Cloud Security Engineer: Zero-Trust & IAM Architect

Steampunk

McLean (VA)

On-site

USD 110,000 - 155,000

Full time

7 days ago

Be an early applicant

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

Steampunk is seeking a Cloud Security Engineer to join our DevSecOps practice. You will deliver secure cloud architectures for migration, optimization, and deployment, using IAM, zero-trust, and encryption best practices.

The role requires collaboration with developers and security teams to automate and monitor cloud environments, assess risks, and ensure compliance with standards. The ideal candidate has 5+ years of cloud security experience, hands-on IaC and automation tools, and active cloud

Qualifications

Ability to obtain a U.S. government Security Clearance
Bachelor's degree in an IT field OR Bachelor's degree in a non-IT field and 2 years related IT experience
5+ years of total experience
3 years of experience architecting, designing, developing, and implementing cloud solutions
3 years of experience with one or more clouds (i.e. AWS, Azure, or GCP)
3 years of experience with Git SCM providers such as GitHub, GitLab, Bitbucket
3 years of experience with systems development in an Agile environment
3 years of experience implementing infrastructure as code and orchestration
3 years of experience providing conducting monitoring, risk assessment, threat modeling and security testing in cloud environments
3 years of experience documenting POAMs, SSPs, and A&A support documentation
Must have and maintain an active cloud or security related certification

Responsibilities

Identify and implement the most secure cloud-based solutions for the customer including components for zero-trust architectures, identity and access management policy, and data privacy.
Understand the needs of stakeholders and optimizesolutions that marry security with usability.
Monitor cloud environments for suspicious activities with cloud native monitoring or SIEM solutions and investigate security incidents where appropriate.
Examine infrastructure as code written by others and analyzing risk.
Ensure that systems are safe and secure against cybersecurity threats through risk assessment, threat modeling, and compliance with industry standards (e.g. NIST, ISO 27011, HIPPA, FISMA, etc.).
Identify technical problems, perform root cause analysis, and develop updates and 'fixes'.
Automate security processes such as vulnerability management and patch management.
Work with software developers and DevSecOps engineers to ensure that development follows established security processes and works as intended.
Supportenterprise cloud security throughinfrastructure as code including any activities around automated server or network configurations, large-scale software deployments, and monitoring and testing.
Ensure effective design and implementation of data protection and encryption mechanisms for data at rest and in transit.
Document as-is state of the environment, perform a gap analysis, and produce artifacts that articulate options and recommendations.
Identify, analyze, and resolve infrastructure vulnerabilities and application deployment issues.
Act as an individual contributor and mentor more junior team members.
Engineer and implement solutions and provide recommendations for continuous improvement for the services provided.
Present regular status updates and provide cross training to other team members.