Senior Cloud Security Engineer - Multi-Cloud (Federal)

Koniag Government Services; Washington (District of Columbia); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Health, dental & vision insurance

401K with company matching

Flexible spending accounts

Paid holidays

Three weeks PTO

Job summary

Koniag Technology Solution, a Koniag Government Services company, seeks an experienced Cloud Security Engineer to support cloud security architecture, implementation, and continuous monitoring across AWS, Azure, and GCP in a federal context.

The ideal candidate has hands-on security experience across multiple clouds, maintains current cyber expertise, and can document controls for A&A activities to support government customers. A Secret clearance is required.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related IT or security field from an accredited college or university.
• 5+ years of professional experience in IT/network engineering, security engineering, system administration, or security operations.
• Demonstrated experience with FISMA, FedRAMP, and NIST SP 800-53 security frameworks and control families.
• Active Secret security clearance or higher.

Responsibilities

• Engineer and design security solutions across cloud platforms including AWS, Microsoft Azure, and GCP that manage risk and meet relevant security regulations, controls, and policies.
• Implement security designs by installing, configuring, and testing cloud-native services, associated third-party services, and security software across multi-cloud environments.
• Determine how to effectively leverage native security services from cloud providers and identify gaps that must be addressed through additional tools, software, or third-party services.
• Implement and manage security tools and services including OS hardening, cloud-native security features (e.g., AWS Config, Azure Security Center, GCP Security Command Center), vulnerability management tools such as Qualys, intrusion detection tools such as Tripwire, and SIEM solutions such as Splunk.
• Develop and maintain processes and procedures for the operation and use of implemented security tools and services.
• Prepare Assessment and Authorization (A&A) documentation including System Security Plans (SSPs), security control worksheets, and other supporting artifacts.
• Participate in the assessment of system security controls to validate proper implementation and identify weaknesses or gaps in compliance posture.
• Perform continuous monitoring of cloud environments using implemented solutions and tools to detect and respond to security events.
• Conduct security impact assessments of proposed changes to cloud environments to identify adverse shifts in security risk posture or compliance standing.
• Identify new and innovative ways to leverage existing toolsets to automate security management, monitoring, and related processes in order to reduce risk and operational costs.

Skills

AWS

Azure

GCP

Security architecture

Vulnerability management

SIEM (Splunk)

A&A documentation

OS hardening

FISMA/NIST

Active Secret clearance

Education

Bachelor's degree

Tools

Qualys

Tripwire

Splunk

AWS Config

Azure Security Center

GCP Security Command Center

Terraform

Job description

Koniag Technology Solution, a Koniag Government Services company, seeks an experienced Cloud Security Engineer to support cloud security architecture, implementation, and continuous monitoring across AWS, Azure, and GCP in a federal context.

The ideal candidate has hands-on security experience across multiple clouds, maintains current cyber expertise, and can document controls for A&A activities to support government customers. A Secret clearance is required.