Lead Cloud Security Engineer

Saic; Washington (District of Columbia); On-site; USD 160,000 - 200,000; Full time

Job summary

SAIC seeks a Lead Cloud Security Engineer and Netskope Subject Matter Expert to design, engineer, implement, and secure cloud environments for complex enterprise and federal missions.

The role combines hands-on cloud engineering with cloud security, Zero Trust, SASE/SSE, and security compliance across programs. You will lead technical initiatives, mentor engineers, and serve as a senior SME to customers and leadership.

Qualifications

• BS and 14+ years of professional experience in cybersecurity or cloud security.
• Ability to obtain and maintain a Public Trust requiring U.S. Citizenship.
• 5+ years of hands-on experience with Netskope/Blue Coat/Zscaler designing, implementing, or securing cloud environments.
• Demonstrated experience as Security/Cloud Architect or Lead with secure enterprise infrastructure.
• Demonstrated experience with Zero Trust architectures or ZTNA.
• Experience with cloud networking and security (VPCs, segmentation, routing, firewalls).
• Experience translating cybersecurity requirements into technical architecture.
• Experience producing architecture and engineering documentation.
• Experience troubleshooting complex cloud and network security issues.
• Experience leading technical pilots/demos and customer-facing SME.

Responsibilities

• Design, engineer, implement, and maintain secure infrastructure and security architectures, including access to on premise and cloud applications.
• Engineer and troubleshoot Software Defined Networking integrating Netskope and Cisco platforms.
• Develop and implement cloud security architectures based on Zero Trust principles, including identity-centric access controls, segmentation, and ZTNA.
• Design and implement SASE/SSE security capabilities, including SWG, Cloud Firewall, Private Access, and DLP.
• Integrate cloud security controls into DevSecOps and automated deployment workflows.
• Develop technical architecture documentation, design documentation, implementation plans, test plans, SOPs, and other engineering artifacts.
• Translate cybersecurity policies, security controls, and compliance requirements into implementable technical solutions.
• Troubleshoot complex cloud and network security issues.
• Work with cybersecurity, network, cloud, application, and infrastructure teams to identify and resolve security and architecture issues.
• Lead technical evaluations, pilots, proofs-of-concepts, and phased deployments.
• Provide technical leadership and mentoring to engineers and other technical personnel.
• Serve as a senior technical SME to customers, program leadership, security stakeholders, and engineering teams.

Skills

Cloud security

Zero Trust

ZTNA

Security architecture

DevSecOps

Education

Bachelor's degree in Cybersecurity or related field

Tools

Netskope

Blue Coat / Zscaler

Cisco

Splunk

Wireshark

Docker

Kubernetes

Job description

Description

SAIC is eeking a highly experienced Lead Cloud Security Engineerwho is aNetskope Subject Matter Expert to design, engineer, implement, and secure cloud-based environments supporting complex enterprise and federal government missions. The ideal candidate will combine strong hands-on cloud engineering capabilities with deep expertise in cloud security, Zero Trust, SASE/SSE, security architecture, automation, and federal cybersecurity compliance.

The Lead Cloud Security Engineer will serve as a senior technical authority responsible for translating security requirements and architectural objectives into secure, scalable, and operational cloud solutions, focused on implementing technology provided by Netskope. This individual will work across cloud infrastructure, networking, cybersecurity, DevSecOps, identity-centric security, and compliance teams to implement and continuously improve enterprise security capabilities.

Key Responsibilities

• Design, engineer, implement, and maintain secure infrastructure and security architectures, including access to on premise and cloud applications.
• Engineer and troubleshoot Software Defined Networking integrating Netskope and Cisco platforms.
• Develop and implement cloud security architectures based on Zero Trust principles, including identity-centric access controls, segmentation, and Zero Trust Network Access (ZTNA).
• Design and implement SASE/SSE security capabilities, including Secure Web Gateway (SWG), Cloud Firewall, Private Access, and Data Loss Prevention (DLP).
• Integrate cloud security controls into DevSecOps and automated deployment workflows.
• Develop technical architecture documentation, design documentation, implementation plans, test plans, standard operating procedures, and other engineering artifacts.
• Translate cybersecurity policies, security controls, and compliance requirements into implementable technical solutions.
• Troubleshoot complex cloud, network, security, and application connectivity issues.
• Work with cybersecurity, network, cloud, application, and infrastructure teams to identify and resolve security and architecture issues.
• Lead technical evaluations, proof-of-concepts, pilots, testing, and phased enterprise deployments.
• Provide technical leadership and mentoring to engineers and other technical personnel.
• Serve as a senior technical SME to customers, program leadership, security stakeholders, and engineering teams.

Qualifications

Required

• BS and 14+ years of professional experience in cybersecurity, cloud engineering, proxy, network security, security architecture, or a closely related field.
• Ability to obtain and maintain a Public Trust requiring U.S. Citizenship.
• 5+ years of hands-on experience with Netskope/Blue Coat/Zscaler designing, implementing, or securing cloud environments.
• Demonstrated experience serving in a prior role as a Security Architect, Cloud Architect, Network Architect, or Network Engineering Lead, with responsibility for designing and implementing secure enterprise infrastructure in complex environments.
• Demonstrated experience with Zero Trust security architectures and/or ZTNA.
• Experience with cloud networking and security, including VPCs, network segmentation, routing, firewalls, and secure connectivity.
• Experience translating cybersecurity requirements into technical architecture and engineering solutions.
• Experience producing technical architecture and engineering documentation.
• Experience troubleshooting complex cloud and network security issues.
• Experience providing technical leadership to engineering teams and serving as a customer-facing technical SME.
• Experience leading technical pilots, demonstrations, proof-of-concepts, and phased deployments.

Preferred Qualifications

• Experience supporting U.S. Department of Defense (DoD) or large federal civilian environments, working with security and engineering stakeholders. Experience developing or implementing security automation and/or Infrastructure as Code (IaC).
• Certified Netskope Engineer, with Direct experience implementing Netskope or comparable SASE/SSE platforms in large government organizations.
• Cisco Certified Network Associate or higher.
• Experience leading enterprise-scale cloud security deployments.
• Experience with NIST 800-53, RMF, CDM, STIG, DIACAP, or comparable federal security frameworks.
• Experience with Splunk, NetWitness, SolarWinds, Wireshark, or comparable security/network monitoring tools.
• Experience with Docker, Kubernetes, MicroK8s, or other container technologies.
• Experience developing automated troubleshooting, diagnostics, reporting, or security operations workflows.

Target salary range: $160,001 - $200,000. The estimate displayed represents the typical salary range for this position based on experience and other factors.