security Officer is responsible for delivering secure and exceptional technology solutions and experiences to GSA.

Position can be filled in any of the following locations

Kansas City, MO; Fort Worth, TX; Washington, DC; Tacoma, WA; Lakewood, CO or Raleigh, NC.

Learn more about this agency

Duties

We are currently filling one vacancy, but additional vacancies may be filled as needed.

As a Cloud Security Engineer you will perform the following duties:

• Developing and maintaining the security engineering framework and related process and supporting guidelines, integrated into the GSAIT System Development Lifecycle (SDLC), ensuring security engineering and security consulting services are delivered as a formal program capability; utilizes a multidisciplinary approach to ensure that IT security is embedded throughout the IT architecture (e.g. system and cloud architecture, secure API integration, required key technical controls, code quality, cryptography, hash functions, key material handling etc.).
• Ensures multiple software, hardware, communications, process, and integration components across a project are designed and implemented to create a single functioning system that can securely deliver the business functionality proposed; piloting security solutions, procuring necessary hardware/software, and implementing and formally assessing these solutions to verify security features and determine their efficacy against GSA IT Security requirements.
• Reviews and approves all proposed Security Architectures prior to the commencement of the system build (architecture, infrastructure, and code); provides technical expertise and advice on the restructuring and/or re-architecting of GSA networks to ensure the best secure placement and configuration of network tools and appliances to provide the maximum protection of various types of sensitive Government data.
• Design, develop, and integrate interfaces that could be either software or processes to resolve highly complicated and evolving IT security issues faced by GSA; ensures new technologies are implemented following IT Security Engineering standards, integrated with the agency's strategic IT and IT security architecture; and are free of gaps in security.
• Provides security consulting and engineering support for GSAIT information systems and emerging IT and IT Security initiatives, including but not limited to: Cloud computing, bring-your-own-device (BYOD), Virtual Desktop Infrastructure, mobile devices, Remote Access Systems, Mobile Computing Platforms, Active Directory, System Virtualization, physical access control systems (building security), and identity and access management solutions.

Requirements

Conditions of employment

• US Citizenship or National (Residents of American Samoa and Swains Island)
• Meet all eligibility requirements within 30 days of the closing date.
• Register with Selective Service if you are a male born after 12/31/1959
• Direct Deposit of salary check to financial organization required.

If selected, you must meet the following conditions:

• Current or Former Political Appointees: The Office of Personnel Management (OPM) must authorize employment offers made to current or former political appointees. If you are currently, or have been within the last 5 years, a political Schedule A, Schedule C or NonCareer SES employee in the Executive Branch, you must disclose this information to the HR Office. Failure to disclose this information could result in disciplinary action including removal from Federal Service.
• Serve a one year probationary period, if required.
• Undergo and pass a background investigation (Tier 2 investigation level).
• Have your identity and work status eligibility verified if you are not a GSA employee. We will use the Department of Homeland Security’s e-Verify system for this. Any discrepancies must be resolved as a condition of continued employment.
• Complete a financial disclosure report to verify that no conflict, or an appearance of conflict, exists between your financial interest and this position.

Qualifications

To evaluate your qualifications, your resume must clearly demonstrate how you meet the specialized experience described below.

Your resume must not exceed two pages. To ensure your qualifications can be fully evaluated, we recommend including the following information:

• Name, address, telephone number, email address;
• Job Title (if Federal Service, provide series and grade; if not in GS plan, provide GS equivalent grade);
• Relevant work experience—should include employer name, job title, start and end dates (month/year), the number of hours worked per week and descriptions that explain how you meet the required qualifications in the job announcement.
• Education, certifications or licensures—If the job announcement requires any education, certifications or licensures, make sure to include the required information and any required documents like transcripts.

Your resume should contain enough information to make a valid determination that you fully meet experience requirements for each grade level you are applying to. If you do not provide enough information for us to determine your qualifications, you may be rated ineligible

If you have volunteered your service through a National Service program (e.g., Peace Corps, Americorps), we encourage you to apply and include this experience on your resume.

The GS-14salary range starts at $127,829 per year.

If you are a new federal employee, your starting salary will likely be set at the Step 1 of the grade for which you are selected.

To qualify, you must have at least one year of specialized experience equivalent to the GS-13 level or higher in the Federal service and must meet the following requirements: Have IT-related experience demonstrating EACH of the 9 competencies AND one year of specialized experience equivalent to the GS-13 level in the Federal service as described below:

IT SPECIALIST COMPETENCY REQUIREMENTS

• Attention to Detail - Is thorough when performing work and conscientious about attending to detail.
• Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.
• Decision Making - Makes sound, well-informed, and objective decisions; perceives the impact and implications of decisions; commits to action, even in uncertain situations, to accomplish organizational goals; causes change.
• Information Management - Identifies a need for and knows where or how to gather information; organizes and maintains information or information management systems.
• Interpersonal Skills - Shows understanding, friendliness, courtesy, tact, empathy, concern, and politeness to others; develops and maintains effective relationships with others; may include effectively dealing with individuals who are difficult, hostile, or distressed; relates well to people from varied backgrounds and different situations.
• Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.
• Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.
• Teamwork - Encourages and facilitates cooperation, pride, trust, and group identity; fosters commitment and team spirit; works with others to achieve goals.
• Technical Competence – Uses knowledge that is acquired through formal training or on-the-job experience to perform one's job; works with, understands, and evaluates technical information related to the job; advises others on technical issues.

SPECIALIZED EXPERIENCE

In addition to the Basic Requirements listed above, you must have one year of specialized experience equivalent to the GS-13 in the Federal service.

Specialized experience is defined as experience in information technology security work and validating security control implementations in cloud-native environments. This experience must also include:

• Analyzing output from automated scanning and assessment tools (e.g. running an automated vulnerability scanner and reviews findings);
• Planning, developing, or maintaining an organization-wide information security program;
• Implementing and evaluating security controls across enterprise systems and cloud-based environments;
• Conducting security reviews such as system assessments, vulnerability identification, and corrective action tracking; and
• Providing technical guidance to leadership and collaborating across teams to resolve complex security issues (e.g. coordinating with cloud provider engineers to resolve technical gaps in security authorization packages).

Additional information

Candidates will not be hired based on their race, sex, color, religion, or national origin.

Applicants are encouraged to make their resume searchable in their USAJOBS.gov profile. This will allow Federal hiring specialists and hiring managers across agencies to find their resume as part of agency recruitment campaigns or staffing searches.

If you apply to this position and are selected, we will not ask about your criminal history before you receive a conditional job offer. If you believe you were asked about your criminal history improperly, contact the agency or visit GSA's webpage.

Relocation-related expenses are not approved and will be your responsibility.

On a case-by-case basis, the following incentives may be approved:

• Recruitment incentive if you are new to the federal government
• Relocation incentive if you are a current federal employee
• Credit toward vacation leave if you are new to the federal government

Additional vacancies may be filled through this announcement in this or other GSA organizations within the same commuting area as needed; through other means; or not at all.

Candidates should be committed to improving the efficiency of the Federal government, passionate about the ideals of our American republic, and committed to upholding the rule of law and the United States Constitution.

Benefits

A career with the U.S. government provides employees with a comprehensive benefits package. As a federal employee, you and your family will have access to a range of benefits that are designed to make your federal career very rewarding. Opens in a new windowLearn more about federal benefits.

You will have access to many benefits including:

• Health insurance (choose from a wide range of plans)
• Life insurance coverage with several options
• Sick leave and vacation time, including 11 paid holidays per year
• Thrift Savings Plan (similar to a 401(k) plan)
• Transit and child care subsidies
• Flexible spending accounts
• Long-term care insurance
• Training and development

Eligibility for benefits depends on the type of position you hold and whether your position is full-time, part-time or intermittent. Contact the hiring agency for more information on the specific benefits offered.